spice-gtk-0.20-11.AXS4

Client libraries for SPICE desktop servers.

Security issues fixed with this release:

• CVE-2013-4324
spice-gtk 0.14, and possibly other versions, invokes the polkit authority using the insecure polkit_unix_process_new API function, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.

Fixed bugs:

• Upgraded to upstream version 0.20, which provides a number of bug fixes and enhancements over the previous version. Notable improvements are tunnelling through the HTTP proxy server, improved multi-monitor support, and various USB redirection fixes.

• Tightened the dependencies so that spice-gtk cannot be installed unless the GTK+ and GLib versions it requires are installed as well.

• Spice-gtk can now connect to a secure port y default, instead of always trying plain ports first.

• Previously, pressing Shift+CTRL+V on a message window in MS Outlook would crash the spice-gtk client. This has been fixed.

• Previously, on a MS Windows guest, the mouse pointer was not contrasted enough when put over a PuTTy session. This has been fixed.

• Timeout has been reduced from 120 to 10 seconds when trying to connect to an unreachable host.

• Previously, spice-gtk Smartcard support stopped after migration or restarting a guest when it was already initialized. The current workaround is to not disable software Smartcard support at spice-gtk connection time if libcacard reports that software Smartcard support is already initialized.

Enhancements:

• Added support for HTTP proxy server support in SPICE clients. The SPICE client nowconnects to the remote server using the proxy server specified by the environment SPICE_PROXY=host:port variable, or by the controller.

• When using copy and paste between Asianux Server Linux and Microsoft Windows, the end of line sequences are translated into the target OS.

• Adjusted the adaptive video streaming settings to improve experience over low speed networks.