spice-server-0.12.4-6.AXS4.1

The Simple Protocol for Independent Computing Environments (SPICE) is a remote display system built for virtual environments which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures.

This package contains the runtime libraries for any application that wishes to be a SPICE server.

Security issues fixed with this release:

• CVE-2013-4282
Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.

Fixed bugs:

• Previously, the SPICE server assumed that the client was connected until they got disconnected, and continued to communicate with it even if unresponsive. This could lead to queues filling up. Now the SPICE server disconnect as soon as the client is unresponsive.