| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: libspice-server-devel | Distribution: openSUSE Tumbleweed |
| Version: 0.16.0 | Vendor: openSUSE |
| Release: 3.1 | Build date: Mon Oct 19 22:23:01 2026 |
| Group: Development/Languages/C and C++ | Build host: reproducible |
| Size: 36740 | Source RPM: spice-0.16.0-3.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://www.spice-space.org/ | |
| Summary: Development files for building SPICE-server | |
Development files for building SPICE-server. The SPICE server is used to expose a remote machine's display and devices.
GPL-2.0-or-later OR LGPL-2.1-or-later
* Mon Oct 19 2026 carnold@suse.com
- bsc#1285876 - VUL-0: CVE-2026-105958: spice: heap corruption due
to insufficient bounds validation of client-supplied offsets in
multiple migration data handlers
000-smartcard-fix-NULL-dereference-of-scc-in-on_message_from_device.patch
001-CVE-2026-105958-migration-dont-abort-on-invalid-migration-data.patch
002-CVE-2026-105958-reds-fix-wrong-struct-size-in-agent-migration-data-restore.patch
003-CVE-2026-105958-display-validate-surface_id-bounds-in-migration-restore.patch
004-CVE-2026-105958-display-validate-surfaces_at_client_ptr-in-display-migration-data.patch
005-CVE-2026-105958-reds-validate-agent-migration-data-fields-before-use.patch
006-CVE-2026-105958-char-device-validate-write_data_ptr-bounds-in-migration-restore.patch
007-CVE-2026-105958-smartcard-validate-migration-read-bounds-and-buffer-sizing.patch
008-CVE-2026-105958-smartcard-remove-spice_assert-on-attacker-controlled-read_size.patch
009-CVE-2026-105958-smartcard-dont-allocate-based-on-attacker-controlled-message-length.patch
- bsc#1285875 - VUL-0: CVE-2026-105959: spice: heap buffer
overflow due to incorrect truncation of `size_t` allocation in
the GLZ encoder dictionary restore path
010-CVE-2026-105959-glz-fix-integer-truncation-in-encoder-malloc-callback.patch
011-CVE-2026-105959-glz-validate-max_encoders-from-migration-data.patch
* Tue Sep 15 2026 carnold@suse.com
- bsc#1278684 - Core dump messages when a vm is shut down on
KVM/Qemu.
Fix-keyboard-and-mouse-state-leaks-on-interface-removal.patch
* Tue Jul 22 2025 carnold@suse.com
- Update to v0.16.0 release
* Added DMA-BUF encoder support for GStreamer 1.24+
* Implemented hardware-accelerated encoding for Intel GPUs
* Added environment variable SPICE_CONVERTER_PREFERRED_FORMAT to override converter format
* Multi-plane GL scanout support (new spice_qxl_gl_scanout2())
* Improved memslot to preserve address bits for ARM64 TBI/AMD UAI/Intel LAM
* Optimized BGR24/BGRX32 conversion when JCS_EXTENSIONS is defined
* Removed GStreamer 0.10 support
* Send real time to client, instead of synchronizing on both ends, attempting to fix latency issue
* Fixes a GL_DRAW cookie assertion race
* Add SSL_OP_NO_RENEGOTIATION fallback path, fixing w/LibreSSL 3.7.2 builds
* Fix Win32 builds
* Fix TCP_NOPUSH usage on Darwin
- Drop patches contained in new tarball
spice-no-six.patch
* Tue Mar 05 2024 Antonio Larrosa <alarrosa@suse.com>
- Add patch to fix build with gstreamer 1.24:
* fix-build-with-gstreamer-1.24.patch
* Mon Feb 05 2024 pgajdos@suse.com
- do not require six
https://trello.com/c/MO53MocR/143-remove-python3-six
- added patches
https://gitlab.freedesktop.org/spice/spice-common/-/commit/29dacb5f53f5183fb089a3fb02d081dd08bde8a1
+ spice-no-six.patch
* Wed May 31 2023 carnold@suse.com
- Update to v0.15.2 release
* This is a bug fix release with no upstream changelog
* Tue Nov 29 2022 carnold@suse.com
- Update to v0.15.1 release
* This is a bug fix release with no upstream changelog
- Drop fix-build-with-gstreamer-1.20.patch
* Wed Mar 23 2022 Antonio Larrosa <alarrosa@suse.com>
- Add patch to let spice build with gstreamer 1.20.x
(https://gitlab.freedesktop.org/spice/spice/-/merge_requests/207)
* fix-build-with-gstreamer-1.20.patch
* Fri Sep 03 2021 carnold@suse.com
- Update to v0.15.0 release
This is the first release in the new 0.15.x stable series.
* Minor updates to CI
* Some compatibility with OpenSSL
* Change the behavior of handle_dev_start ignoring multiple start requests
* Ignore multiple calls to handle_dev_stop
* Pick up newer spice-common to fix a buffer overflow issue
- Dropped patches contained in new tarball
0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
0002-quic-Check-image-size-in-quic_decode_begin.patch
0003-quic-Check-RLE-lengths.patch
0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch
0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch
* Thu May 27 2021 carnold@suse.com
- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
initiated renegotiation denial of service
0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch
/usr/include/spice-server /usr/include/spice-server/spice-audio.h /usr/include/spice-server/spice-char.h /usr/include/spice-server/spice-core.h /usr/include/spice-server/spice-input.h /usr/include/spice-server/spice-migration.h /usr/include/spice-server/spice-qxl.h /usr/include/spice-server/spice-replay.h /usr/include/spice-server/spice-server.h /usr/include/spice-server/spice-version.h /usr/include/spice-server/spice.h /usr/lib64/libspice-server.so /usr/lib64/pkgconfig/spice-server.pc
Generated by rpm2html 1.8.1
Fabrice Bellet, Mon Oct 26 00:13:59 2026