File _patchinfo of Package patchinfo.8487

<patchinfo incident="8487">
  <issue tracker="bnc" id="1101295">VUL-0: CVE-2018-10893: spice, spice-gtk: Insufficient encoding checks for LZ can cause different integer/buffer overflows</issue>
  <issue tracker="bnc" id="1104448">VUL-0: CVE-2018-10873: spice-gtk,spice: post-auth crash or potential heap corruption when demarshalling</issue>
  <issue tracker="cve" id="2018-10893"/>
  <issue tracker="cve" id="2018-10873"/>
  <category>security</category>
  <rating>important</rating>
  <packager>cbosdonnat</packager>
  <description>This update for spice fixes the following issues:

Security issues fixed:

- CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448)
- CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)
</description>
  <summary>Security update for spice</summary>
</patchinfo>