UbuntuUpdates.org

Package "spice-vdagent"

Name: spice-vdagent

Description:

Spice agent for Linux
Latest version: 0.22.1-4ubuntu0.1
Release: noble (24.04)
Level: updates
Repository: main
Homepage: https://www.spice-space.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "spice-vdagent"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "spice-vdagent" in Noble

Repository Area Version
base main 0.22.1-4build3
security main 0.22.1-4ubuntu0.1

Changelog

Version: 0.22.1-4ubuntu0.1 2026-09-03 16:07:40 UTC

spice-vdagent (0.22.1-4ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: DoS via integer overflow
    - debian/patches/CVE-2026-57965.patch: fix(udscs): Prevent integer overflow
      in udscs_write() buf_size calculation in src/udscs.c.
    - CVE-2026-57965
  * SECURITY UPDATE: path traversal issue
    - debian/patches/CVE-2026-57966.patch: fix(file-xfers): Reject path
      traversal in file transfer filenames in src/vdagent/file-xfers.c,
      tests/test-file-xfers.c.
    - CVE-2026-57966

 -- Marc Deslauriers Tue, 01 Sep 2026 14:27:28 -0400
CVE-2026-57965 A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This
CVE-2026-57966 A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files to any loc


About   -   Send Feedback to @ubuntu_updates