-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 24 Jul 2026 12:16:03 +0530 Source: spice-vdagent Binary: spice-vdagent spice-vdagent-dbgsym Architecture: source amd64 Version: 0.20.0-2+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: Debian QA Group <packages@qa.debian.org> Changed-By: Abhijith PA <abhijith@debian.org> Description: spice-vdagent - Spice agent for Linux Changes: spice-vdagent (0.20.0-2+deb11u1) bullseye-security; urgency=high . * Fix CVE-2026-57965: Heap buffer overflow * Fix CVE-2026-57966: Path traversal vulnerability Checksums-Sha1: 79c1fd5e6e5fc969fdffe467f7987e956f39d588 2511 spice-vdagent_0.20.0-2+deb11u1.dsc 93f67af0586f22af31074b47521e9a1953a5ce58 152510 spice-vdagent_0.20.0.orig.tar.bz2 2a416340a9983564bea442b0eb1c8e4197147615 833 spice-vdagent_0.20.0.orig.tar.bz2.asc 4b8f653e65e12504a0b25d880583599d0fe238bd 22608 spice-vdagent_0.20.0-2+deb11u1.debian.tar.xz 0ce3a642b33b4c6be0480b8d5a8d850216993bdc 157088 spice-vdagent-dbgsym_0.20.0-2+deb11u1_amd64.deb d3c3311fd45ad93130346960f90d463651f41391 15233 spice-vdagent_0.20.0-2+deb11u1_amd64.buildinfo e34ada5549277dab04d58c81983df0d49519ee8e 57276 spice-vdagent_0.20.0-2+deb11u1_amd64.deb Checksums-Sha256: 8e2707729b7f6269e1b86b20467f0143fd5fcd68268ac18862993cf572a2cca3 2511 spice-vdagent_0.20.0-2+deb11u1.dsc 2e6b7222675ee19ea38c52165abe4d836c2ac5d5bf902d4dfca13da1ec143359 152510 spice-vdagent_0.20.0.orig.tar.bz2 d2863154dac77d3ab3cfe87b139429041bdad4ff8bf73d75c3726ab248fce340 833 spice-vdagent_0.20.0.orig.tar.bz2.asc 0a0c73a8903ae8e4db5e7a9062aa7815cef54bf46bb9f139c66f0b92aa6ccff2 22608 spice-vdagent_0.20.0-2+deb11u1.debian.tar.xz 02bf78be1db0d87d5208c4a9d28774b16586df1396ed7f67904f0d10c609bc5e 157088 spice-vdagent-dbgsym_0.20.0-2+deb11u1_amd64.deb 0aeeff48d413b41e8b7c15057c39356c877ba745a89beac624adb8704b7b1260 15233 spice-vdagent_0.20.0-2+deb11u1_amd64.buildinfo ee1913dbb01277ad8aa7cd11e05c533bd65bd1da71658dad7fc4107e749f93b0 57276 spice-vdagent_0.20.0-2+deb11u1_amd64.deb Files: 075abf46a5dd3014f053b10a2a1b71eb 2511 x11 optional spice-vdagent_0.20.0-2+deb11u1.dsc a87552f28aba82640343608fe69a1586 152510 x11 optional spice-vdagent_0.20.0.orig.tar.bz2 70c1e7895c2cf651a63e2db9ac87616d 833 x11 optional spice-vdagent_0.20.0.orig.tar.bz2.asc ea9f52ebd65411558921d6c2844ea23c 22608 x11 optional spice-vdagent_0.20.0-2+deb11u1.debian.tar.xz 41f55d4b7a8a2d5ee257814116c5693f 157088 debug optional spice-vdagent-dbgsym_0.20.0-2+deb11u1_amd64.deb c3f30969c587ad9719b473843fa1be48 15233 x11 optional spice-vdagent_0.20.0-2+deb11u1_amd64.buildinfo ad12b60ec95ba2010dcd304395753b28 57276 x11 optional spice-vdagent_0.20.0-2+deb11u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEE7xPqJqaY/zX9fJAuhj1N8u2cKO8FAmpjJocUHGFiaGlqaXRo QGRlYmlhbi5vcmcACgkQhj1N8u2cKO+Tmw/+M6dajXs9fR/Z2/q1BBuc70n/LJnh xz1fpTwqXSjHWAYxY3f00Au3s/eS5faAExFejwlrCAG+3Gp0F7213Jsj3ZSUsim+ OAPOfgKwewMEt5zMl2lpOYYS/JlmHg3lVOiOtHOPX9vXgw7GSIJp6Nm+11Yo1Kpy 4CxvKKLG/VQF8ufU4d3cqqjtsYwxXlw2H2DzoU06knOWE3U64NLiPQZu5cBP7tYL IvVv9lf1nqQEyF305IxIOWRLzTaMzBfeCUjRd+BGsKXprHm9wlmKghcpHY5U3WvZ kGW0IcUFSZL56sEBsI1O4FNYmKH48oVNglLqsT8UUXlUF+L82TMmDYL/T6lsRxS/ jLNfxpH7/kEuFvrjmilrTD8WxXmdDgqMmVQjdBVtUdYrii+jgRKkAlgpA9DJqooP bQ749RZtul72fRXzx7vt45WsfdWFzZ4jtJhcN6GaIutb4hxuftp+S9AtLnQzY4Wv LWui7K0bvX9rDVDD7nRNl7yGDo23ITZXSdlnA3Tw3rlaoaQ0rPAeDhzRGf1nKQAF 0bfdwTztAe0oqeu/jV1L12OQgcoPGJXVGuo80tfR5euQiCuSW6LiIvBB7bFPmYsB 4OrniV+NPDBVoQnUzbLYxPwCMRA5dyxnzVFgBrZ4noCDdiiP540b3dDDLwRlE/M/ b8k0RInRf1pPR6c= =vIi2 -----END PGP SIGNATURE-----