[ubuntu/jammy-security] spice-vdagent 0.22.1-1ubuntu0.1 (Accepted)

[Marc Deslauriers]

spice-vdagent (0.22.1-1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: DoS via integer overflow
    - debian/patches/CVE-2026-57965.patch: fix(udscs): Prevent integer overflow
      in udscs_write() buf_size calculation in src/udscs.c.
    - CVE-2026-57965
  * SECURITY UPDATE: path traversal issue
    - debian/patches/CVE-2026-57966.patch: fix(file-xfers): Reject path
      traversal in file transfer filenames in src/vdagent/file-xfers.c,
      tests/test-file-xfers.c.
    - CVE-2026-57966

Date: 2026-09-01 19:12:36.821764+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/spice-vdagent/0.22.1-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.