< back to search

gpp_maybe Security update for spice-vdagent

SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-3485

This update for spice-vdagent fixes the following issues: - CVE-2026-57965: integer overflow in `udscs_write()` can lead to heap buffer overflow (bsc#1269553). - CVE-2026-57966: improper sanitization allows a compromised SPICE host to write arbitrary files to any location on the guest operating system (bsc#1269554).

Release Date

Aug 4 2026
References

Bugzilla: 1269553, 1269554
CVEs: CVE-2026-57965, CVE-2026-57966
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Desktop Applications Module 15.7 aarch64

Packages

spice-vdagent
Agent for Spice guests

0.22.1-150500.4.3.1 lock rpm lock src

Desktop Applications Module 15.7 ppc64le

Packages

spice-vdagent
Agent for Spice guests

0.22.1-150500.4.3.1 lock rpm lock src

Desktop Applications Module 15.7 x86_64

Packages

spice-vdagent
Agent for Spice guests

0.22.1-150500.4.3.1 lock rpm lock src

Desktop Applications Module 15.7 s390x

Packages

spice-vdagent
Agent for Spice guests

0.22.1-150500.4.3.1 lock rpm lock src