-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 29 Jul 2026 13:50:19 +0530
Source: spice-vdagent
Binary: spice-vdagent spice-vdagent-dbgsym
Architecture: amd64
Version: 0.22.1-4.1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Abhijith PA <abhijith@debian.org>
Description:
 spice-vdagent - Spice agent for Linux
Closes: 1141317 1141318
Changes:
 spice-vdagent (0.22.1-4.1+deb13u1) trixie; urgency=medium
 .
    * Fix CVE-2026-57965: Heap buffer overflow (Closes: #1141318)
    * Fix CVE-2026-57966: Path traversal vulnerability.
      (Closes: #1141317)
Checksums-Sha1:
 3015d408a9bf69fac0f0ff6b49cab69d997081aa 188272 spice-vdagent-dbgsym_0.22.1-4.1+deb13u1_amd64.deb
 bb50a2c7706896d97f9989335530104bc82e4fb8 15280 spice-vdagent_0.22.1-4.1+deb13u1_amd64-buildd.buildinfo
 fd25ba85acb1d5fd6d41ac68c8d28fe402755d84 61492 spice-vdagent_0.22.1-4.1+deb13u1_amd64.deb
Checksums-Sha256:
 81ed90a99d5a3684145cd55686b4d0fed5162cba524a3d8f7680f4b7da60c446 188272 spice-vdagent-dbgsym_0.22.1-4.1+deb13u1_amd64.deb
 36041ba80cef627da0f046178bfea5c75050708d83137e8e4c88631a241f2004 15280 spice-vdagent_0.22.1-4.1+deb13u1_amd64-buildd.buildinfo
 70fbd2d557751ddb4ac6698fbf9f175efbe393539d9bbb05107308ae35c60826 61492 spice-vdagent_0.22.1-4.1+deb13u1_amd64.deb
Files:
 badf88f0468002a707eec128b355599b 188272 debug optional spice-vdagent-dbgsym_0.22.1-4.1+deb13u1_amd64.deb
 3bbb8aa86f75560a68b5ea607e3589e2 15280 x11 optional spice-vdagent_0.22.1-4.1+deb13u1_amd64-buildd.buildinfo
 1a2fb0cc590ebaa667d7dad93d54b544 61492 x11 optional spice-vdagent_0.22.1-4.1+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmrsrwcACgkQPkCWRKsh
20eJHw//aPphtXfzGzdDi6gL2bz26bx68CxMWHQZxHm07uJCmty8x4sJPb3tV3hI
rkmkfiqOZl8b34i/1umd4m81GlJjTEapuauxrMNs0+UWy+OAzk2jRZpXdQFVyaj2
U1ZxnAI8hJpgm8+o1daCs8ccMyAr9yPE2rPW/a7gJCbFHiLqmzHJ6EkuVTWK0q00
km7DeoqGTuJQwakRfP82QE4KMFhbHTpOYPmc+SVXiAeReh5mRMfv7tY8aC0lgCv0
focnHumNkMUctg/EgMJKkNoxZtC0T6YvxtsswejXuRJaHtkzXFpiuMDDMSQRKXrc
DYSbNMjMprQ0oxHdAxObkqjZLmQK58eHQnYk/SnYBlSgKnOFaFbaTeKYdpoNhrJk
0hlcFxCf9QTUwl4X+MG0ns6M4mJA8fvU5AoH/aRfcwJWfkjLYNHu7/rtZ5CbADle
pmeIhIF5/aaWpgSoEl7QCBfLEO8P34xRoaM321LBkad74hoxxjusR5pMY7sQ7igf
RTW6SuDRPV5d9Ev8Xhx8F9b04rAJ8IPezrfRurJLFCXP9m/5744H6f8P5gJNTosq
PgOiOnX1yW+ORGFss0YqOGxAn8+AKtkTzJNaxMPHgP2WFIFwxVJkb+PvGC9jyjMS
6Ix5fyqvrHzAf+TeZpsETzU/lM4ymfwZ5+XUytk269OkDoynYr0=
=nav/
-----END PGP SIGNATURE-----