-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 29 Jul 2026 13:50:19 +0530
Source: spice-vdagent
Binary: spice-vdagent spice-vdagent-dbgsym
Architecture: arm64
Version: 0.22.1-4.1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: arm64 Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Abhijith PA <abhijith@debian.org>
Description:
 spice-vdagent - Spice agent for Linux
Closes: 1141317 1141318
Changes:
 spice-vdagent (0.22.1-4.1+deb13u1) trixie; urgency=medium
 .
    * Fix CVE-2026-57965: Heap buffer overflow (Closes: #1141318)
    * Fix CVE-2026-57966: Path traversal vulnerability.
      (Closes: #1141317)
Checksums-Sha1:
 6af2fdeeb637de701ef82d3ea87c9be6dd2b1693 185064 spice-vdagent-dbgsym_0.22.1-4.1+deb13u1_arm64.deb
 507c54a26ceccf710b14e9407410f13bfa4c96d1 15330 spice-vdagent_0.22.1-4.1+deb13u1_arm64-buildd.buildinfo
 bc8718446cc73ba71128b33d885e798c6a25a0b4 58504 spice-vdagent_0.22.1-4.1+deb13u1_arm64.deb
Checksums-Sha256:
 45ca72e1edc96625bcc6cbb227487db7e41ffbbcbfe5f494b0f092459e756ea9 185064 spice-vdagent-dbgsym_0.22.1-4.1+deb13u1_arm64.deb
 4000d5b76b8bb3a7a4aa667c46e926a5c4a6ed272f638431156fe72969b5e087 15330 spice-vdagent_0.22.1-4.1+deb13u1_arm64-buildd.buildinfo
 262de60f4aca3ee00d748f85e6f46d3f1dbf97b27c70843998a58fb27004a745 58504 spice-vdagent_0.22.1-4.1+deb13u1_arm64.deb
Files:
 141b1067e97d0fe5a57b9d3aa4f3a7ce 185064 debug optional spice-vdagent-dbgsym_0.22.1-4.1+deb13u1_arm64.deb
 6a9cd8279a98bc182f3513aa14aea3e6 15330 x11 optional spice-vdagent_0.22.1-4.1+deb13u1_arm64-buildd.buildinfo
 c9a27e0da417ff45616f567efea2a540 58504 x11 optional spice-vdagent_0.22.1-4.1+deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=ekAD
-----END PGP SIGNATURE-----