MGASA-2026-0384

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2026-0384.html

Import Source

https://advisories.mageia.org/MGASA-2026-0384.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2026-0384

Upstream

CVE-2026-57965

CVE-2026-57966

Published

2026-09-09T04:15:20Z

Modified

2026-09-09T04:30:04Z

Summary

Updated spice-vdagent packages fix security vulnerabilities

Details

Integer overflow in udscs_write() leading to heap buffer overflow. (CVE-2026-57965) Path traversal in file transfer via unsanitized filename. (CVE-2026-57966)

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:10 / spice-vdagent

Package

Name: spice-vdagent
Purl: pkg:rpm/mageia/spice-vdagent?arch=source&distro=mageia-10

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.23.0-1.1.mga10

Ecosystem specific

{
    "section": "core"
}

Database specific

source

"https://advisories.mageia.org/MGASA-2026-0384.json"

Mageia:9 / spice-vdagent

Package

Name: spice-vdagent
Purl: pkg:rpm/mageia/spice-vdagent?arch=source&distro=mageia-9

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.22.1-2.1.mga9

Ecosystem specific

{
    "section": "core"
}

Database specific

source

"https://advisories.mageia.org/MGASA-2026-0384.json"