Aviso de segurança USN-8723-1 corrige falhas no SPICE vdagent no Ubuntu

Detalhes

O Ubuntu publicou o aviso de segurança USN-8723-1, sobre vulnerabilidades no SPICE vdagent, que no Ubuntu é fornecido pelo pacote spice-vdagent. O anúncio é de 3 de setembro de 2026 e a fonte oficial é https://ubuntu.com/security/notices/USN-8723-1.

O aviso está associado aos CVEs CVE-2026-57965 e CVE-2026-57966.

Dados estruturados do aviso, conforme publicados:

{
"project": "ubuntu",
"event": "security",
"identifier": "USN-8723-1",
"version": null,
"announcementDate": "2026-09-03 12:43:08+00",
"officialSource": "https://ubuntu.com/security/notices/USN-8723-1",
"cves": [
"CVE-2026-57965",
"CVE-2026-57966"
],
"fixedPackages": [
{
"release": "26.04 LTS resolute",
"package": "spice-vdagent",
"version": "0.23.0-1ubuntu0.1",
"access": "standard update"
},
{
"release": "24.04 LTS noble",
"package": "spice-vdagent",
"version": "0.22.1-4ubuntu0.1",
"access": "standard update"
},
{
"release": "22.04 LTS jammy",
"package": "spice-vdagent",
"version": "0.22.1-1ubuntu0.1",
"access": "standard update"
}
],
"editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue."
}

Versões corrigidas

O aviso lista versões corrigidas do pacote spice-vdagent para três releases LTS: