CVE catalog

CVE-2020-14355

spice affected and fixed versions

[CVE catalog]

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messages that, when processed by the QUIC image compression algorithm, result in a process crash or potential code execution.

Severity
Medium · CVSS 6.6CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
2.66% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixiespice0.14.3-2FixedDistribution-reported fixed boundary[CVE-2020-14355]
Debiantrixiespice0.15.2-1Fixed[CVE-2020-14355]
Debiantrixiespice-gtk0.39-1FixedDistribution-reported fixed boundary[CVE-2020-14355]
Debiantrixiespice-gtk0.42-3Fixed[CVE-2020-14355]
Debiansidspice0.14.3-2FixedDistribution-reported fixed boundary[CVE-2020-14355]
Debiansidspice0.16.0-3Fixed[CVE-2020-14355]
Debiansidspice-gtk0.39-1FixedDistribution-reported fixed boundary[CVE-2020-14355]
Debiansidspice-gtk0.42-4Fixed[CVE-2020-14355]
Debianforkyspice0.14.3-2FixedDistribution-reported fixed boundary[CVE-2020-14355]
Debianforkyspice0.16.0-3Fixed[CVE-2020-14355]
Debianforkyspice-gtk0.39-1FixedDistribution-reported fixed boundary[CVE-2020-14355]
Debianforkyspice-gtk0.42-4Fixed[CVE-2020-14355]

Showing 12 fix observations. All 121 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Alpine3.15spice0.15.0-r0UnknownSource applicability is not established[ALPINE-CVE-2020-14355]
Alpine3.16spice0.15.0-r0UnknownSource applicability is not established[ALPINE-CVE-2020-14355]
Alpine3.17spice0.15.0-r0UnknownSource applicability is not established[ALPINE-CVE-2020-14355]
Alpine3.18spice0.15.0-r0UnknownSource applicability is not established[ALPINE-CVE-2020-14355]
Alpine3.19spice0.15.0-r0UnknownSource applicability is not established[ALPINE-CVE-2020-14355]
Alpine3.20spice0.15.0-r0UnknownSource applicability is not established[ALPINE-CVE-2020-14355]
Alpine3.21spice0.15.0-r0UnknownSource applicability is not established[ALPINE-CVE-2020-14355]
Alpine3.22spice0.15.0-r0UnknownSource applicability is not established[ALPINE-CVE-2020-14355]
Alpine3.23spice0.15.0-r0UnknownSource applicability is not established[ALPINE-CVE-2020-14355]
Alpine3.24spice0.15.0-r0UnknownSource applicability is not established[ALPINE-CVE-2020-14355]
Debianbookwormspice0.14.3-2FixedDistribution-reported fixed boundary[CVE-2020-14355]
Debianbookwormspice0.15.1-1Fixed[CVE-2020-14355]
Debianbookwormspice-gtk0.39-1FixedDistribution-reported fixed boundary[CVE-2020-14355]
Debianbookwormspice-gtk0.42-1Fixed[CVE-2020-14355]
Debianforkyspice0.14.3-2FixedDistribution-reported fixed boundary[CVE-2020-14355]
Debianforkyspice0.16.0-3Fixed[CVE-2020-14355]
Debianforkyspice-gtk0.39-1FixedDistribution-reported fixed boundary[CVE-2020-14355]
Debianforkyspice-gtk0.42-4Fixed[CVE-2020-14355]
Debiansidspice0.14.3-2FixedDistribution-reported fixed boundary[CVE-2020-14355]
Debiansidspice0.16.0-3Fixed[CVE-2020-14355]
Debiansidspice-gtk0.39-1FixedDistribution-reported fixed boundary[CVE-2020-14355]
Debiansidspice-gtk0.42-4Fixed[CVE-2020-14355]
Debiantrixiespice0.14.3-2FixedDistribution-reported fixed boundary[CVE-2020-14355]
Debiantrixiespice0.15.2-1Fixed[CVE-2020-14355]
Debiantrixiespice-gtk0.39-1FixedDistribution-reported fixed boundary[CVE-2020-14355]
Debiantrixiespice-gtk0.42-3Fixed[CVE-2020-14355]
Opensuseleap 15.2spice0.14.2-lp152.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2020:1802-1]
Opensuseleap 15.2spice-gtk0.37-lp152.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2020:1803-1]
Suseenterprise storage 5spice0.12.8-15.1UnknownSource applicability is not established[SUSE-SU-2020:3084-1]
Suseenterprise storage 5spice-gtk0.33-3.9.1UnknownSource applicability is not established[SUSE-SU-2020:3085-1]
Suseenterprise storage 6spice0.14.1-4.3.1UnknownSource applicability is not established[SUSE-SU-2021:1956-1]
Suseenterprise storage 6spice-gtk0.35-3.3.1UnknownSource applicability is not established[SUSE-SU-2021:1928-1]
Susehpe helion openstack 8spice0.12.8-15.1UnknownSource applicability is not established[SUSE-SU-2020:3084-1]
Susehpe helion openstack 8spice-gtk0.33-3.9.1UnknownSource applicability is not established[SUSE-SU-2020:3085-1]
Suselinux enterprise high performance computing 15 sp1-esposspice0.14.1-4.3.1UnknownSource applicability is not established[SUSE-SU-2021:1956-1]
Suselinux enterprise high performance computing 15 sp1-esposspice-gtk0.35-3.3.1UnknownSource applicability is not established[SUSE-SU-2021:1928-1]
Suselinux enterprise high performance computing 15 sp1-ltssspice0.14.1-4.3.1UnknownSource applicability is not established[SUSE-SU-2021:1956-1]
Suselinux enterprise high performance computing 15 sp1-ltssspice-gtk0.35-3.3.1UnknownSource applicability is not established[SUSE-SU-2021:1928-1]
Suselinux enterprise high performance computing 15-esposspice0.14.0-4.9.1UnknownSource applicability is not established[SUSE-SU-2021:1901-1]
Suselinux enterprise high performance computing 15-esposspice-gtk0.34-3.6.1UnknownSource applicability is not established[SUSE-SU-2021:1911-1]
Suselinux enterprise high performance computing 15-ltssspice0.14.0-4.9.1UnknownSource applicability is not established[SUSE-SU-2021:1901-1]
Suselinux enterprise high performance computing 15-ltssspice-gtk0.34-3.6.1UnknownSource applicability is not established[SUSE-SU-2021:1911-1]
Suselinux enterprise module for basesystem 15 sp2spice-gtk0.37-3.3.2UnknownSource applicability is not established[SUSE-SU-2020:3071-1]
Suselinux enterprise module for server applications 15 sp2spice0.14.2-3.3.1UnknownSource applicability is not established[SUSE-SU-2020:3070-1]
Suselinux enterprise module for server applications 15 sp2spice-gtk0.37-3.3.2UnknownSource applicability is not established[SUSE-SU-2020:3071-1]
Suselinux enterprise server 12 sp2-bclspice0.12.7-10.12.1UnknownSource applicability is not established[SUSE-SU-2021:1902-1]
Suselinux enterprise server 12 sp2-bclspice-gtk0.31-9.13.1UnknownSource applicability is not established[SUSE-SU-2021:1905-1]
Suselinux enterprise server 12 sp3-bclspice0.12.8-15.1UnknownSource applicability is not established[SUSE-SU-2020:3084-1]
Suselinux enterprise server 12 sp3-bclspice-gtk0.33-3.9.1UnknownSource applicability is not established[SUSE-SU-2020:3085-1]
Suselinux enterprise server 12 sp3-ltssspice0.12.8-15.1UnknownSource applicability is not established[SUSE-SU-2020:3084-1]
Suselinux enterprise server 12 sp3-ltssspice-gtk0.33-3.9.1UnknownSource applicability is not established[SUSE-SU-2020:3085-1]
Suselinux enterprise server 12 sp4-ltssspice0.12.8-15.1UnknownSource applicability is not established[SUSE-SU-2020:3084-1]
Suselinux enterprise server 12 sp4-ltssspice-gtk0.33-3.9.1UnknownSource applicability is not established[SUSE-SU-2020:3085-1]
Suselinux enterprise server 12 sp5spice0.12.8-15.1UnknownSource applicability is not established[SUSE-SU-2020:3084-1]
Suselinux enterprise server 12 sp5spice-gtk0.33-3.9.1UnknownSource applicability is not established[SUSE-SU-2020:3085-1]
Suselinux enterprise server 15 sp1-bclspice0.14.1-4.3.1UnknownSource applicability is not established[SUSE-SU-2021:1956-1]
Suselinux enterprise server 15 sp1-bclspice-gtk0.35-3.3.1UnknownSource applicability is not established[SUSE-SU-2021:1928-1]
Suselinux enterprise server 15 sp1-ltssspice0.14.1-4.3.1UnknownSource applicability is not established[SUSE-SU-2021:1956-1]
Suselinux enterprise server 15 sp1-ltssspice-gtk0.35-3.3.1UnknownSource applicability is not established[SUSE-SU-2021:1928-1]
Suselinux enterprise server 15-ltssspice0.14.0-4.9.1UnknownSource applicability is not established[SUSE-SU-2021:1901-1]
Suselinux enterprise server 15-ltssspice-gtk0.34-3.6.1UnknownSource applicability is not established[SUSE-SU-2021:1911-1]
Suselinux enterprise server for sap applications 12 sp3spice0.12.8-15.1UnknownSource applicability is not established[SUSE-SU-2020:3084-1]
Suselinux enterprise server for sap applications 12 sp3spice-gtk0.33-3.9.1UnknownSource applicability is not established[SUSE-SU-2020:3085-1]
Suselinux enterprise server for sap applications 12 sp4spice0.12.8-15.1UnknownSource applicability is not established[SUSE-SU-2020:3084-1]
Suselinux enterprise server for sap applications 12 sp4spice-gtk0.33-3.9.1UnknownSource applicability is not established[SUSE-SU-2020:3085-1]
Suselinux enterprise server for sap applications 12 sp5spice0.12.8-15.1UnknownSource applicability is not established[SUSE-SU-2020:3084-1]
Suselinux enterprise server for sap applications 12 sp5spice-gtk0.33-3.9.1UnknownSource applicability is not established[SUSE-SU-2020:3085-1]
Suselinux enterprise server for sap applications 15spice0.14.0-4.9.1UnknownSource applicability is not established[SUSE-SU-2021:1901-1]
Suselinux enterprise server for sap applications 15spice-gtk0.34-3.6.1UnknownSource applicability is not established[SUSE-SU-2021:1911-1]
Suselinux enterprise server for sap applications 15 sp1spice0.14.1-4.3.1UnknownSource applicability is not established[SUSE-SU-2021:1956-1]
Suselinux enterprise server for sap applications 15 sp1spice-gtk0.35-3.3.1UnknownSource applicability is not established[SUSE-SU-2021:1928-1]
Suselinux enterprise software development kit 12 sp5spice0.12.8-15.1UnknownSource applicability is not established[SUSE-SU-2020:3084-1]
Suselinux enterprise software development kit 12 sp5spice-gtk0.33-3.9.1UnknownSource applicability is not established[SUSE-SU-2020:3085-1]
Susemanager proxy 4.0spice0.14.1-4.3.1UnknownSource applicability is not established[SUSE-SU-2021:1956-1]
Susemanager proxy 4.0spice-gtk0.35-3.3.1UnknownSource applicability is not established[SUSE-SU-2021:1928-1]
Susemanager retail branch server 4.0spice0.14.1-4.3.1UnknownSource applicability is not established[SUSE-SU-2021:1956-1]
Susemanager retail branch server 4.0spice-gtk0.35-3.3.1UnknownSource applicability is not established[SUSE-SU-2021:1928-1]
Susemanager server 4.0spice0.14.1-4.3.1UnknownSource applicability is not established[SUSE-SU-2021:1956-1]
Susemanager server 4.0spice-gtk0.35-3.3.1UnknownSource applicability is not established[SUSE-SU-2021:1928-1]
Suseopenstack cloud 8spice0.12.8-15.1UnknownSource applicability is not established[SUSE-SU-2020:3084-1]
Suseopenstack cloud 8spice-gtk0.33-3.9.1UnknownSource applicability is not established[SUSE-SU-2020:3085-1]
Suseopenstack cloud 9spice0.12.8-15.1UnknownSource applicability is not established[SUSE-SU-2020:3084-1]
Suseopenstack cloud 9spice-gtk0.33-3.9.1UnknownSource applicability is not established[SUSE-SU-2020:3085-1]
Suseopenstack cloud crowbar 8spice0.12.8-15.1UnknownSource applicability is not established[SUSE-SU-2020:3084-1]
Suseopenstack cloud crowbar 8spice-gtk0.33-3.9.1UnknownSource applicability is not established[SUSE-SU-2020:3085-1]
Suseopenstack cloud crowbar 9spice0.12.8-15.1UnknownSource applicability is not established[SUSE-SU-2020:3084-1]
Suseopenstack cloud crowbar 9spice-gtk0.33-3.9.1UnknownSource applicability is not established[SUSE-SU-2020:3085-1]
Ubuntu16.04spice0.12.5-1.1ubuntu2UnknownSource applicability is not established[USN-4572-1]
Ubuntu16.04spice0.12.6-4UnknownSource applicability is not established[USN-4572-1]
Ubuntu16.04spice0.12.6-4ubuntu0.1UnknownSource applicability is not established[USN-4572-1]
Ubuntu16.04spice0.12.6-4ubuntu0.2UnknownSource applicability is not established[USN-4572-1]
Ubuntu16.04spice0.12.6-4ubuntu0.3UnknownSource applicability is not established[USN-4572-1]
Ubuntu16.04spice0.12.6-4ubuntu0.4UnknownSource applicability is not established[USN-4572-1]
Ubuntu16.04spice0.12.6-4ubuntu0.5UnknownSource applicability is not established[USN-4572-1]
Ubuntu18.04spice0.12.8-2.2UnknownSource applicability is not established[USN-4572-1]
Ubuntu18.04spice0.14.0-1UnknownSource applicability is not established[USN-4572-1]
Ubuntu18.04spice0.14.0-1ubuntu1UnknownSource applicability is not established[USN-4572-1]
Ubuntu18.04spice0.14.0-1ubuntu2UnknownSource applicability is not established[USN-4572-1]
Ubuntu18.04spice0.14.0-1ubuntu2.1UnknownSource applicability is not established[USN-4572-1]
Ubuntu18.04spice0.14.0-1ubuntu2.2UnknownSource applicability is not established[USN-4572-1]
Ubuntu18.04spice0.14.0-1ubuntu2.4UnknownSource applicability is not established[USN-4572-1]
Ubuntu18.04spice0.14.0-1ubuntu2.5UnknownSource applicability is not established[USN-4572-1]
Ubuntu20.04spice0.14.2-0ubuntu2UnknownSource applicability is not established[USN-4572-1]
Ubuntu20.04spice0.14.2-4ubuntu1UnknownSource applicability is not established[USN-4572-1]
Ubuntu20.04spice0.14.2-4ubuntu2UnknownSource applicability is not established[USN-4572-1]
Ubuntu20.04spice0.14.2-4ubuntu3UnknownSource applicability is not established[USN-4572-1]
Ubuntu20.04spice0.14.2-4ubuntu3.1UnknownSource applicability is not established[USN-4572-1]
Ubuntuprospice0.12.4-0nocelt1UnknownSource applicability is not established[USN-4572-2]
Ubuntuprospice0.12.4-0nocelt1.1UnknownSource applicability is not established[USN-4572-2]
Ubuntuprospice0.12.4-0nocelt1.1ubuntu1UnknownSource applicability is not established[USN-4572-2]
Ubuntuprospice0.12.4-0nocelt2UnknownSource applicability is not established[USN-4572-2]
Ubuntuprospice0.12.4-0nocelt2ubuntu1UnknownSource applicability is not established[USN-4572-2]
Ubuntuprospice0.12.4-0nocelt2ubuntu1.1UnknownSource applicability is not established[USN-4572-2]
Ubuntuprospice0.12.4-0nocelt2ubuntu1.2UnknownSource applicability is not established[USN-4572-2]
Ubuntuprospice0.12.4-0nocelt2ubuntu1.3UnknownSource applicability is not established[USN-4572-2]
Ubuntuprospice0.12.4-0nocelt2ubuntu1.4UnknownSource applicability is not established[USN-4572-2]
Ubuntuprospice0.12.4-0nocelt2ubuntu1.5UnknownSource applicability is not established[USN-4572-2]
Ubuntuprospice0.12.4-0nocelt2ubuntu1.6UnknownSource applicability is not established[USN-4572-2]
Ubuntuprospice0.12.4-0nocelt2ubuntu1.7UnknownSource applicability is not established[USN-4572-2]
Ubuntuprospice0.12.4-0nocelt2ubuntu1.8UnknownSource applicability is not established[USN-4572-2]
Ubuntuprospice0.12.4-0nocelt2ubuntu1.8+esm1UnknownSource applicability is not established[USN-4572-2]
Original provider fields
{
  "package_releases": [
    {
      "name": "spice",
      "status": "fixed",
      "release": "sid",
      "version": "0.16.0-3"
    },
    {
      "name": "spice",
      "status": "fixed",
      "release": "forky",
      "version": "0.16.0-3"
    },
    {
      "name": "spice",
      "status": "fixed",
      "release": "trixie",
      "version": "0.15.2-1"
    },
    {
      "name": "spice",
      "status": "fixed",
      "release": "bookworm",
      "version": "0.15.1-1"
    },
    {
      "name": "spice-gtk",
      "status": "fixed",
      "release": "sid",
      "version": "0.42-4"
    },
    {
      "name": "spice-gtk",
      "status": "fixed",
      "release": "forky",
      "version": "0.42-4"
    },
    {
      "name": "spice-gtk",
      "status": "fixed",
      "release": "trixie",
      "version": "0.42-3"
    },
    {
      "name": "spice-gtk",
      "status": "fixed",
      "release": "bookworm",
      "version": "0.42-1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 971750,
      "name": "spice",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "0.14.3-2"
    },
    {
      "bug": 971750,
      "name": "spice",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "0.14.3-2"
    },
    {
      "bug": 971750,
      "name": "spice",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "0.14.3-2"
    },
    {
      "bug": 971750,
      "name": "spice",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "0.14.3-2"
    },
    {
      "bug": 971751,
      "name": "spice-gtk",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "0.39-1"
    },
    {
      "bug": 971751,
      "name": "spice-gtk",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "0.39-1"
    },
    {
      "bug": 971751,
      "name": "spice-gtk",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "0.39-1"
    },
    {
      "bug": 971751,
      "name": "spice-gtk",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "0.39-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "spice",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r0"
            }
          ]
        }
      ],
      "release": "3.15",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-14355",
      "fixed_version": "0.15.0-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-14355",
      "provider_updated_at": "2026-10-26T11:17:55.123818669Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r0"
            }
          ]
        }
      ],
      "release": "3.16",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-14355",
      "fixed_version": "0.15.0-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-14355",
      "provider_updated_at": "2026-10-26T11:17:55.123818669Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r0"
            }
          ]
        }
      ],
      "release": "3.17",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-14355",
      "fixed_version": "0.15.0-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-14355",
      "provider_updated_at": "2026-10-26T11:17:55.123818669Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r0"
            }
          ]
        }
      ],
      "release": "3.18",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-14355",
      "fixed_version": "0.15.0-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-14355",
      "provider_updated_at": "2026-10-26T11:17:55.123818669Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r0"
            }
          ]
        }
      ],
      "release": "3.19",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-14355",
      "fixed_version": "0.15.0-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-14355",
      "provider_updated_at": "2026-10-26T11:17:55.123818669Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r0"
            }
          ]
        }
      ],
      "release": "3.20",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-14355",
      "fixed_version": "0.15.0-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-14355",
      "provider_updated_at": "2026-10-26T11:17:55.123818669Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r0"
            }
          ]
        }
      ],
      "release": "3.21",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-14355",
      "fixed_version": "0.15.0-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-14355",
      "provider_updated_at": "2026-10-26T11:17:55.123818669Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r0"
            }
          ]
        }
      ],
      "release": "3.22",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-14355",
      "fixed_version": "0.15.0-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-14355",
      "provider_updated_at": "2026-10-26T11:17:55.123818669Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r0"
            }
          ]
        }
      ],
      "release": "3.23",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-14355",
      "fixed_version": "0.15.0-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-14355",
      "provider_updated_at": "2026-10-26T11:17:55.123818669Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.15.0-r0"
            }
          ]
        }
      ],
      "release": "3.24",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-14355",
      "fixed_version": "0.15.0-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-14355",
      "provider_updated_at": "2026-10-26T11:17:55.123818669Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.6-4ubuntu0.5"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "0.12.5-1.1ubuntu2",
        "0.12.6-4",
        "0.12.6-4ubuntu0.1",
        "0.12.6-4ubuntu0.2",
        "0.12.6-4ubuntu0.3",
        "0.12.6-4ubuntu0.4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-4572-1",
      "fixed_version": "0.12.6-4ubuntu0.5",
      "provider_source": "pypi",
      "provider_record_id": "USN-4572-1",
      "provider_updated_at": "2026-04-27T15:44:29.488101Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.0-1ubuntu2.5"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "0.12.8-2.2",
        "0.14.0-1",
        "0.14.0-1ubuntu1",
        "0.14.0-1ubuntu2",
        "0.14.0-1ubuntu2.1",
        "0.14.0-1ubuntu2.2",
        "0.14.0-1ubuntu2.4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-4572-1",
      "fixed_version": "0.14.0-1ubuntu2.5",
      "provider_source": "pypi",
      "provider_record_id": "USN-4572-1",
      "provider_updated_at": "2026-04-27T15:44:29.488101Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.2-4ubuntu3.1"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "0.14.2-0ubuntu2",
        "0.14.2-4ubuntu1",
        "0.14.2-4ubuntu2",
        "0.14.2-4ubuntu3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-4572-1",
      "fixed_version": "0.14.2-4ubuntu3.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-4572-1",
      "provider_updated_at": "2026-04-27T15:44:29.488101Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.4-0nocelt2ubuntu1.8+esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "0.12.4-0nocelt1",
        "0.12.4-0nocelt1.1",
        "0.12.4-0nocelt1.1ubuntu1",
        "0.12.4-0nocelt2",
        "0.12.4-0nocelt2ubuntu1",
        "0.12.4-0nocelt2ubuntu1.1",
        "0.12.4-0nocelt2ubuntu1.2",
        "0.12.4-0nocelt2ubuntu1.3",
        "0.12.4-0nocelt2ubuntu1.4",
        "0.12.4-0nocelt2ubuntu1.5",
        "0.12.4-0nocelt2ubuntu1.6",
        "0.12.4-0nocelt2ubuntu1.7",
        "0.12.4-0nocelt2ubuntu1.8"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-4572-2",
      "fixed_version": "0.12.4-0nocelt2ubuntu1.8+esm1",
      "provider_source": "pypi",
      "provider_record_id": "USN-4572-2",
      "provider_updated_at": "2026-04-27T15:43:32.397604Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.2-lp152.2.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2020:1802-1",
      "fixed_version": "0.14.2-lp152.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2020:1802-1",
      "provider_updated_at": "2026-02-04T04:21:34.877501Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.0-4.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1901-1",
      "fixed_version": "0.14.0-4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1901-1",
      "provider_updated_at": "2026-02-04T04:20:10.699603Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.0-4.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1901-1",
      "fixed_version": "0.14.0-4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1901-1",
      "provider_updated_at": "2026-02-04T04:20:10.699603Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.0-4.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1901-1",
      "fixed_version": "0.14.0-4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1901-1",
      "provider_updated_at": "2026-02-04T04:20:10.699603Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.0-4.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1901-1",
      "fixed_version": "0.14.0-4.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1901-1",
      "provider_updated_at": "2026-02-04T04:20:10.699603Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.1-4.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1956-1",
      "fixed_version": "0.14.1-4.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1956-1",
      "provider_updated_at": "2026-02-04T04:14:00.315256Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.1-4.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1956-1",
      "fixed_version": "0.14.1-4.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1956-1",
      "provider_updated_at": "2026-02-04T04:14:00.315256Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.1-4.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1956-1",
      "fixed_version": "0.14.1-4.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1956-1",
      "provider_updated_at": "2026-02-04T04:14:00.315256Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.1-4.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1956-1",
      "fixed_version": "0.14.1-4.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1956-1",
      "provider_updated_at": "2026-02-04T04:14:00.315256Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.1-4.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1956-1",
      "fixed_version": "0.14.1-4.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1956-1",
      "provider_updated_at": "2026-02-04T04:14:00.315256Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.1-4.3.1"
            }
          ]
        }
      ],
      "release": "manager proxy 4.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1956-1",
      "fixed_version": "0.14.1-4.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1956-1",
      "provider_updated_at": "2026-02-04T04:14:00.315256Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.1-4.3.1"
            }
          ]
        }
      ],
      "release": "manager retail branch server 4.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1956-1",
      "fixed_version": "0.14.1-4.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1956-1",
      "provider_updated_at": "2026-02-04T04:14:00.315256Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.1-4.3.1"
            }
          ]
        }
      ],
      "release": "manager server 4.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1956-1",
      "fixed_version": "0.14.1-4.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1956-1",
      "provider_updated_at": "2026-02-04T04:14:00.315256Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.1-4.3.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1956-1",
      "fixed_version": "0.14.1-4.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1956-1",
      "provider_updated_at": "2026-02-04T04:14:00.315256Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.7-10.12.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp2-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1902-1",
      "fixed_version": "0.12.7-10.12.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1902-1",
      "provider_updated_at": "2026-02-04T03:58:59.593553Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.37-lp152.2.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2020:1803-1",
      "fixed_version": "0.37-lp152.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2020:1803-1",
      "provider_updated_at": "2026-02-04T03:46:33.651993Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.35-3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1928-1",
      "fixed_version": "0.35-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1928-1",
      "provider_updated_at": "2026-02-04T03:23:47.426432Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.35-3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1928-1",
      "fixed_version": "0.35-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1928-1",
      "provider_updated_at": "2026-02-04T03:23:47.426432Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.35-3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1928-1",
      "fixed_version": "0.35-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1928-1",
      "provider_updated_at": "2026-02-04T03:23:47.426432Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.35-3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1928-1",
      "fixed_version": "0.35-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1928-1",
      "provider_updated_at": "2026-02-04T03:23:47.426432Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.35-3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1928-1",
      "fixed_version": "0.35-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1928-1",
      "provider_updated_at": "2026-02-04T03:23:47.426432Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.35-3.3.1"
            }
          ]
        }
      ],
      "release": "manager proxy 4.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1928-1",
      "fixed_version": "0.35-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1928-1",
      "provider_updated_at": "2026-02-04T03:23:47.426432Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.35-3.3.1"
            }
          ]
        }
      ],
      "release": "manager retail branch server 4.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1928-1",
      "fixed_version": "0.35-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1928-1",
      "provider_updated_at": "2026-02-04T03:23:47.426432Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.35-3.3.1"
            }
          ]
        }
      ],
      "release": "manager server 4.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1928-1",
      "fixed_version": "0.35-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1928-1",
      "provider_updated_at": "2026-02-04T03:23:47.426432Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.35-3.3.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1928-1",
      "fixed_version": "0.35-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1928-1",
      "provider_updated_at": "2026-02-04T03:23:47.426432Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.37-3.3.2"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3071-1",
      "fixed_version": "0.37-3.3.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3071-1",
      "provider_updated_at": "2026-02-04T03:21:52.153821Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.37-3.3.2"
            }
          ]
        }
      ],
      "release": "linux enterprise module for server applications 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3071-1",
      "fixed_version": "0.37-3.3.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3071-1",
      "provider_updated_at": "2026-02-04T03:21:52.153821Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.8-15.1"
            }
          ]
        }
      ],
      "release": "hpe helion openstack 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3084-1",
      "fixed_version": "0.12.8-15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3084-1",
      "provider_updated_at": "2026-02-04T02:40:48.576845Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.8-15.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3084-1",
      "fixed_version": "0.12.8-15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3084-1",
      "provider_updated_at": "2026-02-04T02:40:48.576845Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.8-15.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3084-1",
      "fixed_version": "0.12.8-15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3084-1",
      "provider_updated_at": "2026-02-04T02:40:48.576845Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.8-15.1"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3084-1",
      "fixed_version": "0.12.8-15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3084-1",
      "provider_updated_at": "2026-02-04T02:40:48.576845Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.8-15.1"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3084-1",
      "fixed_version": "0.12.8-15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3084-1",
      "provider_updated_at": "2026-02-04T02:40:48.576845Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.8-15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3084-1",
      "fixed_version": "0.12.8-15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3084-1",
      "provider_updated_at": "2026-02-04T02:40:48.576845Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.8-15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3084-1",
      "fixed_version": "0.12.8-15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3084-1",
      "provider_updated_at": "2026-02-04T02:40:48.576845Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.8-15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3084-1",
      "fixed_version": "0.12.8-15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3084-1",
      "provider_updated_at": "2026-02-04T02:40:48.576845Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.8-15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3084-1",
      "fixed_version": "0.12.8-15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3084-1",
      "provider_updated_at": "2026-02-04T02:40:48.576845Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.8-15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp3-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3084-1",
      "fixed_version": "0.12.8-15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3084-1",
      "provider_updated_at": "2026-02-04T02:40:48.576845Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.8-15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3084-1",
      "fixed_version": "0.12.8-15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3084-1",
      "provider_updated_at": "2026-02-04T02:40:48.576845Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.8-15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3084-1",
      "fixed_version": "0.12.8-15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3084-1",
      "provider_updated_at": "2026-02-04T02:40:48.576845Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.8-15.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3084-1",
      "fixed_version": "0.12.8-15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3084-1",
      "provider_updated_at": "2026-02-04T02:40:48.576845Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.8-15.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3084-1",
      "fixed_version": "0.12.8-15.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3084-1",
      "provider_updated_at": "2026-02-04T02:40:48.576845Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.34-3.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1911-1",
      "fixed_version": "0.34-3.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1911-1",
      "provider_updated_at": "2026-02-04T02:29:26.609227Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.34-3.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1911-1",
      "fixed_version": "0.34-3.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1911-1",
      "provider_updated_at": "2026-02-04T02:29:26.609227Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.34-3.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1911-1",
      "fixed_version": "0.34-3.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1911-1",
      "provider_updated_at": "2026-02-04T02:29:26.609227Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.34-3.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1911-1",
      "fixed_version": "0.34-3.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1911-1",
      "provider_updated_at": "2026-02-04T02:29:26.609227Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.31-9.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp2-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:1905-1",
      "fixed_version": "0.31-9.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:1905-1",
      "provider_updated_at": "2026-02-04T02:22:08.004508Z",
      "applicability_unknown": true
    },
    {
      "name": "spice",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.2-3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for server applications 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3070-1",
      "fixed_version": "0.14.2-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3070-1",
      "provider_updated_at": "2026-02-04T02:16:34.721250Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.33-3.9.1"
            }
          ]
        }
      ],
      "release": "hpe helion openstack 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3085-1",
      "fixed_version": "0.33-3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3085-1",
      "provider_updated_at": "2025-05-02T04:09:49.202483Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.33-3.9.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3085-1",
      "fixed_version": "0.33-3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3085-1",
      "provider_updated_at": "2025-05-02T04:09:49.202483Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.33-3.9.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3085-1",
      "fixed_version": "0.33-3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3085-1",
      "provider_updated_at": "2025-05-02T04:09:49.202483Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.33-3.9.1"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3085-1",
      "fixed_version": "0.33-3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3085-1",
      "provider_updated_at": "2025-05-02T04:09:49.202483Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.33-3.9.1"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3085-1",
      "fixed_version": "0.33-3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3085-1",
      "provider_updated_at": "2025-05-02T04:09:49.202483Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.33-3.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3085-1",
      "fixed_version": "0.33-3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3085-1",
      "provider_updated_at": "2025-05-02T04:09:49.202483Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.33-3.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3085-1",
      "fixed_version": "0.33-3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3085-1",
      "provider_updated_at": "2025-05-02T04:09:49.202483Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.33-3.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3085-1",
      "fixed_version": "0.33-3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3085-1",
      "provider_updated_at": "2025-05-02T04:09:49.202483Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.33-3.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3085-1",
      "fixed_version": "0.33-3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3085-1",
      "provider_updated_at": "2025-05-02T04:09:49.202483Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.33-3.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp3-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3085-1",
      "fixed_version": "0.33-3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3085-1",
      "provider_updated_at": "2025-05-02T04:09:49.202483Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.33-3.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3085-1",
      "fixed_version": "0.33-3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3085-1",
      "provider_updated_at": "2025-05-02T04:09:49.202483Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.33-3.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3085-1",
      "fixed_version": "0.33-3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3085-1",
      "provider_updated_at": "2025-05-02T04:09:49.202483Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.33-3.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3085-1",
      "fixed_version": "0.33-3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3085-1",
      "provider_updated_at": "2025-05-02T04:09:49.202483Z",
      "applicability_unknown": true
    },
    {
      "name": "spice-gtk",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.33-3.9.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:3085-1",
      "fixed_version": "0.33-3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2020:3085-1",
      "provider_updated_at": "2025-05-02T04:09:49.202483Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #971750][Debian bug #971751]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [gir1.2-spiceclientglib-2.0]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-1 · amd64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

    • 0.42-1 · arm64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

  • [gir1.2-spiceclientgtk-3.0]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-1 · amd64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

    • 0.42-1 · arm64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

  • [libspice-client-glib-2.0-8]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-1 · amd64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

    • 0.42-1 · arm64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

  • [libspice-client-glib-2.0-dev]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-1 · amd64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

    • 0.42-1 · arm64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

  • [libspice-client-gtk-3.0-5]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-1 · amd64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

    • 0.42-1 · arm64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

  • [libspice-client-gtk-3.0-dev]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-1 · amd64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

    • 0.42-1 · arm64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

  • [libspice-server1]Unknown

    Source package: [spice]

    Details (2)

    • 0.15.1-1 · amd64 · bookworm

      Fixed · Fixed: 0.14.3-2

      dsa · spice · debian · bookworm; dsa · spice · debian · 12

    • 0.15.1-1 · arm64 · bookworm

      Fixed · Fixed: 0.14.3-2

      dsa · spice · debian · bookworm; dsa · spice · debian · 12

  • [libspice-server-dev]Unknown

    Source package: [spice]

    Details (2)

    • 0.15.1-1 · amd64 · bookworm

      Fixed · Fixed: 0.14.3-2

      dsa · spice · debian · bookworm; dsa · spice · debian · 12

    • 0.15.1-1 · arm64 · bookworm

      Fixed · Fixed: 0.14.3-2

      dsa · spice · debian · bookworm; dsa · spice · debian · 12

  • [spice-client-glib-usb-acl-helper]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-1 · amd64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

    • 0.42-1 · arm64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

  • [spice-client-gtk]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-1 · amd64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

    • 0.42-1 · arm64 · bookworm

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · bookworm; dsa · spice-gtk · debian · 12

[Debian 13 (Trixie)]

  • [gir1.2-spiceclientglib-2.0]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-3 · amd64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

    • 0.42-3 · arm64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

  • [gir1.2-spiceclientgtk-3.0]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-3 · amd64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

    • 0.42-3 · arm64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

  • [libspice-client-glib-2.0-8]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-3 · amd64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

    • 0.42-3 · arm64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

  • [libspice-client-glib-2.0-dev]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-3 · amd64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

    • 0.42-3 · arm64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

  • [libspice-client-gtk-3.0-5]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-3 · amd64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

    • 0.42-3 · arm64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

  • [libspice-client-gtk-3.0-dev]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-3 · amd64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

    • 0.42-3 · arm64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

  • [libspice-server1]Unknown

    Source package: [spice]

    Details (2)

    • 0.15.2-1+b1 · amd64 · trixie

      Fixed · Fixed: 0.14.3-2

      dsa · spice · debian · 13

    • 0.15.2-1+b1 · arm64 · trixie

      Fixed · Fixed: 0.14.3-2

      dsa · spice · debian · 13

  • [libspice-server-dev]Unknown

    Source package: [spice]

    Details (2)

    • 0.15.2-1+b1 · amd64 · trixie

      Fixed · Fixed: 0.14.3-2

      dsa · spice · debian · 13

    • 0.15.2-1+b1 · arm64 · trixie

      Fixed · Fixed: 0.14.3-2

      dsa · spice · debian · 13

  • [spice-client-glib-usb-acl-helper]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-3 · amd64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

    • 0.42-3 · arm64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

  • [spice-client-gtk]Unknown

    Source package: [spice-gtk]

    Details (2)

    • 0.42-3 · amd64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

    • 0.42-3 · arm64 · trixie

      Fixed · Fixed: 0.39-1

      dsa · spice-gtk · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]