These are all security issues fixed in the libspice-server-devel-0.12.8-2.1 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "spice-client": "0.12.8-2.1", "libspice-server-devel": "0.12.8-2.1", "libspice-server1": "0.12.8-2.1" } ] }