Read the docs
Red Hat Security Advisory

RHSA-2025:8292

mingw-freetype and spice-client-win security update

Released 2025-05-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 10 records

TI-2025-20210 CVE-2025-27363 · GHSA-g8qj-jv5h-78cp

Out-of-bounds write in FreeType

Priority CRITICAL 94KEV

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.27775 Published 2025-03-11 Partial fix CWE-787
TI-2025-23934 CVE-2025-32913 · GHSA-9589-mpwg-8xq6

NULL pointer dereference in libsoup

Priority MEDIUM 40

A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00856 Published 2025-04-14 Partial fix · 3.6.2, 2.62.2-9.el7_9 +11 CWE-476
TI-2025-23927 CVE-2025-32906 · GHSA-f4vp-qjpg-x8wq

Libsoup: out of bounds reads in soup_headers_parse_request()

Priority LOW 35

A flaw was found in libsoup, where the soup_headers_parse_request() function may be vulnerable to an out-of-bound read.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01286 Published 2025-04-14 Partial fix · 3.6.5, 3.6.5-3.el10_0 +12 CWE-125
TI-2025-23931 CVE-2025-32910 · GHSA-65wf-c9wx-f4v7

NULL pointer dereference in libsoup

Priority LOW 29

A flaw was found in libsoup, where soup_auth_digest_authenticate() is vulnerable to a NULL pointer dereference.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00463 Published 2025-04-14 Partial fix · 3.6.3, 2.8-3.el8_10.1 +1 CWE-476