Red Hat Security AdvisoryRHSA-2025:9380
spice-client-win security update
Released 2025-06-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) spice-client-win-8.2-1.el8_2, spice-client-win-x64-8.2-1.el8_2, spice-client-win-x86-8.2-1.el8_2
Fixes 1 record
Priority CRITICAL 94KEV
An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.27775 · Published 2025-03-11 · Partial fix CWE-787
