Red Hat Security Advisory

RHSA-2026:0078

spice-client-win security update

Released 2026-01-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v. 8.2) spice-client-win-8.10-3.el8_2.1, spice-client-win-x64-8.10-3.el8_2.1, spice-client-win-x86-8.10-3.el8_2.1

TI-2025-09085 CVE-2025-9900 · GHSA-qc8j-wvjf-7jfj

HIGH 73

A flaw was found in Libtiff.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01005 Published 2025-09-23 Partial fix · 4.7.1, 4.6.0-6.el10_0.1 +30 CWE-123

TI-2025-06334 CVE-2025-6965 · GHSA-2m69-gcr7-jv3q

HIGH 72

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.73452 Published 2025-07-15 Partial fix · 3.50.2 CWE-197

TI-2025-07481 CVE-2025-8176 · GHSA-gvgc-3ch5-px8p

MEDIUM 55

A vulnerability was found in LibTIFF up to 4.7.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00287 Published 2025-07-26 Fixed CWE-119

TI-2025-36934 CVE-2025-59375 · GHSA-vjqp-pjp6-xcxx

LOW 36

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0138 Published 2025-09-15 Partial fix · 2.7.2 CWE-770