Red Hat Security AdvisoryRHSA-2026:1570
spice-client-win security update
Released 2026-01-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) spice-client-win-8.10-6.el8_6.1, spice-client-win-x64-8.10-6.el8_6.1, spice-client-win-x86-8.10-6.el8_6.1
- Red Hat Enterprise Linux AppStream E4S (v.8.6) spice-client-win-8.10-6.el8_6.1, spice-client-win-x64-8.10-6.el8_6.1, spice-client-win-x86-8.10-6.el8_6.1
- Red Hat Enterprise Linux AppStream TUS (v.8.6) spice-client-win-8.10-6.el8_6.1, spice-client-win-x64-8.10-6.el8_6.1, spice-client-win-x86-8.10-6.el8_6.1
Fixes 1 record
Priority MEDIUM 42
A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00544 · Published 2025-12-11 · Partial fix · 3.6.5-3.el10_1.8, 3.6.5-3.el10_0.11 +16 CWE-444
