Red Hat Security Advisory: spice-client-win security update

Fixed packages 9

Vulnerabilities 4

• High 8.8
  CVE-2025-9900

  Libtiff: libtiff write-what-where

  A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Sep 23, 2025
• High 7.5
  CVE-2025-59375

  libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that i…

  libexpat project libexpat thunderbird firefox-esr Debian Ubuntu Azure Linux Alpine Wolfi
  Sep 15, 2025
• High 7.2
  CVE-2025-6965 Public exploit EPSS 73%

  Integer Truncation on SQLite

  There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

  SQLite SQLite qt6-qtwebengine sqlite3 Debian Ubuntu Azure Linux Alpine Wolfi NuGet
  Jul 15, 2025
• Medium 5.3
  CVE-2025-8176

  LibTIFF tiffmedian.c get_histogram use after free

  A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The …

  tiff tiff libtiff tiff Debian Ubuntu Azure Linux Wolfi
  Jul 26, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2380149
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2383598
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2392784
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2395108
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0076.json
• report
  https://access.redhat.com/security/cve/CVE-2025-6965
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-6965
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-6965
• article
  https://www.oracle.com/security-alerts/cpujan2026.html#AppendixMSQL
• article
  https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8
• report
  https://access.redhat.com/security/cve/CVE-2025-8176
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-8176
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-8176
• article
  http://www.libtiff.org/
• article
  https://gitlab.com/libtiff/libtiff/-/commit/fe10872e53efba9cc36c66ac4ab3b41a839d5172
• article
  https://gitlab.com/libtiff/libtiff/-/issues/707
• article
  https://gitlab.com/libtiff/libtiff/-/merge_requests/727
• article
  https://vuldb.com/?ctiid.317590
• article
  https://vuldb.com/?id.317590
• article
  https://vuldb.com/?submit.621796
• report
  https://access.redhat.com/security/cve/CVE-2025-9900
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-9900
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-9900
• article
  https://github.com/SexyShoelessGodofWar/LibTiff-4.7.0-Write-What-Where?tab=readme-ov-file
• article
  https://gitlab.com/libtiff/libtiff/-/issues/704
• article
  https://gitlab.com/libtiff/libtiff/-/merge_requests/732
• article
  https://libtiff.gitlab.io/libtiff/releases/v4.7.1.html
• report
  https://access.redhat.com/security/cve/CVE-2025-59375
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-59375
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-59375
• article
  https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2025-59375
• article
  https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2025-59375