RHSA-2026:0078HighCVSS 8.8
Red Hat Security Advisory: spice-client-win security update
🔗 CVE IDs covered (4)
📋 Description
CVE-2025-6965 — sqlite: Integer Truncation in SQLite CVE-2025-8176 — libtiff: LibTIFF Use-After-Free Vulnerability CVE-2025-9900 — libtiff: Libtiff Write-What-Where CVE-2025-59375 — firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2026:0078
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2380149
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2383598
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2392784
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2395108
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0078.json