Linux · Security advisory · May 29, 2025
ALSA-2025:8292: Security update for 4 packages
ALSA-2025:8292, released May 29, 2025, fixes 10 CVEs across 4 products. One of them is being exploited (CVE-2025-27363); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
10
None rated Critical
Exploited
1
CVE-2025-27363
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2778
98th percentile
Priority of the 10 CVEs
Patch now 1
Urgent 0
High 9
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| mingw32-freetype | almalinux 8 | 2.8-3.el8_10.1 |
| mingw32-freetype-static | almalinux 8 | 2.8-3.el8_10.1 |
| mingw64-freetype | almalinux 8 | 2.8-3.el8_10.1 |
| mingw64-freetype-static | almalinux 8 | 2.8-3.el8_10.1 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2025-27363 | freetype-devel: FreeType is a free, high-quality, portable font engine that can open and manage font files | 9.0 | 0.2778 | KEVExploited | |
| High | CVE-2025-32906 | gir1.2-soup-2.4: A flaw was found in libsoup, where the soup_headers_parse_request()function may be vulnerable to an out-of-bound read | 9.0 | 0.0126 | None reported | |
| High | CVE-2025-32911 | gir1.2-soup-2.4: A use-after-free type vulnerability was found in libsoup, in thesoup_message_headers_get_content_disposition() function | 9.0 | 0.0097 | None reported | |
| High | CVE-2025-32913 | gir1.2-soup-2.4: A flaw was found in libsoup, where thesoup_message_headers_get_content_disposition() function is vulnerable to aNULL... | 9.0 | 0.0084 | None reported | |
| High | CVE-2025-32050 | gir1.2-soup-2.4: A flaw was found in libsoup | 9.0 | 0.0078 | None reported | |
| High | CVE-2025-32907 | gir1.2-soup-2.4: A flaw was found in libsoup | 9.0 | 0.0070 | None reported | |
| High | CVE-2025-32052 | gir1.2-soup-2.4: A flaw was found in libsoup | 9.0 | 0.0067 | None reported | |
| High | CVE-2025-32053 | gir1.2-soup-2.4: A flaw was found in libsoup | 9.0 | 0.0067 | None reported | |
| High | CVE-2025-32909 | gir1.2-soup-2.4: A flaw was found in libsoup | 9.0 | 0.0053 | None reported | |
| High | CVE-2025-32910 | gir1.2-soup-2.4: A flaw was found in libsoup, where soup_auth_digest_authenticate() isvulnerable to a NULL pointer dereference | 9.0 | 0.0045 | None reported |
Showing 1 to 10 of 10
1