Linux · Security advisory · July 29, 2025

RLSA-2025:8292: Security update for 2 packages

RLSA-2025:8292, released July 29, 2025, fixes 10 CVEs across 2 products. One of them is being exploited (CVE-2025-27363); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
10
None rated Critical
Exploited
1
CVE-2025-27363
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2778
98th percentile

Priority of the 10 CVEs

Patch now 1 Urgent 0 High 9 Routine 0

Fixed package versions

ProductReleaseFixed in
mingw-freetyperocky 80:2.8-3.el8_10.1
spice-client-winrocky 80:8.10-1.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2025-27363 freetype-devel: FreeType is a free, high-quality, portable font engine that can open and manage font files 9.0 0.2778 KEVExploited
High CVE-2025-32906 gir1.2-soup-2.4: A flaw was found in libsoup, where the soup_headers_parse_request()function may be vulnerable to an out-of-bound read 9.0 0.0126 None reported
High CVE-2025-32911 gir1.2-soup-2.4: A use-after-free type vulnerability was found in libsoup, in thesoup_message_headers_get_content_disposition() function 9.0 0.0097 None reported
High CVE-2025-32913 gir1.2-soup-2.4: A flaw was found in libsoup, where thesoup_message_headers_get_content_disposition() function is vulnerable to aNULL... 9.0 0.0084 None reported
High CVE-2025-32050 gir1.2-soup-2.4: A flaw was found in libsoup 9.0 0.0078 None reported
High CVE-2025-32907 gir1.2-soup-2.4: A flaw was found in libsoup 9.0 0.0070 None reported
High CVE-2025-32052 gir1.2-soup-2.4: A flaw was found in libsoup 9.0 0.0067 None reported
High CVE-2025-32053 gir1.2-soup-2.4: A flaw was found in libsoup 9.0 0.0067 None reported
High CVE-2025-32909 gir1.2-soup-2.4: A flaw was found in libsoup 9.0 0.0053 None reported
High CVE-2025-32910 gir1.2-soup-2.4: A flaw was found in libsoup, where soup_auth_digest_authenticate() isvulnerable to a NULL pointer dereference 9.0 0.0045 None reported
Showing 1 to 10 of 10 1