Skip to content
OpenAdvisories
Medium ALAS2-2020-1553 1 CVE

Moderate: glib2 security update (Amazon Linux 2)

Published Nov 9, 2020 · Updated Nov 11, 2020

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-12450: file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used. 1719141: CVE-2019-12450 glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress 1719141: CVE-2019-12450 glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress

Fixed packages 7

ReleasePackageFixed in
Amazon Linux · 2 glib2 0:2.56.1-7.amzn2.0.1
Amazon Linux · 2 glib2-debuginfo 0:2.56.1-7.amzn2.0.1
Amazon Linux · 2 glib2-devel 0:2.56.1-7.amzn2.0.1
Amazon Linux · 2 glib2-doc 0:2.56.1-7.amzn2.0.1
Amazon Linux · 2 glib2-fam 0:2.56.1-7.amzn2.0.1
Amazon Linux · 2 glib2-static 0:2.56.1-7.amzn2.0.1
Amazon Linux · 2 glib2-tests 0:2.56.1-7.amzn2.0.1

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2019-12450.html