Skip to content
OpenAdvisories
Medium ALAS2-2021-1711 1 CVE

Moderate: glib2 security update (Amazon Linux 2)

Published Oct 4, 2021 · Updated Oct 6, 2021

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-27218: An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation. 1929847: CVE-2021-27218 glib: integer overflow in g_byte_array_new_take function when called with a buffer of 4GB or more on a 64-bit platform

Fixed packages 7

ReleasePackageFixed in
Amazon Linux · 2 glib2 0:2.56.1-9.amzn2.0.2
Amazon Linux · 2 glib2-debuginfo 0:2.56.1-9.amzn2.0.2
Amazon Linux · 2 glib2-devel 0:2.56.1-9.amzn2.0.2
Amazon Linux · 2 glib2-doc 0:2.56.1-9.amzn2.0.2
Amazon Linux · 2 glib2-fam 0:2.56.1-9.amzn2.0.2
Amazon Linux · 2 glib2-static 0:2.56.1-9.amzn2.0.2
Amazon Linux · 2 glib2-tests 0:2.56.1-9.amzn2.0.2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-27218.html