Skip to content
OpenAdvisories
High ALAS2-2023-2049 2 CVEs

Important: glib2 security update (Amazon Linux 2)

Published May 11, 2023 · Updated May 16, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-16429: GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str(). CVE-2018-16428: In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.

Fixed packages 7

ReleasePackageFixed in
Amazon Linux · 2 glib2 0:2.56.1-9.amzn2.0.3
Amazon Linux · 2 glib2-debuginfo 0:2.56.1-9.amzn2.0.3
Amazon Linux · 2 glib2-devel 0:2.56.1-9.amzn2.0.3
Amazon Linux · 2 glib2-doc 0:2.56.1-9.amzn2.0.3
Amazon Linux · 2 glib2-fam 0:2.56.1-9.amzn2.0.3
Amazon Linux · 2 glib2-static 0:2.56.1-9.amzn2.0.3
Amazon Linux · 2 glib2-tests 0:2.56.1-9.amzn2.0.3

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-16428.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-16429.html