Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-14087: Buffer underflow on Glib through glib/gvariant via bytestring_parse() or string_parse() leads to OOB Write.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | glib2 | 0:2.56.1-9.amzn2.0.13 |
| Amazon Linux · 2 | glib2-debuginfo | 0:2.56.1-9.amzn2.0.13 |
| Amazon Linux · 2 | glib2-devel | 0:2.56.1-9.amzn2.0.13 |
| Amazon Linux · 2 | glib2-doc | 0:2.56.1-9.amzn2.0.13 |
| Amazon Linux · 2 | glib2-fam | 0:2.56.1-9.amzn2.0.13 |
| Amazon Linux · 2 | glib2-static | 0:2.56.1-9.amzn2.0.13 |
| Amazon Linux · 2 | glib2-tests | 0:2.56.1-9.amzn2.0.13 |
Vulnerabilities 1
-
Medium 5.6
Glib: glib: buffer underflow in gvariant parser leads to heap corruption
A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input stri…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-14087.html