Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-14087: Buffer underflow on Glib through glib/gvariant via bytestring_parse() or string_parse() leads to OOB Write.
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | glib2 | 0:2.82.2-769.amzn2023 |
| Amazon Linux · 2023 | glib2-debuginfo | 0:2.82.2-769.amzn2023 |
| Amazon Linux · 2023 | glib2-debugsource | 0:2.82.2-769.amzn2023 |
| Amazon Linux · 2023 | glib2-devel | 0:2.82.2-769.amzn2023 |
| Amazon Linux · 2023 | glib2-devel-debuginfo | 0:2.82.2-769.amzn2023 |
| Amazon Linux · 2023 | glib2-doc | 0:2.82.2-769.amzn2023 |
| Amazon Linux · 2023 | glib2-static | 0:2.82.2-769.amzn2023 |
| Amazon Linux · 2023 | glib2-tests | 0:2.82.2-769.amzn2023 |
| Amazon Linux · 2023 | glib2-tests-debuginfo | 0:2.82.2-769.amzn2023 |
Vulnerabilities 1
-
Medium 5.6
Glib: glib: buffer underflow in gvariant parser leads to heap corruption
A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input stri…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-14087.html