Summary
[2.68.4-11]
- Really fix authentication failures when sd-bus clients connect to GDBus servers
- Resolves: #2217771
[2.68.4-10]
- Fix authentication failures when sd-bus clients connect to GDBus servers
- Resolves: #2217771
[2.68.4-9]
- Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
- Related: #2181196
- Related: #2181200
[2.68.4-8]
- Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
- Related: #2181196
- Related: #2181200
[2.68.4-7]
- Fix CVE-2023-24593 and CVE-2023-25180
- Resolves: #2181196
- Resolves: #2181200
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | glib2 | 0:2.68.4-11.el9 |
| Oracle Linux · 9 | glib2-devel | 0:2.68.4-11.el9 |
| Oracle Linux · 9 | glib2-doc | 0:2.68.4-11.el9 |
| Oracle Linux · 9 | glib2-static | 0:2.68.4-11.el9 |
| Oracle Linux · 9 | glib2-tests | 0:2.68.4-11.el9 |
Vulnerabilities 3
-
Medium 5.5
Gvariant offset table entry size is not checked in is_normal()
A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.
-
Medium 5.5
G_variant_byteswap() can take a long time with some non-normal inputs
A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.
-
Medium 5.5
Gvariant deserialisation does not match spec for non-normal data
A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.