Summary
[2.68.4-16.2]
- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94290
- Resolves: RHEL-102845
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | glib2 | 0:2.68.4-16.el9_6.2 |
| Oracle Linux · 9 | glib2-devel | 0:2.68.4-16.el9_6.2 |
| Oracle Linux · 9 | glib2-doc | 0:2.68.4-16.el9_6.2 |
| Oracle Linux · 9 | glib2-static | 0:2.68.4-16.el9_6.2 |
| Oracle Linux · 9 | glib2-tests | 0:2.68.4-16.el9_6.2 |
Vulnerabilities 2
-
Critical 9.8
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CO…
-
Medium 4.8
Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.