Summary
[2.56.4-166]
- Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-67084
- Resolves: RHEL-94286
- Resolves: RHEL-94848
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | glib2 | 0:2.56.4-166.el8_10 |
| Oracle Linux · 8 | glib2-devel | 0:2.56.4-166.el8_10 |
| Oracle Linux · 8 | glib2-doc | 0:2.56.4-166.el8_10 |
| Oracle Linux · 8 | glib2-fam | 0:2.56.4-166.el8_10 |
| Oracle Linux · 8 | glib2-static | 0:2.56.4-166.el8_10 |
| Oracle Linux · 8 | glib2-tests | 0:2.56.4-166.el8_10 |
Vulnerabilities 3
-
Critical 9.8
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CO…
-
Medium 5.2
An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client sub…
-
Medium 4.8
Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.