Summary
[2.68.4-169]
- Add patch for CVE-2025-14087 and CVE-2025-14512
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | glib2 | 0:2.56.4-169.el8_10 |
| Oracle Linux · 8 | glib2-devel | 0:2.56.4-169.el8_10 |
| Oracle Linux · 8 | glib2-doc | 0:2.56.4-169.el8_10 |
| Oracle Linux · 8 | glib2-fam | 0:2.56.4-169.el8_10 |
| Oracle Linux · 8 | glib2-static | 0:2.56.4-169.el8_10 |
| Oracle Linux · 8 | glib2-tests | 0:2.56.4-169.el8_10 |
Vulnerabilities 2
-
Medium 6.5
Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.
-
Medium 5.6
Glib: glib: buffer underflow in gvariant parser leads to heap corruption
A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input stri…