Summary
[2.80.4-13]
- Fix CVE-2025-14087 and CVE-2025-14512
[2.80.4-12]
- Fix NVR
[2.80.4-11]
- Add patch for CVE-2025-13601
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | glib2 | 0:2.80.4-10.el10_1.13 |
| Oracle Linux · 10 | glib2-devel | 0:2.80.4-10.el10_1.13 |
| Oracle Linux · 10 | glib2-doc | 0:2.80.4-10.el10_1.13 |
| Oracle Linux · 10 | glib2-static | 0:2.80.4-10.el10_1.13 |
| Oracle Linux · 10 | glib2-tests | 0:2.80.4-10.el10_1.13 |
Vulnerabilities 2
-
Medium 6.5
Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.
-
Medium 5.6
Glib: glib: buffer underflow in gvariant parser leads to heap corruption
A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input stri…