Red Hat Security Advisory: glib2 security update

Fixed packages 9

Vulnerabilities 2

• Critical 9.8
  CVE-2024-52533

  gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CO…

  glib2.0 glib2.0 glib Debian Ubuntu Azure Linux
  Nov 11, 2024
• Medium 4.8
  CVE-2025-4373

  Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

  A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  May 6, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2325340
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2364265
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10855.json
• report
  https://access.redhat.com/security/cve/CVE-2024-52533
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-52533
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-52533
• article
  https://gitlab.gnome.org/GNOME/glib/-/issues/3461
• article
  https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.1
• article
  https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home
• report
  https://access.redhat.com/security/cve/CVE-2025-4373
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-4373
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-4373
• article
  https://gitlab.gnome.org/GNOME/glib/-/issues/3677