Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2 | 0:2.56.4-166.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-debuginfo | 0:2.56.4-166.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-debugsource | 0:2.56.4-166.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-devel | 0:2.56.4-166.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-devel-debuginfo | 0:2.56.4-166.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-fam | 0:2.56.4-166.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-fam-debuginfo | 0:2.56.4-166.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-tests | 0:2.56.4-166.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-tests-debuginfo | 0:2.56.4-166.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | glib2-debuginfo | 0:2.56.4-166.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | glib2-debugsource | 0:2.56.4-166.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | glib2-devel-debuginfo | 0:2.56.4-166.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | glib2-doc | 0:2.56.4-166.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | glib2-fam-debuginfo | 0:2.56.4-166.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | glib2-static | 0:2.56.4-166.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | glib2-tests-debuginfo | 0:2.56.4-166.el8_10 |
Vulnerabilities 3
-
Critical 9.8
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CO…
-
Medium 5.2
An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client sub…
-
Medium 4.8
Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2279632
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2325340
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2364265
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11327.json
-
report
https://access.redhat.com/security/cve/CVE-2024-34397
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-34397
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-34397
-
article
https://gitlab.gnome.org/GNOME/glib/-/issues/3268
-
article
https://www.openwall.com/lists/oss-security/2024/05/07/5
-
report
https://access.redhat.com/security/cve/CVE-2024-52533
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-52533
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-52533
-
article
https://gitlab.gnome.org/GNOME/glib/-/issues/3461
-
article
https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.1
-
article
https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home
-
report
https://access.redhat.com/security/cve/CVE-2025-4373
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-4373
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-4373
-
article
https://gitlab.gnome.org/GNOME/glib/-/issues/3677