Summary
Alicia Boya García discovered that GLib incorrectly handled signal
subscriptions. A local attacker could use this issue to spoof D-Bus signals
resulting in a variety of impacts including possible privilege escalation.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | glib2.0 | 2.64.6-1~ubuntu20.04.7 |
| Ubuntu · 22.04 LTS 22.04:LTS | glib2.0 | 2.72.4-0ubuntu2.3 |
| Ubuntu · 24.04 LTS 24.04:LTS | glib2.0 | 2.80.0-6ubuntu3.1 |
Vulnerabilities 1
-
Medium 5.2
An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client sub…
References
-
report
https://ubuntu.com/security/CVE-2024-34397