Description
The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL, NULL, NULL). Consequently, it does not properly restrict directory (and file) permissions. Instead, for directories, 0777 permissions are used; for files, default file permissions are used. This is similar to CVE-2019-12450.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | glib2.0 | 2.60.5-1 | — |
| Debian 13 | glib2.0 | 2.60.5-1 | — |
| Debian 12 | glib2.0 | 2.60.5-1 | — |
| Debian 8 | glib2.0 | 2.42.1-1+deb8u2 | DLA-1866-2, DLA-1866-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | glib2.0 | 2.56.4-0ubuntu0.18.04.4 | USN-4049-1 |
| Ubuntu 16.04 LTS | glib2.0 | 2.48.2-0ubuntu4.4 | USN-4049-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 14.04 LTS | glib2.0 | 2.40.2-0ubuntu1.1+esm3 | USN-4049-2 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | gdm | 1:3.28.3-39.el8 | RHSA-2021:1586 |
| RHEL 8 | glib2 +5 | 2.56.4-9.el8 | RHSA-2021:1586 |
| RHEL 8 | webkit2gtk3 +3 | 2.30.4-1.el8 | RHSA-2021:1586 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | OpenEXR-libs +1 | 2.2.0-12.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | accountsservice-devel | 0.6.55-1.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | atkmm +2 | 2.24.2-7.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | cairomm +2 | 1.12.0-8.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | chrome-gnome-shell | 10.1-7.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | dleyna-core +1 | 0.6.0-3.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | enchant2 +1 | 2.2.3-3.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | gamin +1 | 0.1.10-32.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | geoclue2 +3 | 2.5.5-2.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | geocode-glib +1 | 3.26.0-3.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | gjs +1 | 1.56.2-5.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | glib2-doc +1 | 2.56.4-9.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | glibmm24 +2 | 2.56.0-2.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | gnome-boxes | 3.36.5-8.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | gnome-photos +1 | 3.28.1-4.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | gnome-terminal +1 | 3.28.3-3.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | gtk-doc | 1.28-3.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | gtk2 +4 | 2.24.32-5.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | gtkmm24 +2 | 2.24.5-6.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | gtkmm30 +2 | 3.22.2-3.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | gvfs +10 | 1.36.2-11.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | libdazzle +1 | 3.28.5-2.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | libepubgen +1 | 0.1.0-3.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | libsass +1 | 3.4.5-6.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | libsigc++20 +2 | 2.10.0-6.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | libvisual +1 | 1:0.4.0-25.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | mutter-devel | 3.32.2-57.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | nautilus +2 | 3.28.1-15.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | pangomm +2 | 2.40.1-6.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | soundtouch +1 | 2.0.0-3.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | vala +1 | 0.40.19-2.el8 | ALSA-2021:1586 |
| AlmaLinux 8 | woff2 +1 | 1.0.2-5.el8 | ALSA-2021:1586 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | OpenEXR | 2.2.0-12.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | accountsservice | 0.6.55-1.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | atkmm | 2.24.2-7.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | cairomm | 1.12.0-8.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | chrome-gnome-shell | 10.1-7.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | dleyna-core +1 | 0.6.0-3.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | enchant2 | 2.2.3-3.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gamin | 0.1.10-32.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gdm | 1:3.28.3-39.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | geoclue2 | 2.5.5-2.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | geocode-glib | 3.26.0-3.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gjs | 1.56.2-5.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | glibmm24 | 2.56.0-2.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gnome-boxes | 3.36.5-8.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gnome-control-center | 3.28.2-27.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gnome-online-accounts | 3.28.2-2.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gnome-photos | 3.28.1-4.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gnome-settings-daemon | 3.32.0-14.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gnome-shell | 3.32.2-30.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gnome-software | 3.36.1-5.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gnome-terminal | 3.28.3-3.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gtk-doc | 1.28-3.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gtk2 | 2.24.32-5.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gtkmm24 | 2.24.5-6.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gtkmm30 | 3.22.2-3.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | gvfs | 1.36.2-11.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | libdazzle | 3.28.5-2.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | libepubgen | 0.1.0-3.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | libsass | 3.4.5-6.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | libsigc++20 | 2.10.0-6.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | libvisual | 1:0.4.0-25.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | mutter | 3.32.2-57.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | nautilus | 3.28.1-15.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | pangomm | 2.40.1-6.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | soundtouch | 2.0.0-3.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | vala | 0.40.19-2.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | webkit2gtk3 | 2.30.4-1.el8 | RLSA-2021:1586 |
| Rocky Linux 8 | woff2 | 1.0.2-5.el8 | RLSA-2021:1586 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | glib2 | 2.54.3-4.18.1 | SUSE-SU-2019:1833-1 |
| SLES 15 | glib2 | 2.54.3-4.18.1 | SUSE-SU-2019:1833-1 |
| SLES 12 SP4 | glib2 | 2.48.2-12.15.1 | SUSE-SU-2019:1830-1 |
| SLES 12 SP3 | glib2 | 2.48.2-12.15.1 | SUSE-SU-2019:1830-2, SUSE-SU-2019:1830-1 |
| SLES 12 SP2 | glib2 | 2.48.2-12.15.1 | SUSE-SU-2019:1830-1 |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | glib2 | 2.38.2-7.12.1 | SUSE-SU-2019:1824-1 |
| SLES 12 | glib2 | 2.38.2-7.12.1 | SUSE-SU-2019:1824-1 |
| SLES for SAP 12 SP4 | glib2 | 2.48.2-12.15.1 | SUSE-SU-2019:1830-1 |
| SLES for SAP 12 SP3 | glib2 | 2.48.2-12.15.1 | SUSE-SU-2019:1830-1 |
| SLES for SAP 12 SP2 | glib2 | 2.48.2-12.15.1 | SUSE-SU-2019:1830-1 |
| SLES for SAP 12 SP1 | glib2 | 2.38.2-7.12.1 | SUSE-SU-2019:1824-1 |
| SUSE OpenStack Cloud Crowbar 8 | glib2 | 2.48.2-12.15.1 | SUSE-SU-2019:1830-2 |
| SUSE OpenStack Cloud 8 | glib2 | 2.48.2-12.15.1 | SUSE-SU-2019:1830-1 |
| SUSE OpenStack Cloud 7 | glib2 | 2.48.2-12.15.1 | SUSE-SU-2019:1830-1 |
| SUSE HPE Helion OpenStack 8 | glib2 | 2.48.2-12.15.1 | SUSE-SU-2019:1830-2 |
| SUSE Enterprise Storage 5 | glib2 | 2.48.2-12.15.1 | SUSE-SU-2019:1830-2, SUSE-SU-2019:1830-1 |
| SUSE Enterprise Storage 4 | glib2 | 2.48.2-12.15.1 | SUSE-SU-2019:1830-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.0 | glib2 | 2.54.3-lp150.3.13.1 | openSUSE-SU-2019:1749-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | OpenEXR-libs +1 | 2.2.0-12.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | accountsservice +2 | 0.6.55-1.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | atkmm +2 | 2.24.2-7.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | cairomm +2 | 1.12.0-8.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | chrome-gnome-shell | 10.1-7.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | dleyna-core +1 | 0.6.0-3.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | enchant2 +1 | 2.2.3-3.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gamin +1 | 0.1.10-32.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gdm | 1:3.28.3-39.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | geoclue2 +3 | 2.5.5-2.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | geocode-glib +1 | 3.26.0-3.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gjs +1 | 1.56.2-5.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | glib2 +5 | 2.56.4-9.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | glibmm24 +2 | 2.56.0-2.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gnome-boxes | 3.36.5-8.0.1.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gnome-classic-session +22 | 3.32.1-14.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gnome-control-center +1 | 3.28.2-27.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gnome-online-accounts +1 | 3.28.2-2.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gnome-photos +1 | 3.28.1-4.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gnome-settings-daemon | 3.32.0-14.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gnome-shell | 3.32.2-30.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gnome-software | 3.36.1-5.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gnome-terminal +1 | 3.28.3-3.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gtk-doc | 1.28-3.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gtk2 +4 | 2.24.32-5.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gtkmm24 +2 | 2.24.5-6.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gtkmm30 +2 | 3.22.2-3.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | gvfs +10 | 1.36.2-11.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | libdazzle +1 | 3.28.5-2.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | libepubgen +1 | 0.1.0-3.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | libsass +1 | 3.4.5-6.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | libsigc++20 +2 | 2.10.0-6.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | libvisual +1 | 1:0.4.0-25.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | mutter +1 | 3.32.2-57.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | nautilus +2 | 3.28.1-15.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | pangomm +2 | 2.40.1-6.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | soundtouch +1 | 2.0.0-3.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | vala +1 | 0.40.19-2.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | webkit2gtk3 +3 | 2.30.4-1.el8 | ELSA-2021-1586 |
| Oracle Linux 8 | woff2 +1 | 1.0.2-5.el8 | ELSA-2021-1586 |
Advisories 15
- ALSA-2021:1586 Moderate: GNOME security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2025-0227 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- RHSA-2021:1586 Red Hat Security Advisory: GNOME security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- USN-4049-2 glib2.0 vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- USN-4049-1 glib2.0 vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- DLA-1866-1 glib2.0 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-1866-2 glib2.0 - regression update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2021:1586 Moderate: GNOME security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 5, 2026
- SUSE-SU-2019:1833-1 Security update for glib2 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:1749-1 Security update for glib2 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:1830-2 Security update for glib2 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:1824-1 Security update for glib2 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:1830-1 Security update for glib2 SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-1155 GNOME: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · May 4, 2023
- ELSA-2021-1586 Moderate: GNOME security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 25, 2021
References
- https://gitlab.gnome.org/GNOME/glib/issues/1658
- https://gitlab.gnome.org/GNOME/glib/merge_requests/450
- https://gitlab.gnome.org/GNOME/glib/commit/5e4da714f00f6bfb2ccd6d73d61329c6f3a08429
- USN-4049-1 vendor-advisory
- USN-4049-2 vendor-advisory
- openSUSE-SU-2019:1749 vendor-advisory
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931234#12
- [debian-lts-announce] 20190731 [SECURITY] [DLA 1866-1] glib2.0 security update mailing-list
- [debian-lts-announce] 20190805 [SECURITY] [DLA 1866-2] glib2.0 regression update mailing-list
- https://security.netapp.com/advisory/ntap-20190806-0003/
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 mailing-list
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 mailing-list