Red Hat Security Advisory

RHSA-2024:2528

mingw-glib2 security update

Released 2024-04-30 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux CRB (v. 9) mingw-glib2-2.78.0-1.el9, mingw32-glib2-2.78.0-1.el9, mingw32-glib2-static-2.78.0-1.el9 +2

Fixes 4 records

TI-2023-15942 CVE-2023-32665 · GHSA-c9xj-rf55-c64g

Gvariant deserialisation does not match spec for non-normal data

MEDIUM 58

A flaw was found in GLib.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00392 Published 2023-09-14 Partial fix CWE-400

TI-2023-15915 CVE-2023-32636 · GHSA-79g9-vx8c-xfmq

Uncontrolled resource consumption in glib

LOW 34

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00791 Published 2023-09-14 Partial fix CWE-400

TI-2023-13867 CVE-2023-29499 · GHSA-794g-pjcw-ggfp

Gvariant offset table entry size is not checked in is_normal()

LOW 34

A flaw was found in GLib.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00785 Published 2023-09-14 Partial fix CWE-400

TI-2023-15892 CVE-2023-32611 · GHSA-qjp4-g2mq-4r5w

G_variant_byteswap() can take a long time with some non-normal inputs

LOW 25

A flaw was found in GLib.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00361 Published 2023-09-14 Partial fix CWE-400