Red Hat Security AdvisoryRHSA-2025:10855
glib2 security update
Released 2025-07-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) glib2-devel-2.80.4-4.el10_0.6, glib2-tests-2.80.4-4.el10_0.6
- Red Hat Enterprise Linux BaseOS (v. 10) glib2-2.80.4-4.el10_0.6
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) glib2-doc-2.80.4-4.el10_0.6, glib2-static-2.80.4-4.el10_0.6
Fixes 2 records
Priority MEDIUM 52
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01507 · Published 2024-11-11 · Partial fix CWE-120
Priority LOW 23
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function.
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00647 · Published 2025-05-06 · Partial fix · 2.84.2, 2.80.4-4.el10_0.6 +18 CWE-124
