Red Hat Security AdvisoryRHSA-2025:11374
glib2 security update
Released 2025-07-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) glib2-static-2.68.4-14.el9_4.3
- Red Hat Enterprise Linux AppStream EUS (v.9.4) glib2-devel-2.68.4-14.el9_4.3, glib2-doc-2.68.4-14.el9_4.3, glib2-tests-2.68.4-14.el9_4.3
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) glib2-2.68.4-14.el9_4.3
Fixes 2 records
Priority MEDIUM 52
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01507 · Published 2024-11-11 · Partial fix CWE-120
Priority LOW 23
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function.
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00647 · Published 2025-05-06 · Partial fix · 2.84.2, 2.80.4-4.el10_0.6 +18 CWE-124
