Red Hat Security AdvisoryRHSA-2025:12275
glib2 security update
Released 2025-07-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.0) glib2-devel-2.68.4-5.el9_0.2, glib2-doc-2.68.4-5.el9_0.2, glib2-tests-2.68.4-5.el9_0.2
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) glib2-2.68.4-5.el9_0.2
Fixes 2 records
Priority MEDIUM 52
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01507 · Published 2024-11-11 · Partial fix CWE-120
Priority LOW 23
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function.
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00647 · Published 2025-05-06 · Partial fix · 2.84.2, 2.80.4-4.el10_0.6 +18 CWE-124
