Red Hat Security AdvisoryRHSA-2025:14988
glib2 security update
Released 2025-09-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) glib2-2.56.4-158.el8_6.2, glib2-devel-2.56.4-158.el8_6.2, glib2-fam-2.56.4-158.el8_6.2 +1
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) glib2-2.56.4-158.el8_6.2, glib2-devel-2.56.4-158.el8_6.2, glib2-fam-2.56.4-158.el8_6.2 +1
- Red Hat Enterprise Linux BaseOS TUS (v.8.6) glib2-2.56.4-158.el8_6.2, glib2-devel-2.56.4-158.el8_6.2, glib2-fam-2.56.4-158.el8_6.2 +1
Fixes 3 records
Priority MEDIUM 52
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01507 · Published 2024-11-11 · Partial fix CWE-120
Priority LOW 25
An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1.
CVSS 3.1MEDIUM 5.2· Physical · No auth · No interaction · EPSS 0.00763 · Published 2024-05-07 · Partial fix CWE-290
Priority LOW 23
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function.
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00647 · Published 2025-05-06 · Partial fix · 2.84.2, 2.80.4-4.el10_0.6 +18 CWE-124
