Low: glib2 security and bug fix update
Summary
ALSA-2023:6631: Low: glib2 security and bug fix update. Affects glib2 versions < 2.68.4-11.el9. Fixed in 2.68.4-11.el9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.
Vulnerability Detail
The glib2 package is affected by multiple security vulnerabilities:
- CVE-2023-29499: GVariant offset table entry size is not checked in is_normal().
- CVE-2023-32611: g_variant_byteswap() can take a long time with some non-normal inputs.
- CVE-2023-32665: GVariant deserialization does not match spec for non-normal data.
These vulnerabilities could potentially lead to various security issues, including denial of service, information disclosure, or remote code execution.
How To Fix
Minimum fixed version
2.68.4-11.el9
This is the first release that contains the fix.
sudo dnf update glib2Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no known workarounds for these vulnerabilities.
Conclusion
The glib2 package is affected by multiple security vulnerabilities. It is recommended to update the package to the latest version to mitigate the risks. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for glib2 →
FAQ
GLib provides the core application building blocks for libraries and applications written in C. It is widely used in the GNOME desktop environment.
These vulnerabilities could potentially lead to denial of service, information disclosure, or remote code execution.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability.
There are no known workarounds for these vulnerabilities. It is recommended to update the glib2 package to the latest version.
You can find more information about these vulnerabilities in the CVE pages listed in the References section.
Related vulnerabilities
Recent vulnerabilities recorded for glib2.
