Описание
ELSA-2023-6631: glib2 security and bug fix update (LOW)
[2.68.4-11]
- Really fix authentication failures when sd-bus clients connect to GDBus servers
- Resolves: #2217771
[2.68.4-10]
- Fix authentication failures when sd-bus clients connect to GDBus servers
- Resolves: #2217771
[2.68.4-9]
- Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
- Related: #2181196
- Related: #2181200
[2.68.4-8]
- Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
- Related: #2181196
- Related: #2181200
[2.68.4-7]
- Fix CVE-2023-24593 and CVE-2023-25180
- Resolves: #2181196
- Resolves: #2181200
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
glib2
2.68.4-11.el9
glib2-devel
2.68.4-11.el9
glib2-doc
2.68.4-11.el9
glib2-static
2.68.4-11.el9
glib2-tests
2.68.4-11.el9
Oracle Linux x86_64
glib2
2.68.4-11.el9
glib2-devel
2.68.4-11.el9
glib2-doc
2.68.4-11.el9
glib2-static
2.68.4-11.el9
glib2-tests
2.68.4-11.el9
Связанные CVE
Связанные уязвимости
CVSS3: 7.5
altlinux
почти 4 года назад
ALT-PU-2022-7760: package `glib2` update to version 2.74.4-alt1
CVSS3: 5.5
ubuntu
около 3 лет назад
A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.