Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-19566

Опубликовано: 01 июл. 2026
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2026-19566: glib2 security update (MODERATE)

[2.56.1-9.0.5]

  • Fixes CVE-2025-14078 gvariant parser buffer underflow [Orabug: 39418716]

[2.56.1-9.0.3]

  • Fixes CVE-2025-13601 g_escape_uri_string() overflow [Orabug: 38909821]

[2.56.1-9.0.1]

  • Fix overflow of GDBusConnection serial [Orabug: 38666376]

Обновленные пакеты

Oracle Linux 7

Oracle Linux x86_64

glib2

2.56.1-9.0.5.el7_9

glib2-devel

2.56.1-9.0.5.el7_9

glib2-doc

2.56.1-9.0.5.el7_9

glib2-fam

2.56.1-9.0.5.el7_9

glib2-static

2.56.1-9.0.5.el7_9

glib2-tests

2.56.1-9.0.5.el7_9

Связанные CVE

Связанные уязвимости

CVSS3: 5.6
ubuntu
8 месяцев назад

A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.

CVSS3: 5.6
redhat
8 месяцев назад

A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.

CVSS3: 5.6
nvd
8 месяцев назад

A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.

CVSS3: 5.6
msrc
7 месяцев назад

Glib: glib: buffer underflow in gvariant parser leads to heap corruption

CVSS3: 5.6
debian
8 месяцев назад

A flaw was found in GLib (Gnome Lib). This vulnerability allows a remo ...