Moderate: glib2 security and bug fix update

🗓️ 09 Nov 2021 09:16:02Reported by AlmaLinuxType

almalinux

almalinux🔗 errata.almalinux.org👁 33 Views

GLib security and bug fix update for privilege escalation and file manipulation vulnerabilities

Reporter	Title	Published	Views	Family All 214
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities fixed in Cloud Pak for Automation components	19 Jan 202216:26	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to multiple CVEs	29 Apr 202502:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with Known Vulnerabilities	25 Apr 202214:44	–	ibm
Tenable Nessus	Amazon Linux 2 : glib2 (ALAS-2023-2058)	5 Jun 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : glib2 (ALAS-2024-2487)	5 Mar 202400:00	–	nessus
Tenable Nessus	Amazon Linux AMI : glib2 (ALAS-2023-1742)	4 May 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : glib2 (ALSA-2021:4385)	9 Feb 202200:00	–	nessus
Tenable Nessus	AlmaLinux 9 : mingw-glib2 (ALSA-2022:8418)	19 Nov 202200:00	–	nessus
Tenable Nessus	CentOS 8 : glib2 (CESA-2021:4385)	11 Nov 202100:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
almalinux	8	i686	glib2-static	2.56.4-156.el8	glib2-static-2.56.4-156.el8.i686.rpm
almalinux	8	noarch	glib2-doc	2.56.4-156.el8	glib2-doc-2.56.4-156.el8.noarch.rpm
almalinux	8	x86_64	glib2-static	2.56.4-156.el8	glib2-static-2.56.4-156.el8.x86_64.rpm

Source	Link
vulners	www.vulners.com/cve/CVE-2021-28153
vulners	www.vulners.com/cve/CVE-2021-3800

12 Nov 2021 10:21Current

7.2High risk

Vulners AI Score7.2

CVSS 25

CVSS 3.15.5

EPSS0.02622

glib security update privilege escalation file manipulation cve-2021-3800 cve-2021-28153 almalinux