SUSE: Security Advisory (SUSE-SU-2026:20032-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES16 Security Update : glib2 (SUSE-SU-2026:20032-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20032-1 advisory. Update to version 2.84.4. Security issues fixed: - CVE-2025-14512: integer overflow in the GIO escapebytestring function when...

openSUSE 16 Security Update : glib2 (openSUSE-SU-2026:20018-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20018-1 advisory. Update to version 2.84.4. Security issues fixed: - CVE-2025-14512: integer overflow in the GIO escapebytestring function when processing malicio...

CVE-2025-14087 affecting package glib for versions less than 2.78.6-6

CVE-2025-14087 affecting package glib for versions less than 2.78.6-6. A patched version of the package is available...

SUSE SLED15: gio-branding-upstream / glib2-devel / glib2-devel-32bit / etc (SUSE-SU-2026:0018-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0018-1 advisory. - CVE-2025-14512: integer overflow in the GIO escapebytestring function when processing maliciou...

openSUSE Security Advisory (SUSE-SU-2026:0018-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : glib2, --advisory ALAS2-2025-3117 (ALAS-2025-3117)

The version of glib2 installed on the remote host is prior to 2.56.1-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3117 advisory. Buffer underflow on Glib through glib/gvariant via bytestringparse or stringparse leads to OOB Write. CVE-2025-14087 Tenable has...

SUSE SLES15: glib2-devel / glib2-lang / glib2-tools / libgio-2_0-0 / etc (SUSE-SU-2025:4504-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4504-1 advisory. - CVE-2025-14512: integer overflow in the GIO escapebytestring function when processing malicious files or remote filesystem...

Fedora: Security Advisory (FEDORA-2025-ecdc29aa34)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : mingw-glib2 (2025-b2df36b70a)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b2df36b70a advisory. Update to glib-2.84.4 and backport fixes for CVE-2025-13601, CVE-2025-14087 and CVE-2025-14512. Tenable has extracted the preceding description bloc...

Fedora 43 : mingw-glib2 (2025-ecdc29aa34)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ecdc29aa34 advisory. Update to 2.86.3, fixes CVE-2025-13601, CVE-2025-14087 and CVE-2025-14512. Tenable has extracted the preceding description block directly from the...

SUSE: Security Advisory (SUSE-SU-2025:4441-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12: glib2-devel / glib2-devel-static / glib2-lang / glib2-tools / etc (SUSE-SU-2025:4441-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4441-1 advisory. - CVE-2025-14512: integer overflow in the GIO escapebytestring function when processing malicious files or remote filesystem attribute values c...

[SECURITY] [DLA 4412-1] glib2.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4412-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 16, 2025 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-4412-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BELL-CVE-2025-14087

Bulletin has no description...

CVE-2025-14087

creationtimestamp| type| source ---|---|--- 2025-12-10 11:10:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7mwe7aa7d2x 2026-01-06 12:00:54+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mbqvqqvcmx26 2026-01-30 13:42:35+00:00| seen|...

DEBIAN-CVE-2025-14087

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

AZL-72296 CVE-2025-14087 affecting package glib for versions less than 2.71.0-9

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

CVE-2025-14087 Glib: glib: buffer underflow in gvariant parser leads to heap corruption

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...