GLSA-202311-18 : GLib: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202311-18 GLib: Multiple Vulnerabilities - A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service. CVE-2023-29499 - A flaw was found in GLi...

Oracle Linux 9 : glib2 (ELSA-2023-6631)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6631 advisory. - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180 - Resolve use after free introduced by fixes for...

Low: Red Hat Security Advisory: glib2 security and bug fix update

An update for glib2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

RHEL 9 : glib2 (RHSA-2023:6631)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6631 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...

Low: glib2 security and bug fix update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: GVariant offset table...

Ubuntu: Security Advisory (USN-6165-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2023-1697741722 Fix of 5 CVEs

SECURITY UPDATE: GVariant security issues - debian/patches/CVE-2023-29499-x-CVE-2023-32665/.patch: fix multiple GVariant serialization issues - CVE-2023-29499, CVE-2023-32611, CVE-2023-32636, CVE-2023-32643, CVE-2023-32665 debian/patches/fix-gtestbug-assertion.patch: Fix gtestbug assertion in...

Ubuntu 16.04 ESM / 18.04 ESM : GLib vulnerabilities (USN-6165-2)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6165-2 advisory. USN-6165-1 fixed vulnerabilities in GLib. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu...

Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2023-2982)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3583 : libglib2.0-0 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3583 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3583-1 [email protected]...

[SECURITY] [DLA 3583-1] glib2.0 security update

Debian LTS Advisory DLA-3583-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón September 25, 2023 https://wiki.debian.org/LTS Package : glib2.0 Version : 2.58.3-2+deb10u5 CVE ID : CVE-2023-29499 CVE-2023-32611 CVE-2023-32665 Several security vulnerabilities...

AZL-28778 CVE-2023-32636 affecting package glib for versions less than 2.71.0-4

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect gli...

Deserialization of untrusted data

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect gli...

BELL-CVE-2023-29499 CVE-2023-29499 does not affect BellSoft software

Bulletin has no description...

CVE-2023-32636

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect gli...

CVE-2023-32636

GLib: CVE-2023-32636 describes a DoS in GVariant deserialization caused by slow offset table validation; the description notes that no released GLib version is affected, but distributors who backported the CVE-29499 fix may be impacted. Connected advisories (including Broadcom/ALAS and AlmaLinux)...

CVE-2023-29499

A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service...

SUSE: Security Advisory (SUSE-SU-2023:3535-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:3535-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files. bsc1183533 - CVE-2023-32665: Fixed GVariant deserialisation which does not match spec for non-normal data. bsc1211945 - CVE-2023-32643: Fixed a...

Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2023-2612)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...