OESA-2025-2904 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A vulnerability was found in GNOME GLib...

TencentOS Server 4: glib2 (TSSA-2025:0970)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0970 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

AZL-72286 CVE-2025-14512 affecting package glib for versions less than 2.78.6-6

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output escapebytestring function when processing malicious file or remote filesystem attribute values...

CVE-2025-14512

CVE-2025-14512 affects GLib2 (glib2) in IBM Netezza Appliance. The IBM security bulletin confirms a vulnerability in GLib’s GIO escape_byte_string() that can cause a heap-based buffer overflow leading to DoS when processing certain file or remote filesystem attribute values. Remediation: upgrade ...

SUSE CVE-2025-14087

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the escapebytestring function. An attacker can cause a heap buffer overflow and application crash by supplying specially crafted file or remote filesystem attribute values. Remediation Upgrade glib to...

CVE-2025-14087 Glib: glib: buffer underflow in gvariant parser leads to heap corruption

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

EUVD-2025-202405

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

Linux Distros Unpatched Vulnerability : CVE-2025-14087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code...

CVE-2025-13601 affecting package glib for versions less than 2.78.6-5

CVE-2025-13601 affecting package glib for versions less than 2.78.6-5. A patched version of the package is available...

Siemens SIMATIC S7-1500 Uncontrolled Resource Consumption (CVE-2023-32611)

A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

CVE-2025-4373 affecting package glib for versions less than 2.71.0-7

CVE-2025-4373 affecting package glib for versions less than 2.71.0-7. A patched version of the package is available...

EUVD-2018-8269

Malware in sbrugna...

EUVD-2018-2837

Malware in sbrugna...

EUVD-2019-19003

Malware in sbrugna...

Unity Linux 20.1070a Security Update: glib2 (UTSA-2025-987416)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987416 advisory. gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for a trailing '\0'...

EUVD-2023-36886

Malicious code in bioql PyPI...

EUVD-2023-36854

Malicious code in bioql PyPI...

EUVD-2023-36879

Malicious code in bioql PyPI...

SUSE CVE-2025-7039

A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to...