Medium: glib2

Issue Overview: A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition. CVE-2021-3800 Affected Packages: glib2 Note: This advisory is applicable to Amazon Linux 2 AL2...

Amazon Linux AMI : glib2 (ALAS-2023-1749)

The version of glib2 installed on the remote host is prior to 2.36.3-5.24. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1749 advisory. GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in gmarkupparsecontextparse in gmarkup.c, related to utf8str...

Amazon Linux 2 : glib2 (ALAS-2023-2049)

The version of glib2 installed on the remote host is prior to 2.56.1-9. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2049 advisory. In GNOME GLib 2.56.1, gmarkupparsecontextendparse in gmarkup.c has a NULL pointer dereference. CVE-2018-16428 GNOME GLib...

Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2023-1701)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.0 : glib2 (EulerOS-SA-2023-1701)

According to the versions of the glib2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privilege...

Amazon Linux AMI : glib2 (ALAS-2023-1742)

The version of glib2 installed on the remote host is prior to 2.36.3-5.23. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1742 advisory. In GNOME GLib 2.56.1, gmarkupparsecontextendparse in gmarkup.c has a NULL pointer dereference. CVE-2018-16428 GNOME GLib...

Important: glib2

Issue Overview: In GNOME GLib 2.56.1, gmarkupparsecontextendparse in gmarkup.c has a NULL pointer dereference. CVE-2018-16428 GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in gmarkupparsecontextparse in gmarkup.c, related to utf8str. CVE-2018-16429 The keyfile settings backend in GNOM...

SUSE SLES15 / openSUSE 15 Security Update : glib2 (SUSE-SU-2023:2076-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2076-1 advisory. - The upstream bug report describes this issue as follows: CVE-2023-24593, CVE-2023-25180 Note that Nessus has not tested for the...

SUSE-SU-2023:2076-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2023-24593: Fixed a denial of service caused by handling a malicious text-form variant bsc1209714. - CVE-2023-25180: Fixed a denial of service caused by malicious serialised variant bsc1209713. The following non-security bug was fixed: - Fix...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : glib2 (SUSE-SU-2023:2060-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2060-1 advisory. - The upstream bug report describes this issue as follows: CVE-2023-24593, CVE-2023-25180 Note...

SUSE-SU-2023:2060-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2023-24593: Fixed a denial of service caused by handling a malicious text-form variant bsc1209714. - CVE-2023-25180: Fixed a denial of service caused by malicious serialised variant bsc1209713. The following non-security bug was fixed: - Fix...

SUSE SLED12 / SLES12 Security Update : glib2 (SUSE-SU-2023:1910-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1910-1 advisory. - The upstream bug report describes this issue as follows: CVE-2023-24593, CVE-2023-25180 Note that Nessus has...

SUSE: Security Advisory (SUSE-SU-2023:1910-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:1910-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2023-24593: Fixed a denial of service caused by handling a malicious text-form variant bsc1209714. - CVE-2023-25180: Fixed a denial of service caused by malicious serialised variant bsc1209713...

Fedora: Security Advisory for mingw-glib2 (FEDORA-2023-cfe20dbcab)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for mingw-glib2 (FEDORA-2023-f519fe8cda)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: mingw-glib2-2.72.1-2.fc36

MinGW Windows Glib2 library...

[SECURITY] Fedora 37 Update: mingw-glib2-2.74.1-2.fc37

MinGW Windows Glib2 library...

Fedora 37 : mingw-glib2 (2023-cfe20dbcab)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-cfe20dbcab advisory. Backport patch for CVE-2023-24593. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 36 : mingw-glib2 (2023-f519fe8cda)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-f519fe8cda advisory. Backport patch for CVE-2023-24593. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...