Moderate Photon OS Security Update - PHSA-2024-4.0-0628

Updates of 'glib' packages of Photon OS have been released...

The vulnerability of the NetworkManager service in the Glib library allows a hacker to trigger a service failure.

The vulnerability of the NetworkManager service in the Glib library is related to improper checking of the connection source. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

RHEL 8 : glib-networking (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - glib-networking: GTlsClientConnection silently ignores unset server identity CVE-2020-13645 Note that Nessus has no...

RHEL 7 : glib-networking (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - glib-networking: GTlsClientConnection silently ignores unset server identity CVE-2020-13645 Note that Nessus has no...

Fedora 39 : glycin-loaders / gnome-tour / helix / helvum / libipuz / librsvg2 / etc (2024-40ee18b2e7)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-40ee18b2e7 advisory. This update contains builds from a mini-mass-rebuild for Rust applications and some C-style libraries. Rebuilding with the Rust 1.78 toolchain should fix...

USN-6768-1: GLib vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description Alicia Boya García discovered that GLib incorrectly handled signal subscriptions. A local attacker could use this issue to spoof D-Bus signals resulting in a variety of impacts including possible privileg...

Fedora 40 : glycin-loaders / gnome-tour / helix / helvum / libipuz / loupe / etc (2024-ce2936b568)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-ce2936b568 advisory. This update contains builds from a mini-mass-rebuild for Rust applications and some C-style libraries. Rebuilding with the Rust 1.78 toolchain should fix...

Fedora: Security Advisory (FEDORA-2024-fd2569c4e9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 9 : glib2-2.68.4-15.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the glib2-2.68.4-15.el9 build changelog. - An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus- based client subscribes to signals from a...

Spoofing Attack

GNOME GLib is vulnerable to spoofing Attack. The vulnerability is due to inadequate validation of the source of D-Bus signals in GDBus-based clients, allowing spoofed signals from other users on a shared system to be accepted as legitimate...

The vulnerability of the Glib library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Glib library is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Glib library, related to buffer overflows in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of the Glib library is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Fedora 39 : mingw-glib2 (2024-be032e564d)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-be032e564d advisory. Update glib2 to fix CVE-2024-34397. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

Fedora 39 : glib2 / gnome-shell (2024-fd2569c4e9)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-fd2569c4e9 advisory. Resolve CVE-2024-34397 GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing, and also update gnome-shell to ensure this fix doe...

Debian dla-3814 : libglib2.0-0 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3814 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3814-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3814-1] glib2.0 security update

Debian LTS Advisory DLA-3814-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 13, 2024 https://wiki.debian.org/LTS Package : glib2.0 Version : 2.58.3-2+deb10u6 CVE ID : CVE-2024-34397 Alicia Boya Garcia reported that the GDBus signal subscriptions in the GLib...

Fedora 40 : glib2 / gnome-shell (2024-635a54eb7e)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-635a54eb7e advisory. Resolve CVE-2024-34397 GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing, and also update gnome-shell to ensure this fix doe...

RHEL 7 : glib (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - glib: gfilereplace with GFILECREATEREPLACEDESTINATION creates empty target for dangling symlink...

RHEL 6 : glib (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - glib: gfilereplace with GFILECREATEREPLACEDESTINATION creates empty target for dangling symlink...

RHEL 6 : glib2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - glib2: filecopyfallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a...