USN-4764-1: GLib vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that GLib incorrectly handled certain symlinks when replacing files. If a user or automated system were tricked into extracting a specially crafted file with File...

Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2021-1759)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2021-1106 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: An issue was discovered in GNOME GLib...

Photon OS 4.0: Glib PHSA-2021-4.0-0007

An update of the glib package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0007. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148347;...

Critical Photon OS Security Update - PHSA-2021-0007

Updates of 'linux-aws', 'containerd', 'linux-secure', 'glib', 'libtiff', 'linux-rt', 'curl', 'linux', 'libvirt', 'openssl', 'mysql', 'wpasupplicant', 'apache-tomcat', 'python3', 'nodejs', 'docker' packages of Photon OS have been released...

CVE-2021-27218 affecting package glib 2.58.0-10

CVE-2021-27218 affecting package glib 2.58.0-10. A patched version of the package is available...

CVE-2021-27219 affecting package glib 2.58.0-10

CVE-2021-27219 affecting package glib 2.58.0-10. A patched version of the package is available...

Critical Photon OS Security Update - PHSA-2021-4.0-0007

Updates of 'linux-rt', 'mysql', 'apache-tomcat', 'libtiff', 'linux-aws', 'containerd', 'nodejs', 'linux-secure', 'linux', 'openssl', 'wpasupplicant', 'curl', 'glib', 'docker', 'libvirt', 'python3' packages of Photon OS have been released...

Photon OS 2.0: Glib PHSA-2021-2.0-0333

An update of the glib package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0333. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148286;...

Photon OS 3.0: Glib PHSA-2021-3.0-0213

An update of the glib package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0213. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148293;...

Photon OS 1.0: Glib PHSA-2021-1.0-0376

An update of the glib package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0376. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148282;...

Important Photon OS Security Update - PHSA-2021-0213

Updates of 'nodejs', 'subversion', 'glib' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-3.0-0213

Updates of 'glib', 'nodejs', 'subversion' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-0333

Updates of 'glib', 'containerd', 'subversion' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0333

An update of 'subversion', 'glib', 'containerd' packages of Photon OS has been released...

MGASA-2021-0162 Updated glib2.0 packages fix security vulnerability

An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...

Updated glib2.0 packages fix security vulnerability

An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...

Photon OS 4.0: Glib PHSA-2021-4.0-0001

An update of the glib package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0001. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148023;...

An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink it incorrectly also creates the target of the symlink as an empty file which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists then the contents of that file correctly remain unchanged.)

...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : GLib vulnerability (USN-4764-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4764-1 advisory. It was discovered that GLib incorrectly handled certain symlinks when replacing files. If a user or automated system were tricked into...