[SECURITY] Fedora 30 Update: geocode-glib-3.26.1-2.fc30

geocode-glib is a convenience library for the geocoding finding longitude, and latitude from an address and reverse geocoding finding an address from coordinates. It uses Nominatim service to achieve that. It also caches reverse-geocoding requests for faster results and to avoid unnecessary se rv...

UBUNTU-CVE-2019-3804

It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash...

Design/Logic Flaw

It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash...

CVE-2019-3804

It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash...

CVE-2019-3804

It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash...

PT-2019-4638

Name of the Vulnerable Software and Affected Versions Glib versions prior to 2.60.0 Description The issue is related to incorrect permission handling in the Glib library, specifically in the functions g file make directory with parents and g file replace contents. This can allow a remote attacker...

cockpit: Crash when parsing invalid base64 headers

It was found that cockpit used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash...

Code injection

gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service gsocketclientconnectedcallback mishandling and application crash via a crafted web sit...

CVE-2019-9633

gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service gsocketclientconnectedcallback mishandling and application crash via a crafted web sit...

CVE-2019-9633

gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service gsocketclientconnectedcallback mishandling and application crash via a crafted web sit...

CVE-2019-9633

CVE-2019-9633 affects GNOME GLib (gsocketclient.c): a parent GTask may not remain alive during a connection-enumeration, enabling a remote attacker to trigger an application crash through a crafted web page (g_socket_client_connected_callback mishandling). The Connected document list is not provi...

CVE-2019-9633

gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service gsocketclientconnectedcallback mishandling and application crash via a crafted web sit...

CVE-2019-9633: Improper Check for Unusual or Exceptional Conditions

gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service gsocketclientconnectedcallback mishandling and application crash via a crafted web sit...

PT-2019-19767

Name of the Vulnerable Software and Affected Versions GLib version 2.59.2 Description The issue allows remote attackers to cause a denial of service, leading to application crash, via a crafted web site. This is demonstrated by GNOME Web aka Epiphany, where the g socket client connected callback ...

GNOME GLib Denial of Service Vulnerability (CNVD-2019-13265)

GNOME Glib is a multi-platform toolkit for creating graphical user interfaces, and is the underlying core library that underlies GTK+ and GNOME projects. A security vulnerability exists in the gio/gsocketclient.c file in GNOME GLib version 2.59.2. An attacker can exploit this vulnerability to cau...

Photon OS 1.0: Glib PHSA-2018-1.0-0194

An update of the glib package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0194. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121896;...

Photon OS 2.0: Glib PHSA-2018-2.0-0108

An update of the glib package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0108. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid122004;...

Local Privilege Escalation

libdbus-glib-1.so is vulnerable to local privilege escalation attacks. The vulnerability exists due to the improper filtering of the message sender value when the NameOwnerChanged signal is received, allowing privilege escalation attacks...

PackageKit, accountsservice, adwaita, appstream, at, atk, baobab, bolt, brasero, cairo, cheese, clutter, compat, control, dconf, devhelp, ekiga, empathy, eog, evince, evolution, file, flatpak, folks, fontconfig, freetype, fribidi, fwupd, fwupdate, gcr, gdk, gdm, gedit, geoclue2, geocode, gjs, glade, glib, glib2, glibmm24, gnome, gnote, gobject, gom, google, grilo, gsettings, gspell, gssdp, gstreamer1, gtk, gtk3, gtksourceview3, gucharmap, gupnp, gvfs, harfbuzz, json, libappstream, libchamplain, libcroco, libgdata, libgee, libgepub, libgexiv2, libgnomekbd, libgovirt, libgtop2, libgweather, libgxps, libical, libmediaart, libosinfo, libpeas, librsvg2, libsecret, libsoup, libwayland, libwnck3, mozjs52, mutter, nautilus, openchange, osinfo, pango, poppler, python2, rest, rhythmbox, seahorse, shotwell, sushi, totem, upower, vala, valadoc, vino, vte, vte291, wayland, webkitgtk4, xdg, yelp, zenity security update

CentOS Errata and Security Advisory CESA-2018:3140 An update is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Gnome Glib version 2.58.1 suffers from an out-of-bounds read vulnerability

GNOME is a GNU network object model.GLib provides the core application components for libraries and programs written in C. An out-of-bounds read vulnerability exists in Gnome Glib version 2.58.1. An attacker can exploit to cause a stack overflow out-of-bounds read...