2545 matches found
Integer Overflow or Wraparound
DISPUTED GNOME GLib has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of calls ...
CVE-2020-35457: Integer Overflow or Wraparound
GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of...
glib:fuzz_date_time_new_from_iso8601: Global-buffer-overflow in g_date_time_get_ymd
Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=5111097636028416 Project: glib Fuzzing Engine: afl Fuzz Target: fuzzdatetimenewfromiso8601 Job Type: aflasanglib Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash Address:...
glib:fuzz_date_parse: Heap-buffer-overflow in g_utf8_casefold
Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=4860040523677696 Project: glib Fuzzing Engine: honggfuzz Fuzz Target: fuzzdateparse Job Type: honggfuzzasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
SUSE SLES12 Security Update : sane-backends (SUSE-SU-2020:3125-1)
This update for sane-backends fixes the following issues : sane-backends version upgrade to 1.0.31 : - sane-backends version upgrade to 1.0.30 fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862, CVE-2020-12863, CVE-2020-12864, CVE-2020-12865, CVE-2020-12866, CVE-2020-12867 bsc1172524 -...
Medium: glib2
Issue Overview: filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used. CVE-2019-12450 Affected Packages: glib2 Note: This advisory is applicable to Amazon Linux 2...
EulerOS Virtualization 3.0.6.6 : glib-networking (EulerOS-SA-2020-2466)
According to the version of the glib-networking package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the...
Huawei EulerOS: Security Advisory for glib-networking (EulerOS-SA-2020-2466)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for glib-networking (EulerOS-SA-2020-2346)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libosinfo bug fix and enhancement update
An update is available for libvirt-glib. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...
EulerOS 2.0 SP2 : glib-networking (EulerOS-SA-2020-2346)
According to the version of the glib-networking package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS...
EulerOS 2.0 SP2 : eog (EulerOS-SA-2020-2341)
According to the version of the eog packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Eye of GNOME aka eog 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers...
EulerOS 2.0 SP5 : glib-networking (EulerOS-SA-2020-2246)
According to the version of the glib-networking package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS...
Huawei EulerOS: Security Advisory for glib-networking (EulerOS-SA-2020-2246)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2 : spice-gtk (ALAS-2020-1546)
It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1546 advisory. Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system. Both the SPICE client spice-gtk and server are affected by these flaws. These fla...
glib2, ibus security update
CentOS Errata and Security Advisory CESA-2020:3978 An update for glib2 and ibus is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
CVE-2020-13645 affecting package glib-networking 2.59.1-7
CVE-2020-13645 affecting package glib-networking 2.59.1-7. A patched version of the package is available...
glib:fuzz_uri_escape: Crash in g_string_insert_len
Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=6320624772055040 Project: glib Fuzzing Engine: libFuzzer Fuzz Target: fuzzuriescape Job Type: libfuzzermsanglib Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x728000010000 Crash State...
glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress
filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used...