Glib input validation vulnerability

Glib is a generic, portable utility library for the GNOME project. It provides many useful data types, macros, type conversions, string utilities, file utilities, and main loop abstractions. Glib has a vulnerability related to input validation. This vulnerability stems from the...

glib2 security update

2.68.4-18.1 - Add patch for CVE-2025-13601...

MiracleLinux 7 : spice-0.14.0-2.el7.5, spice-gtk-0.34-3.el7.2 (AXSA:2018-3324:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3324:02 advisory. Security Fix - SPICE CVE-2018-10873 CVEJVNhttp://jvndb.jvn.jp/ Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 7 : glib2-2.56.1-7.el7, ibus-1.5.17-11.el7 (AXSA:2020-680:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-680:02 advisory. glib2: filecopyfallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress CVE-2019-12450...

MiracleLinux 9 : glib2-2.68.4-11.el9 (AXSA:2023-6826:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6826:03 advisory. glib: GVariant offset table entry size is not checked in isnormal CVE-2023-29499 glib: gvariantbyteswap can take a long time with some non-normal...

MiracleLinux 9 : mingw-glib2-2.78.0-1.el9 (AXSA:2024-8071:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8071:01 advisory. glib: GVariant offset table entry size is not checked in isnormal CVE-2023-29499 glib: gvariantbyteswap can take a long time with some non-normal...

MiracleLinux 8 : mingw-glib2-2.66.7-2.el8 (AXSA:2021-2771:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2771:01 advisory. glib: integer overflow in gbytesnew function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits CVE-2021-27219 glib: integer overfl...

MiracleLinux 4 : spice-gtk-0.26-8.AXS4.2 (AXSA:2020-4447:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-4447:01 advisory. spice-client: Insufficient encoding checks for LZ can cause different integer/buffer overflows CVE-2018-10893 Tenable has extracted the preceding description...

MiracleLinux 3 : dbus-glib-0.73-10.AXS3 (AXSA:2010-412:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2010-412:01 advisory. D-Bus add-on library to integrate the standard D-Bus library with the GLib thread abstraction and main loop. Security issues fixed with this release;...

MiracleLinux 3 : glib2-2.12.3-4AXS3.1 (AXSA:2009-31:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-31:01 advisory. GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, a...

Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak

Summary Multiple vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak. RedHat UBI is used as base image for IBM Robotic Process Automation for Cloud Pak images. This bulletin identifies the fixes required to address the vulnerabilites. Vulnerability Details...

MiracleLinux 4 : dbus-glib-0.86-6.AXS4 (AXSA:2013-165:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-165:01 advisory. D-Bus add-on library to integrate the standard D-Bus library with the GLib thread abstraction and main loop. Security issues fixed with this release:...

UBUNTU-CVE-2026-0988

A flaw was found in glib. Missing validation of offset and count parameters in the gbufferedinputstreampeek function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy, triggering...

MiracleLinux 3 : dbus-glib-0.73-11.AXS3 (AXSA:2013-125:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-125:01 advisory. D-Bus add-on library to integrate the standard D-Bus library with the GLib thread abstraction and main loop. Security issues fixed with this release:...

Linux Distros Unpatched Vulnerability : CVE-2026-0988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in glib. Missing validation of offset and count parameters in the gbufferedinputstreampeek function can lead to an integer overflow during leng...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the gbufferedinputstreampeek function. An attacker can cause application crashes by providing specially crafted input that triggers an integer overflow. Remediation A fix was pushed into the master...

Astra Linux – Vulnerability in glib2.0

A heap-based buffer overflow issue was discovered in glib due to an incorrect calculation of the buffer size in the gescapeuristring function. If the string to be escaped contains a very large number of unacceptable characters which would require escaping, the calculation of the length of the...

Astra Linux – Vulnerability in glib2.0

A flaw was discovered in glib. This vulnerability allows for a heap buffer overflow and a denial-of-service attack through an integer overflow in GLib’s GIO GLib Input/Output escapebytestring function, when processing malicious file or remote filesystem attribute values...

MiracleLinux 7 : glib2-2.56.1-9.0.3.el7.AXS7 (AXSA:2025-10925:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10925:04 advisory. CVE-2024-52533: fix off-by-one error leading to buffer overflow in gsocks4aproxy.c CVEs: CVE-2024-52533 gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has ...

MiracleLinux 9 : glib2-2.68.4-16.el9_6.2 (AXSA:2025-10648:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10648:03 advisory. glib: buffer overflow in setconnectmsg CVE-2024-52533 glib: Buffer Underflow on GLib through glib/gstring.c via function gstringinsertunichar...