Security update for glib2
This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).
- Обновитесь до 2.70.5-150400.3.40.1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости glib2
За последние 30 дней в glib2 опубликовано уязвимостей: 1; в каталоге KEV: 0.
Уязвимостей: 11
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009). - CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte out-of-bounds read (bsc#1270010). - CVE-2026-58012: raw byte regex matches with UTF-8 functions during case-change replacements could cause an out-of- bounds read (bsc#1270016). - CVE-2026-58013: multi-byte custom line terminator in g_io_channel_read_line_backend could trigger an out-of-bounds read (bsc#1270018). - CVE-2026-58014: processing empty key file values in g_key_file_get_
- Обновитесь до 2.70.5-150400.3.37.1
Опубликовано ОбновленоSecurity update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalculated buffer boundaries in the Base64 encoding routine (bsc#1257355). - CVE-2026-1489: Fixed undersized heap allocation followed by out-of-bounds access due to integer overflow in Unicode case conversion (bsc#1257353). - CVE-2026-0988: Fixed a potential integer overflow in g_buffered_input_stream_peek (bsc#1257049).
- Обновитесь до 2.70.5-150400.3.34.1
Опубликовано ОбновленоSecurity update for glib2
This update for glib2 fixes the following issues: - CVE-2025-14512: integer overflow in the GIO `escape_byte_string()` function when processing malicious files or remote filesystem attribute values can lead to denial-of-service (bsc#1254878). - CVE-2025-14087: buffer underflow in the GVariant parser `bytestring_parse()` and `string_parse()` functions when processing attacker-influenced data may lead to crash or code execution (bsc#1254662). - CVE-2025-13601: heap-based buffer overflow in the `g_escape_uri_string()` function when processing strings with a large number of unacceptable characters may lead to crash or code execution (bsc#1
- Обновитесь до 2.70.5-150400.3.29.1
Опубликовано ОбновленоSecurity update for glib2
This update for glib2 fixes the following issues: - CVE-2025-7039: Fixed buffer under-read on glib through glib/gfileutils.c via get_tmp_file() (bsc#1249055)
- Обновитесь до 2.70.5-150400.3.26.1
Опубликовано ОбновленоSecurity update for glib2
This update for glib2 fixes the following issues: - CVE-2025-4373: integer overflow in the `g_string_insert_unichar()` function can lead to buffer underwrite and memory corruption (bsc#1242844).
- Обновитесь до 2.70.5-150400.3.23.1
Опубликовано ОбновленоSecurity update for glib2
This update for glib2 fixes the following issues: - CVE-2025-3360: Fixed integer overflow and buffer underread when parsing a very long and invalid ISO 8601 timestamp with g_date_time_new_from_iso8601() (bsc#1240897)
- Обновитесь до 2.70.5-150400.3.20.1
Опубликовано ОбновленоSecurity update for glib2
This update for glib2 fixes the following issues: - CVE-2024-52533: Fixed a single byte buffer overflow (bsc#1233282).
- Обновитесь до 2.70.5-150400.3.17.1
Опубликовано ОбновленоSecurity update for glib2
This update for glib2 fixes the following issues: - Fixed a possible use after free regression introduced by CVE-2024-34397 patch (bsc#1224044).
- Обновитесь до 2.70.5-150400.3.14.1
Опубликовано ОбновленоSecurity update for glib2
This update for glib2 fixes the following issues: - CVE-2024-34397: Fixed signal subscription unicast spoofing vulnerability (bsc#1224044).
- Обновитесь до 2.70.5-150400.3.11.1
Опубликовано ОбновленоSecurity update for glib2
This update for glib2 fixes the following issues: - CVE-2023-24593: Fixed a denial of service caused by handling a malicious text-form variant (bsc#1209714). - CVE-2023-25180: Fixed a denial of service caused by malicious serialised variant (bsc#1209713). The following non-security bug was fixed: - Fixed regression on s390x (bsc#1210135, glgo#GNOME/glib!2978).
- Обновитесь до 2.70.5-150400.3.8.1
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.