USN-4049-4
glib2.0 regression
USN-4049-1 fixed a vulnerability in GLib. The update introduced a regression. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that GLib created directories and files without properly restricting permissions. An attacker could possibly use this issue to access sensitive information.
What each source reports
OSV No score
glib2.0 regression
USN-4049-1 fixed a vulnerability in GLib. The update introduced a regression. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that GLib created directories and files without properly restricting permissions. An attacker could possibly use this issue to access sensitive information.
- Record
USN-4049-4- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
glib2.0Ubuntu:Pro:14.04:LTS |
before 2.40.2-0ubuntu1.1+esm3, plus listed versions 2.38.0-1ubuntu12.38.1-12.39.1-0ubuntu12.39.1-0ubuntu22.39.1-0ubuntu3 Show 15 moreShow less2.39.2-0ubuntu12.39.2-0ubuntu22.39.3-0ubuntu42.39.4-0ubuntu12.39.90-0ubuntu12.39.91-0ubuntu22.39.91-0ubuntu32.39.92-22.40.0-12.40.0-1ubuntu12.40.0-22.40.2-0ubuntu12.40.2-0ubuntu1.12.40.2-0ubuntu1.1+esm12.40.2-0ubuntu1.1+esm2 |
2.40.2-0ubuntu1.1+esm3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4049-4 is a vulnerability with no CVSS score yet in glib2.0, published August 6, 2019. No source lists public exploit code. Fixed in glib2.0 2.40.2-0ubuntu1.1+esm3.