Gnome Glib vulnerabilities

• gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 more Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" CVE-2026-58016 Fix available 7.5 HighJune 30, 2026
• gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +35 more +37 more Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive CVE-2026-58015 Fix available 5.9 MediumJune 30, 2026
• gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +38 more +40 more Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" CVE-2026-58014 Fix available 7.3 HighJune 30, 2026
• gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 more Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" CVE-2026-58013 Fix available 6.5 MediumJune 30, 2026
• gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 more Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() CVE-2026-58012 Fix available 6.5 MediumJune 30, 2026
• gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 more Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime CVE-2026-58011 Fix available 6.5 MediumJune 30, 2026
• gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 more Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() CVE-2026-58010 Fix available 6.5 MediumJune 30, 2026
• gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +27 more +29 more Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow CVE-2025-14512 Fix available 6.5 MediumDecember 11, 2025
• gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +26 more +28 more Glib: glib: buffer underflow in gvariant parser leads to heap corruption CVE-2025-14087 Fix available 5.6 MediumDecember 10, 2025
• gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 more Glib: integer overflow in in g_escape_uri_string() CVE-2025-13601 Fix available 7.7 HighNovember 26, 2025
• gnome glib, red hat enterprise linux 10, enterprise linux 6 +5 more +7 more Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring CVE-2025-6052 Fix available 3.7 LowJune 13, 2025
• gnome glib, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more Glib: glib crash after long command line CVE-2025-4056 Fix available 7.5 HighApril 29, 2025
• gnome glib, debian linux, netapp active iq unified manager +31 more +33 more gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer... CVE-2024-52533 Fix available 9.8 CriticalNovember 11, 2024
• gnome glib, debian linux, fedoraproject fedora +7 more +9 more An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a... CVE-2024-34397 Fix available 5.2 MediumMay 7, 2024
• gnome glib, fedora extra packages for enterprise linux, fedora +9 more +11 more Gvariant deserialisation does not match spec for non-normal data CVE-2023-32665 Fix available 5.5 MediumJune 7, 2023
• glib, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer... CVE-2023-32643 Fix available 5.3 MediumJune 7, 2023
• glib, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of... CVE-2023-32636 Fix available 4.7 MediumJune 7, 2023
• gnome glib, fedora extra packages for enterprise linux, 37 +8 more +10 more G_variant_byteswap() can take a long time with some non-normal inputs CVE-2023-32611 Fix available 5.5 MediumJune 7, 2023
• gnome glib, fedora extra packages for enterprise linux, 37 +8 more +10 more Gvariant offset table entry size is not checked in is_normal() CVE-2023-29499 Fix available 5.5 MediumJune 7, 2023
• gnome glib, debian linux, netapp active iq unified manager +2 more A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak... CVE-2021-3800 Fix available 5.5 MediumNovember 2, 2021
• gnome glib, broadcom brocade fabric operating system firmware, debian linux +4 more +6 more An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with... CVE-2021-28153 Fix available 5.3 MediumMarch 11, 2021
• gnome glib, broadcom brocade fabric operating system firmware, debian linux +7 more +9 more An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function... CVE-2021-27219 Fix available 7.5 HighFebruary 15, 2021
• gnome glib, broadcom brocade fabric operating system firmware, debian linux +7 more +9 more An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If... CVE-2021-27218 Fix available 7.5 HighFebruary 15, 2021
• gnome glib ** DISPUTED ** GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of... CVE-2020-35457 Fix availableDisputed 7.8 HighDecember 14, 2020
• gnome balsa, glib-networking, broadcom fabric operating system +3 more +5 more In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips... CVE-2020-13645 Fix available 6.5 MediumMay 28, 2020
• gnome glib, fedoraproject fedora +1 more GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address... CVE-2020-6750 Fix available 5.9 MediumJanuary 9, 2020
• gnome glib The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.59.1 creates directories using... CVE-2019-13012 Fix available 7.5 HighJune 28, 2019
• gnome glib, canonical ubuntu linux, debian linux +6 more +8 more file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict... CVE-2019-12450 Fix available 9.8 CriticalMay 29, 2019
• gnome glib gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during... CVE-2019-9633 6.5 MediumMarch 8, 2019
• gnome glib, canonical ubuntu linux +1 more GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in... CVE-2018-16429 Fix available 7.5 HighSeptember 3, 2018
• gnome glib, canonical ubuntu linux +1 more In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer... CVE-2018-16428 Fix available 9.8 CriticalSeptember 3, 2018
• gnome glib ** DISPUTED ** GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash... CVE-2012-0039 Disputed 5.0 MediumJanuary 14, 2012
• gnome glib, opensuse, suse linux enterprise server +2 more The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of... CVE-2009-3289 Fix available 7.8 HighSeptember 22, 2009
• gnome glib Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent... CVE-2008-4316 Fix available 4.6 MediumMarch 14, 2009