Most recent entries from all

ALSA-2021:4385 — Moderate: glib2 security and bug fix update

Affected: AlmaLinux:8: glib2-doc, AlmaLinux:8: glib2-static

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib2: Possible privilege escalation thourgh pkexec and aliases (CVE-2021-3800)

* glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink (CVE-2021-28153)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2024-07303

EUVD-2026-21082

fkie_cve-2021-3800

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.

GHSA-58w9-h6f7-f979

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.

gsd-2021-3800

msrc_CVE-2021-3800 — A flaw was found in glib before version 2.63.6. Due to random charset alias pkexec can leak content from files owned by…

msrc_CVE-2021-3800

RHSA-2021:4385 — Red Hat Security Advisory: glib2 security and bug fix update

glib2: Possible privilege escalation thourgh pkexec and aliases glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink

SUSE-SU-2022:0828-1 — Security update for glib2

Security update for glib2

UBUNTU-CVE-2021-3800

Affected: Ubuntu:Pro:14.04:LTS: glib2.0, Ubuntu:Pro:16.04:LTS: glib2.0, Ubuntu:18.04:LTS: glib2.0

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.

WID-SEC-W-2023-1969 — HPE Fabric OS: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in HPE Fabric OS für HPE Fibre Channel und SAN Switches ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.