An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glib2-docUpgrade mingw32-glib2Upgrade mingw64-glib2Upgrade mingw32-glib2-staticUpgrade glib2-staticUpgrade mingw64-glib2-static | May 4, 2022 | Mar 11, 2021 |
| Alpine Linux | — | Upgrade glib | Mar 21, 2024 | Mar 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade glib2-docUpgrade glib2-debuginfoUpgrade glib2-develUpgrade glib2-staticUpgrade glib2-testsUpgrade glib2-famUpgrade glib2 | Mar 5, 2024 | Mar 11, 2021 |
| Amazon_linux | — | Upgrade glib2 | May 4, 2023 | Mar 11, 2021 |
| Centos_linux | — | Upgrade glib2-tests-debuginfoUpgrade glib2-fam-debuginfoUpgrade glib2-devel-debuginfoUpgrade glib2Upgrade glib2-debugsourceUpgrade glib2-develUpgrade glib2-famUpgrade glib2-testsUpgrade glib2-debuginfo | Nov 10, 2021 | Mar 11, 2021 |
| Debian | — | Upgrade glib2.0 | Jun 8, 2022 | Mar 11, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Gentoo Linux | — | Upgrade dev-libs/glib. | Jul 8, 2021 | Mar 11, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glib2Upgrade glib2-devel | Sep 16, 2021 | Mar 11, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glib2Upgrade glib2-devel | Apr 30, 2021 | Mar 11, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glib2-develUpgrade glib2 | Jul 19, 2021 | Mar 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade glib2Upgrade glib2-famUpgrade glib2-devel | May 18, 2021 | Mar 11, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade glib2 | Jun 2, 2021 | Mar 11, 2021 |
| Oracle Solaris | — | Upgrade library/glib2 to version 2.66.8-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Mar 11, 2021 |
| Oracle_linux | — | Upgrade glib2-famUpgrade mingw64-glib2-staticUpgrade mingw32-glib2Upgrade glib2-staticUpgrade glib2Upgrade mingw64-glib2Upgrade glib2-testsUpgrade glib2-docUpgrade glib2-develUpgrade mingw32-glib2-static | Nov 17, 2021 | Mar 10, 2021 |
| Redhat_linux | — | Upgrade mingw64-glib2-staticUpgrade mingw64-glib2Upgrade glib2-testsUpgrade mingw32-glib2Upgrade mingw32-glib2-debuginfoNo solution existsUpgrade glib2Upgrade glib2-docUpgrade mingw32-glib2-staticUpgrade glib2-fam-debuginfoUpgrade glib2-famUpgrade glib2-debugsourceUpgrade glib2-staticUpgrade glib2-develUpgrade glib2-devel-debuginfoUpgrade mingw64-glib2-debuginfoUpgrade glib2-debuginfoUpgrade glib2-tests-debuginfo | Nov 10, 2021 | Mar 11, 2021 |
| Rocky_linux | — | Upgrade glib2-staticUpgrade glib2-develUpgrade glib2-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-devel-debuginfoUpgrade glib2-famUpgrade glib2-debugsourceUpgrade glib2-testsUpgrade glib2-fam-debuginfoUpgrade glib2 | Mar 12, 2024 | Mar 11, 2021 |
| Suse | — | Upgrade glib2-toolsUpgrade libglib-2_0-0Upgrade libgobject-2_0-0Upgrade glib2-develUpgrade libgmodule-2_0-0Upgrade glib2-langUpgrade glib2-testsUpgrade libgio-fam-32bitUpgrade libgio-famUpgrade glib2-tools-32bitUpgrade glib2-devel-32bitUpgrade libgio-2_0-0-32bitUpgrade libgthread-2_0-0Upgrade libglib-2_0-0-32bitUpgrade libgobject-2_0-0-32bitUpgrade libgthread-2_0-0-32bitUpgrade libgio-2_0-0Upgrade glib2-devel-staticUpgrade libgmodule-2_0-0-32bitUpgrade gio-branding-upstream | Oct 26, 2022 | Mar 11, 2021 |
| Ubuntu | — | Upgrade libglib2.0-0 | Mar 16, 2021 | Mar 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub