The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw64-glib2Upgrade mingw64-glib2-staticUpgrade mingw32-glib2-staticUpgrade mingw32-glib2 | May 8, 2024 | Sep 14, 2023 |
| Alpine Linux | — | Upgrade glib | Mar 21, 2024 | Sep 14, 2023 |
| Amazon Linux Ami 2 | — | Upgrade glib2-docUpgrade glib2Upgrade glib2-famUpgrade glib2-develUpgrade glib2-debuginfoUpgrade glib2-testsUpgrade glib2-static | Feb 26, 2025 | Sep 14, 2023 |
| Azul Zulu | — | Upgrade Azul Zulu to the latest version | Apr 19, 2024 | Sep 14, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade glib2 | Aug 9, 2023 | Aug 8, 2023 |
| Oracle_linux | — | Upgrade mingw32-glib2-staticUpgrade mingw64-glib2-staticUpgrade mingw32-glib2Upgrade mingw64-glib2 | May 7, 2024 | Dec 14, 2022 |
| Redhat_linux | — | No solution existsUpgrade mingw64-glib2Upgrade mingw32-glib2-debuginfoUpgrade mingw64-glib2-debuginfoUpgrade mingw32-glib2Upgrade mingw32-glib2-staticUpgrade mingw64-glib2-static | May 1, 2024 | Sep 14, 2023 |
| Suse | — | Upgrade libglib-2_0-0-32bitUpgrade libgio-2_0-0Upgrade glib2-develUpgrade libglib-2_0-0Upgrade libgobject-2_0-0-32bitUpgrade libgmodule-2_0-0-32bitUpgrade libgmodule-2_0-0Upgrade glib2-toolsUpgrade libgthread-2_0-0Upgrade libgio-2_0-0-32bitUpgrade libgobject-2_0-0Upgrade glib2-lang | Sep 6, 2023 | Sep 5, 2023 |
| Ubuntu | — | Upgrade libglib2.0-0Upgrade libglib2.0-0 (Ubuntu Pro)Upgrade libglib2.0-binUpgrade libglib2.0-bin (Ubuntu Pro) | Jun 15, 2023 | Jun 14, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 14, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub