file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade glib | Jun 21, 2019 | May 29, 2019 |
| Amazon Linux Ami 2 | — | Upgrade glib2-debuginfoUpgrade glib2-testsUpgrade glib2-develUpgrade glib2-staticUpgrade glib2-famUpgrade glib2-docUpgrade glib2 | Apr 27, 2020 | May 29, 2019 |
| Amazon_linux | — | Upgrade glib2 | Aug 13, 2019 | May 29, 2019 |
| Centos_linux | — | Upgrade ibus-libsUpgrade ibus-pygtk2Upgrade ibus-devel-docsUpgrade ibus-develUpgrade glib2-debuginfoUpgrade ibus-gtk2Upgrade ibus-debuginfoUpgrade glib2-staticUpgrade glib2-fam-debuginfoUpgrade glib2-debugsourceUpgrade glib2-testsUpgrade glib2-tests-debuginfoUpgrade glib2-devel-debuginfoUpgrade glib2-develUpgrade ibusUpgrade glib2-docUpgrade ibus-setupUpgrade glib2Upgrade ibus-gtk3Upgrade glib2-fam | Nov 6, 2019 | May 29, 2019 |
| Debian | — | Upgrade glib2.0 | Jun 19, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glib2Upgrade glib2-devel | Jun 17, 2020 | May 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glib2-develUpgrade glib2 | Apr 16, 2020 | May 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glib2-develUpgrade glib2 | Nov 19, 2019 | May 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade glib2Upgrade glib2-develUpgrade glib2-testsUpgrade glib2-fam | Sep 30, 2019 | May 29, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade image/library/libwebp to version 1.0.3-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/documentation-tool/itstool to version 2.0.6-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/glib2 to version 2.46.0-0.175.3.36.0.14.0 on Solaris 11.3Upgrade codec/libvpx to version 1.8.2-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/glib2 to version 2.52.0-11.4.12.0.1.3.0 on Solaris 11.4 | Aug 21, 2019 | May 29, 2019 |
| Oracle_linux | — | Upgrade ibus-setupUpgrade ibus-devel-docsUpgrade glib2-develUpgrade ibus-gtk2Upgrade ibus-develUpgrade glib2-testsUpgrade ibusUpgrade ibus-pygtk2Upgrade glib2-staticUpgrade ibus-gtk3Upgrade glib2-docUpgrade glib2Upgrade ibus-libsUpgrade glib2-fam | Oct 7, 2020 | May 23, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 29, 2019 |
| Redhat_linux | — | Upgrade ibus-debuginfoUpgrade ibus-setupNo solution existsUpgrade glib2-famUpgrade ibusUpgrade ibus-develUpgrade ibus-pygtk2Upgrade glib2-staticUpgrade glib2Upgrade glib2-debugsourceUpgrade glib2-testsUpgrade glib2-docUpgrade glib2-debuginfoUpgrade ibus-gtk3Upgrade ibus-libsUpgrade glib2-fam-debuginfoUpgrade glib2-devel-debuginfoUpgrade ibus-devel-docsUpgrade glib2-develUpgrade glib2-tests-debuginfoUpgrade ibus-gtk2 | Nov 6, 2019 | May 29, 2019 |
| Suse | — | Upgrade libgio-2_0-0Upgrade libgio-famUpgrade libgmodule-2_0-0Upgrade glib2-langUpgrade libgio-fam-32bitUpgrade libglib-2_0-0Upgrade glib2-toolsUpgrade libgobject-2_0-0Upgrade glib2-develUpgrade glib2-docUpgrade libgio-2_0-0-32bitUpgrade glib2-devel-32bitUpgrade glib2Upgrade libglib-2_0-0-32bitUpgrade libgobject-2_0-0-32bitUpgrade glib2-devel-staticUpgrade libgthread-2_0-0-32bitUpgrade libgthread-2_0-0Upgrade glib2-tools-32bitUpgrade gio-branding-upstreamUpgrade libgmodule-2_0-0-32bit | Jun 21, 2019 | May 29, 2019 |
| Ubuntu | — | Upgrade libglib2.0-devUpgrade libglib2.0-0Upgrade libglib2.0-bin (Ubuntu Pro)Upgrade libglib2.0-0 (Ubuntu Pro)Upgrade libglib2.0-binUpgrade libglib2.0-dev (Ubuntu Pro) | Jun 11, 2019 | May 29, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub