An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glib2-docUpgrade mingw32-glib2Upgrade mingw32-glib2-staticUpgrade mingw64-glib2Upgrade mingw64-glib2-staticUpgrade glib2-static | May 4, 2022 | Mar 11, 2021 |
| Alpine Linux | — | Upgrade glib | Mar 21, 2024 | Mar 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade glib2Upgrade glib2-testsUpgrade glib2-famUpgrade glib2-docUpgrade glib2-debuginfoUpgrade glib2-staticUpgrade glib2-devel | Mar 5, 2024 | Mar 11, 2021 |
| Amazon_linux | — | Upgrade glib2 | May 4, 2023 | Mar 11, 2021 |
| Centos_linux | — | Upgrade glib2Upgrade glib2-devel-debuginfoUpgrade glib2-develUpgrade glib2-fam-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-debugsourceUpgrade glib2-debuginfoUpgrade glib2-famUpgrade glib2-tests | Nov 10, 2021 | Mar 11, 2021 |
| Debian | — | Upgrade glib2.0 | Jun 8, 2022 | Mar 11, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Gentoo Linux | — | Upgrade dev-libs/glib. | Jul 8, 2021 | Mar 11, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glib2Upgrade glib2-devel | Sep 16, 2021 | Mar 11, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glib2-develUpgrade glib2 | Apr 30, 2021 | Mar 11, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glib2Upgrade glib2-devel | Jul 19, 2021 | Mar 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade glib2Upgrade glib2-famUpgrade glib2-devel | May 18, 2021 | Mar 11, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade glib2 | Jun 2, 2021 | Mar 11, 2021 |
| Oracle Solaris | — | Upgrade library/glib2 to version 2.66.8-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Mar 11, 2021 |
| Oracle_linux | — | Upgrade mingw32-glib2-staticUpgrade glib2-docUpgrade glib2-testsUpgrade mingw64-glib2Upgrade glib2-develUpgrade mingw64-glib2-staticUpgrade glib2-staticUpgrade mingw32-glib2Upgrade glib2-famUpgrade glib2 | Nov 17, 2021 | Mar 10, 2021 |
| Redhat_linux | — | Upgrade glib2-staticUpgrade glib2-develUpgrade glib2-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-famUpgrade glib2-debugsourceUpgrade glib2-fam-debuginfoUpgrade mingw32-glib2-staticUpgrade glib2-devel-debuginfoUpgrade mingw64-glib2-debuginfoUpgrade mingw64-glib2Upgrade mingw32-glib2Upgrade glib2-testsUpgrade glib2-docUpgrade glib2Upgrade mingw64-glib2-staticNo solution existsUpgrade mingw32-glib2-debuginfo | Nov 10, 2021 | Mar 11, 2021 |
| Rocky_linux | — | Upgrade glib2-fam-debuginfoUpgrade glib2Upgrade glib2-debuginfoUpgrade glib2-debugsourceUpgrade glib2-testsUpgrade glib2-tests-debuginfoUpgrade glib2-famUpgrade glib2-develUpgrade glib2-staticUpgrade glib2-devel-debuginfo | Mar 12, 2024 | Mar 11, 2021 |
| Suse | — | Upgrade libgobject-2_0-0Upgrade libgio-fam-32bitUpgrade libglib-2_0-0Upgrade glib2-langUpgrade glib2-testsUpgrade libgmodule-2_0-0Upgrade glib2-develUpgrade libgio-famUpgrade glib2-toolsUpgrade glib2-devel-32bitUpgrade libglib-2_0-0-32bitUpgrade glib2-devel-staticUpgrade libgobject-2_0-0-32bitUpgrade libgmodule-2_0-0-32bitUpgrade gio-branding-upstreamUpgrade libgthread-2_0-0-32bitUpgrade libgthread-2_0-0Upgrade libgio-2_0-0Upgrade glib2-tools-32bitUpgrade libgio-2_0-0-32bit | Oct 26, 2022 | Mar 11, 2021 |
| Ubuntu | — | Upgrade libglib2.0-0 | Mar 16, 2021 | Mar 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub