An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glib2-docUpgrade mingw64-glib2-staticUpgrade mingw32-glib2-staticUpgrade mingw32-glib2Upgrade glib2-staticUpgrade mingw64-glib2 | May 4, 2022 | Mar 11, 2021 |
| Alpine Linux | — | Upgrade glib | Mar 21, 2024 | Mar 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade glib2-famUpgrade glib2-testsUpgrade glib2Upgrade glib2-develUpgrade glib2-debuginfoUpgrade glib2-docUpgrade glib2-static | Mar 5, 2024 | Mar 11, 2021 |
| Amazon_linux | — | Upgrade glib2 | May 4, 2023 | Mar 11, 2021 |
| Centos_linux | — | Upgrade glib2Upgrade glib2-debugsourceUpgrade glib2-devel-debuginfoUpgrade glib2-develUpgrade glib2-fam-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-famUpgrade glib2-debuginfoUpgrade glib2-tests | Nov 10, 2021 | Mar 11, 2021 |
| Debian | — | Upgrade glib2.0 | Jun 8, 2022 | Mar 11, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Gentoo Linux | — | Upgrade dev-libs/glib. | Jul 8, 2021 | Mar 11, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glib2Upgrade glib2-devel | Sep 16, 2021 | Mar 11, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glib2-develUpgrade glib2 | Apr 30, 2021 | Mar 11, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glib2Upgrade glib2-devel | Jul 19, 2021 | Mar 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade glib2-famUpgrade glib2Upgrade glib2-devel | May 18, 2021 | Mar 11, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade glib2 | Jun 2, 2021 | Mar 11, 2021 |
| Oracle Solaris | — | Upgrade library/glib2 to version 2.66.8-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Mar 11, 2021 |
| Oracle_linux | — | Upgrade glib2Upgrade glib2-famUpgrade glib2-staticUpgrade mingw32-glib2Upgrade mingw64-glib2-staticUpgrade glib2-develUpgrade mingw32-glib2-staticUpgrade glib2-docUpgrade mingw64-glib2Upgrade glib2-tests | Nov 17, 2021 | Mar 10, 2021 |
| Redhat_linux | — | Upgrade glib2-debuginfoUpgrade glib2-develUpgrade glib2-devel-debuginfoUpgrade glib2-famUpgrade mingw64-glib2-debuginfoUpgrade glib2-staticUpgrade glib2-tests-debuginfoUpgrade glib2-fam-debuginfoUpgrade mingw32-glib2-staticUpgrade glib2-debugsourceNo solution existsUpgrade mingw32-glib2-debuginfoUpgrade mingw32-glib2Upgrade mingw64-glib2Upgrade glib2Upgrade glib2-testsUpgrade mingw64-glib2-staticUpgrade glib2-doc | Nov 10, 2021 | Mar 11, 2021 |
| Rocky_linux | — | Upgrade glib2Upgrade glib2-fam-debuginfoUpgrade glib2-staticUpgrade glib2-develUpgrade glib2-testsUpgrade glib2-tests-debuginfoUpgrade glib2-famUpgrade glib2-debugsourceUpgrade glib2-debuginfoUpgrade glib2-devel-debuginfo | Mar 12, 2024 | Mar 11, 2021 |
| Suse | — | Upgrade glib2-devel-32bitUpgrade libgobject-2_0-0-32bitUpgrade libglib-2_0-0-32bitUpgrade libgthread-2_0-0-32bitUpgrade glib2-devel-staticUpgrade libgmodule-2_0-0-32bitUpgrade gio-branding-upstreamUpgrade libgio-2_0-0-32bitUpgrade glib2-tools-32bitUpgrade libgio-2_0-0Upgrade libgthread-2_0-0Upgrade glib2-testsUpgrade libglib-2_0-0Upgrade glib2-langUpgrade glib2-toolsUpgrade libgobject-2_0-0Upgrade libgio-famUpgrade libgmodule-2_0-0Upgrade libgio-fam-32bitUpgrade glib2-devel | Oct 26, 2022 | Mar 11, 2021 |
| Ubuntu | — | Upgrade libglib2.0-0 | Mar 16, 2021 | Mar 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub