[CLSA-2026:1777541282] glib2: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-04-30 09:28:06 UTC
Description:
- CVE-2023-29499: fix GVariant offset table entry size which is not checked in is_normal(). - CVE-2023-32636: remediate GVariant deserialisation timeout regression introduced by the CVE-2023-29499 fix. - Backported upstream MR 3126 (22 commits) from centos8.5els.
Updated packages:
  • glib2-2.56.4-163.el8.tuxcare.els5.i686.rpm
    sha:fa5459aa9edb9408956456d2271eb3612a89f9129b2bf7999769e28b9db51716
  • glib2-2.56.4-163.el8.tuxcare.els5.x86_64.rpm
    sha:1cdec040b02e905da4927799acb1f02037cabfdb9c5036c10ac4c23a09c35e10
  • glib2-devel-2.56.4-163.el8.tuxcare.els5.i686.rpm
    sha:87d370f8d3988a2eea3cccdd12db7a13d8c593d950b342ac2f63723c6de99d54
  • glib2-devel-2.56.4-163.el8.tuxcare.els5.x86_64.rpm
    sha:1bc02d31510b3b100dadbcab321c8bed02d75b424860f9d25829b81f35c9c337
  • glib2-doc-2.56.4-163.el8.tuxcare.els5.noarch.rpm
    sha:04bbd3ab8cf81f9b33a48307d3a90fddb41ac2e7c6654939b60d1673c94136cb
  • glib2-fam-2.56.4-163.el8.tuxcare.els5.x86_64.rpm
    sha:570ff638a61d5edb0dd1103fe40539c9332b6a61b02888d590a6f18497899491
  • glib2-static-2.56.4-163.el8.tuxcare.els5.i686.rpm
    sha:0e6e50eef20c687b4dc801916250d8bb374893354a97fca2b4b2fe174d7869e5
  • glib2-static-2.56.4-163.el8.tuxcare.els5.x86_64.rpm
    sha:e35153f9f4ca74ba90654ce30ec7dd1e0d88ecdccfedf142e8f5f480d2bcb64e
  • glib2-tests-2.56.4-163.el8.tuxcare.els5.x86_64.rpm
    sha:324211449f9beef5cca337d00b7efb3b5767634822af7975d399be52312bc74d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.