REDHAT-BUG-2392423: Integer Overflow

Published Sep 1, 2025

Updated

An integer overflow in glib's temporary directory/file creation allows an out of boundary access, which might be used by an attacker to perform path traversal or access to private content of a temporary file by creating symbolic links which an affected application would follow.

Affected Software

1 affected component

Gnome GLib

Event History

Sep 1, 2025

Data Sourced

via Red Hat·04:26 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2392423?

The severity of REDHAT-BUG-2392423 is critical due to potential exploitation leading to unauthorized access to private content.

How do I fix REDHAT-BUG-2392423?

To fix REDHAT-BUG-2392423, ensure that you update to the patched version of the affected glib packages provided by Red Hat.

What software is affected by REDHAT-BUG-2392423?

REDHAT-BUG-2392423 affects glib, specifically in its temporary directory/file creation functionalities.

What are the risks associated with REDHAT-BUG-2392423?

The risks associated with REDHAT-BUG-2392423 include path traversal vulnerabilities and exposure of sensitive information through symbolic link following.

What should I do if I can't update to the fixed version for REDHAT-BUG-2392423?

If you cannot update to the fixed version for REDHAT-BUG-2392423, consider implementing security measures such as restricting permissions on temporary directories.