USN-7114-1: GLib vulnerability
Published Nov 18, 2024
·Updated
It was discovered that Glib incorrectly handled certain trailing characters. An attacker could possibly use this issue to cause a crash or other undefined behavior.
Affected Software
20 affected componentsFixes available
All of the following
ubuntu/libglib2.0-0t64<2.80.0-6ubuntu3.2
2.80.0-6ubuntu3.2
Ubuntu Ubuntu=24.04
All of the following
ubuntu/libglib2.0-bin<2.80.0-6ubuntu3.2
2.80.0-6ubuntu3.2
Ubuntu Ubuntu=24.04
All of the following
ubuntu/libglib2.0-0<2.72.4-0ubuntu2.4
2.72.4-0ubuntu2.4
Ubuntu Ubuntu=22.04
All of the following
ubuntu/libglib2.0-bin<2.72.4-0ubuntu2.4
2.72.4-0ubuntu2.4
Ubuntu Ubuntu=22.04
All of the following
ubuntu/libglib2.0-0<2.64.6-1~ubuntu20.04.8
2.64.6-1~ubuntu20.04.8
Ubuntu Ubuntu=20.04
All of the following
ubuntu/libglib2.0-bin<2.64.6-1~ubuntu20.04.8
2.64.6-1~ubuntu20.04.8
Ubuntu Ubuntu=20.04
All of the following
ubuntu/libglib2.0-0<2.56.4-0ubuntu0.18.04.9+esm4
2.56.4-0ubuntu0.18.04.9+esm4
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libglib2.0-bin<2.56.4-0ubuntu0.18.04.9+esm4
2.56.4-0ubuntu0.18.04.9+esm4
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libglib2.0-0<2.48.2-0ubuntu4.8+esm4
2.48.2-0ubuntu4.8+esm4
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libglib2.0-bin<2.48.2-0ubuntu4.8+esm4
2.48.2-0ubuntu4.8+esm4
Ubuntu Ubuntu=16.04
Event History
Nov 18, 2024
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-7114-1?
The severity of USN-7114-1 is considered high due to the potential for crashes or undefined behavior.
2
How do I fix USN-7114-1?
To fix USN-7114-1, update the affected packages to the recommended versions provided in the advisory.
3
Which versions of Glib are affected by USN-7114-1?
The affected versions of Glib include various versions from 2.48.2 to 2.80.0 across Ubuntu 16.04, 18.04, 20.04, 22.04, and 24.04.
4
What does the vulnerability in USN-7114-1 affect?
The vulnerability in USN-7114-1 affects the Glib library used in Ubuntu, potentially leading to application instability.
5
Is USN-7114-1 being actively exploited?
As of now, there is no public indication that USN-7114-1 is being actively exploited.