Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Update for MinGW GLib Critical for Windows Applications

published 2 years ago

Summary

An update is available for MinGW GLib on Windows systems, which is used by various software applications. This update fixes a security issue that could allow a remote attacker to execute malicious code. You should apply this update to ensure the security of your systems and data.

What to do

Update redhat mingw-glib2 to version 0:2.78.0-1.el9.
Update redhat mingw32-glib2 to version 0:2.78.0-1.el9.
Update redhat mingw32-glib2-debuginfo to version 0:2.78.0-1.el9.
Update redhat mingw32-glib2-static to version 0:2.78.0-1.el9.
Update redhat mingw64-glib2 to version 0:2.78.0-1.el9.
Update redhat mingw64-glib2-debuginfo to version 0:2.78.0-1.el9.
Update redhat mingw64-glib2-static to version 0:2.78.0-1.el9.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:9::crb	redhat	mingw-glib2	< 0:2.78.0-1.el9 Fix: upgrade to 0:2.78.0-1.el9
Red Hat:enterprise_linux:9::crb	redhat	mingw32-glib2	< 0:2.78.0-1.el9 Fix: upgrade to 0:2.78.0-1.el9
Red Hat:enterprise_linux:9::crb	redhat	mingw32-glib2-debuginfo	< 0:2.78.0-1.el9 Fix: upgrade to 0:2.78.0-1.el9
Red Hat:enterprise_linux:9::crb	redhat	mingw32-glib2-static	< 0:2.78.0-1.el9 Fix: upgrade to 0:2.78.0-1.el9
Red Hat:enterprise_linux:9::crb	redhat	mingw64-glib2	< 0:2.78.0-1.el9 Fix: upgrade to 0:2.78.0-1.el9
Red Hat:enterprise_linux:9::crb	redhat	mingw64-glib2-debuginfo	< 0:2.78.0-1.el9 Fix: upgrade to 0:2.78.0-1.el9
Red Hat:enterprise_linux:9::crb	redhat	mingw64-glib2-static	< 0:2.78.0-1.el9 Fix: upgrade to 0:2.78.0-1.el9

Original advisory text

Red Hat Security Advisory: mingw-glib2 security update

References

https://access.redhat.com/errata/RHSA-2024:2528 Vendor Advisory
https://access.redhat.com/security/updates/classification/#low Third Party Advisory
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.... Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2211827 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2211828 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2211829 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2211833 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2528.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2023-29499 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-29499 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29499 Vendor Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/2794 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-32611 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-32611 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-32611 Vendor Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/2797 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-32636 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-32636 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-32636 Vendor Advisory
https://discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-i... Third Party Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/2841 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-32665 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-32665 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-32665 Vendor Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/2121 Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

6.5 Medium

Timeline

Published16 Sep 2024

Updated21 Apr 2026

First seen21 Apr 2026

Sources

RHSA-2024:2528 · OSV

Track software like this

Free during beta