Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 23 glibc: 2024-17a8d1a4c Important GDBus Security Patch

fedora
Calendar Grey May 12, 2024
Dist Fedora Esm H88
Address vulnerabilities in GLib for Fedora 40 by applying critical patches, enhancing system security and optimizing overall user satisfaction.
Resolve CVE-2024-34397 (GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing), and also update gnome-shell to ensure this fix does not break the scree...

Summary

GLib is the low-level core library that forms the basis for projects

such as GTK+ and GNOME. It provides data structure handling for C,

portability wrappers, and interfaces for such runtime functionality

as an event loop, threads, dynamic loading, and an object system.

Update Information:

Resolve CVE-2024-34397 (GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing), and also update gnome-shell to ensure this fix does not break the screencast feature.

Topics%20covered

Topics Covered

security advisory fedora critical glib2 unicast spoofing

Change Log

* Thu May 9 2024 Michael Catanzaro - 2.80.2-1 - Update to 2.80.2 * Tue May 7 2024 Michael Catanzaro - 2.80.1-1 - Update to 2.80.1 * Thu Apr 18 2024 Michael Catanzaro - 2.80.0-2 - Add missing bundled provides

References


[ 1 ] Bug #2279637 - CVE-2024-34397 glib2: Signal subscription vulnerabilities [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2279637

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-635a54eb7e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: glib2
Product: Fedora 40
Version: 2.80.2
Release: 1.fc40
URL: https://www.gtk.org
Summary: A library of handy utility functions

Topics%20covered

Topics Covered

security advisory fedora critical glib2 unicast spoofing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here