Ubuntu 25.10: GLib Critical Vulnerabilities USN-7942-1 CVE-2025-13601

ubuntu

January 6, 2026

Several security issues were fixed in GLib.

Summary

Several security issues were fixed in GLib.

Software Description:

- glib2.0: GLib library of C routines

Details:

It was discovered that GLib incorrectly handled escaping URI strings. An

attacker could use this issue to cause GLib to crash, resulting in a

denial of service, or possibly execute arbitrary code. (CVE-2025-13601)

It was discovered that GLib incorrectly parsed certain GVariants. An

attacker could use this issue to cause GLib to crash, resulting in a

denial of service, or possibly execute arbitrary code. (CVE-2025-14087)

It was discovered that GLib incorrectly parsed certain long invalid ISO

8601 timestamps. An attacker could possibly use this issue to cause GLib to

crash, resulting in a denial of service. This issue only affected Ubuntu

22.04 LTS and Ubuntu 24.04 LTS. (CVE-2025-3360)

It was discovered that GLib incorrectly handled GString memory operations.

An attacker could use this issue to cause GLib to crash, resulting in a

denial of service, or possibly execut...

Read the Full Advisory

Topics Covered

security advisory denial of service critical arbitrary code execution Ubuntu glib

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  libglib2.0-0t64                 2.86.0-2ubuntu0.1
  libglib2.0-bin                  2.86.0-2ubuntu0.1

Ubuntu 25.04
  libglib2.0-0t64                 2.84.1-1ubuntu0.2
  libglib2.0-bin                  2.84.1-1ubuntu0.2

Ubuntu 24.04 LTS
  libglib2.0-0t64                 2.80.0-6ubuntu3.6
  libglib2.0-bin                  2.80.0-6ubuntu3.6

Ubuntu 22.04 LTS
  libglib2.0-0                    2.72.4-0ubuntu2.7
  libglib2.0-bin                  2.72.4-0ubuntu2.7

In general, a standard system update will make all the necessary changes.