VYPR

rpm package

opensuse/glib2-doc&distro=openSUSE Leap 15.5

pkg:rpm/opensuse/glib2-doc&distro=openSUSE%20Leap%2015.5

Vulnerabilities (2)

  • CVE-2024-52533Nov 11, 2024
    affected < 2.70.5-150400.3.17.1fixed 2.70.5-150400.3.17.1

    gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

  • CVE-2024-34397MedMay 7, 2024
    affected < 2.70.5-150400.3.11.1fixed 2.70.5-150400.3.11.1

    An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals tha