INFCSA-2024:6464: glib2 security update

Information about definition

Identificator: INFCSA-2024:6464

Type: security

Release date: 2025-09-24 19:27:27 UTC

Information about package

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Vulnerabilities description

  • CVE-2024-34397

    An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based client behaving incorrectly, with an application-dependent impact.

Severity level

CVE Score CVSS 2.0 Score CVSS 3.x Score CVSS 4.0
no information 3.8 no information
Critical, important, moderate, low

Updated packages

loader icon Preparing to download...
Architecture: Download