pkg:Debian/glib2.0

All known vulnerabilities

• CRITICAL9.8CVE-2025-14087A flaw was found in GLib (Gnome Lib).
  from 0, < 2.66.8-1+deb11u7
• CRITICAL9.8CVE-2024-52533glib2.0 - security update
  from 0, < 2.66.8-1+deb11u5
• CRITICAL9.8CVE-2024-52533glib2.0 - security update
  from 0, < 2.66.8-1+deb11u5
• CRITICAL9.8CVE-2019-12450glib2.0 - security update
  from 0, < 2.42.1-1+deb8u1
• CRITICAL9.8CVE-2019-12450glib2.0 - security update
  from 0, < 2.58.3-2
• CRITICAL9.8CVE-2018-16428glib2.0 - security update
  from 0, < 2.58.0-1
• CRITICAL9.8CVE-2018-16428glib2.0 - security update
  from 0, < 2.42.1-1+deb8u2
• HIGH8.8CVE-2019-25085A vulnerability was found in GNOME gvdb.
  from 0, < 2.66.0-1
• HIGH7.8CVE-2020-35457GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries.
  from 0, < 2.66.0-1
• HIGH7.8CVE-2009-3289The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777), which allows user-a…
  from 0, < 2.22.0-1
• HIGH7.7CVE-2025-13601glib2.0 - security update
  from 0, < 2.66.8-1+deb11u7
• HIGH7.7CVE-2025-13601glib2.0 - security update
  from 0, < 2.66.8-1+deb11u7
• HIGH7.5CVE-2025-6052Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring
  from 0, < 2.84.3-1
• HIGH7.5CVE-2023-29499glib2.0 - security update
  from 0, < 2.58.3-2+deb10u5
• HIGH7.5CVE-2023-29499glib2.0 - security update
  from 0, < 2.66.8-1+deb11u1
• HIGH7.5CVE-2021-27219An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3.
  from 0, < 2.66.6-1
• HIGH7.5CVE-2021-27218glib2.0 - security update
  from 0, < 2.66.7-1
• HIGH7.5CVE-2021-27218glib2.0 - security update
  from 0, < 2.50.3-2+deb9u3
• HIGH7.5CVE-2019-13012glib2.0 - regression update
  from 0, < 2.42.1-1+deb8u3
• HIGH7.5CVE-2019-13012glib2.0 - regression update
  from 0, < 2.60.5-1
• HIGH7.5CVE-2018-16429GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str().
  from 0, < 2.58.0-1
• HIGH7.5CVE-2012-0039GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash values without restricting the ability to trigger hash collisi…
  from 0
• MEDIUM6.5CVE-2025-14512A flaw was found in glib.
  from 0, < 2.66.8-1+deb11u7
• MEDIUM5.9CVE-2020-6750GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server w…
  from 0, < 2.62.5-1
• MEDIUM5.5CVE-2023-32665A flaw was found in GLib.
  from 0, < 2.66.8-1+deb11u1
• MEDIUM5.5CVE-2023-32611A flaw was found in GLib.
  from 0, < 2.66.8-1+deb11u1
• MEDIUM5.5CVE-2021-3800glib2.0 - security update
  from 0, < 2.58.3-2+deb10u4
• MEDIUM5.5CVE-2021-3800glib2.0 - security update
  from 0, < 2.64.0-1
• MEDIUM5.4CVE-2026-1489A flaw was found in GLib.
  from 0, < 2.66.8-1+deb11u8
• MEDIUM5.3CVE-2021-28153An issue was discovered in GNOME GLib before 2.66.8.
  from 0, < 2.66.7-2
• MEDIUM5.2CVE-2024-34397glib2.0 - security update
  from 0, < 2.66.8-1+deb11u2
• MEDIUM5.2CVE-2024-34397glib2.0 - security update
  from 0, < 2.66.8-1+deb11u2
• MEDIUM5.2CVE-2024-34397glib2.0 - security update
  from 0, < 2.58.3-2+deb10u6
• MEDIUM4.8CVE-2025-4373A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function.
  from 0, < 2.66.8-1+deb11u7
• MEDIUM4.2CVE-2026-1484A flaw was found in the GLib Base64 encoding routine when processing very large input data.
  from 0, < 2.66.8-1+deb11u8
• LOW3.7CVE-2026-0988glib2.0 - security update
  from 0, < 2.66.8-1+deb11u8
• LOW3.7CVE-2026-0988glib2.0 - security update
  from 0, < 2.66.8-1+deb11u8
• LOW3.7CVE-2025-7039A flaw was found in glib.
  from 0, < 2.66.8-1+deb11u7
• LOW3.7CVE-2025-3360glib2.0 - security update
  from 0, < 2.66.8-1+deb11u6
• LOW3.7CVE-2025-3360glib2.0 - security update
  from 0, < 2.66.8-1+deb11u6
• LOW2.8CVE-2026-1485A flaw was found in Glib's content type parsing logic.
  from 0, < 2.66.8-1+deb11u8
• —CVE-2012-3524libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gai…
  from 0, < 2.33.12+really2.32.4-2
• —CVE-2008-4316glib2.0 - arbitrary code execution
  from 0, < 2.20.0-1
• —CVE-2008-4316glib2.0 - arbitrary code execution
  from 0, < 2.12.4-2+etch1
• —CVE-2006-7226Perl-Compatible Regular Expression (PCRE) library before 6.7 does not properly calculate the compiled memory allocation for regular express…
  from 0, < 2.14.3-1
• —CVE-2006-7225Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to cause a denial of service (error or cras…
  from 0, < 2.14.3-1
• —CVE-2007-4766Multiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow context-dependent attackers to cause a den…
  from 0, < 2.14.3-1
• —CVE-2007-1661Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching certain input bytes against some regex patter…
  from 0, < 2.14.3-1
• —CVE-2007-1660Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character…
  from 0, < 2.14.3-1
• —CVE-2007-4768Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to execute ar…
  from 0, < 2.14.3-1
• —CVE-2007-1662Perl-Compatible Regular Expression (PCRE) library before 7.3 reads past the end of the string when searching for unmatched brackets and par…
  from 0, < 2.14.3-1
• —CVE-2007-4767Perl-Compatible Regular Expression (PCRE) library before 7.3 does not properly compute the length of (1) a \p sequence, (2) a \P sequence,…
  from 0, < 2.14.3-1
• —CVE-2007-1659pcre3 - arbitrary code execution
  from 0, < 2.14.3-1