mingw-glib2-2.70.1-9.el8_10
エラータID: AXSA:2026-1482:02
リリース日:
2026/08/07 Friday - 15:39
題名:
mingw-glib2-2.70.1-9.el8_10
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- glib2 には、整数オーバーフローの問題があるため、リモートの
攻撃者により、情報の漏洩、データ破壊、およびサービス拒否攻撃
を可能とする脆弱性が存在します。(CVE-2025-14087)
- GLib の gvs_tuple_is_normal() 関数には、オフバイワンエラーの
問題があるため、リモートの攻撃者により、情報の漏洩、およびサービス
拒否攻撃を可能とする脆弱性が存在します。(CVE-2026-58010)
- GLib の g_date_time_get_ymd() 関数には、メモリ領域の範囲外
読み取りの問題があるため、リモートの攻撃者により、データ破壊、
およびサービス拒否攻撃を可能とする脆弱性が存在します。
(CVE-2026-58011)
- GLib の g_regex_replace() 関数には、バッファオーバーリードの
問題があるため、リモートの攻撃者により、情報の漏洩、およびサービス
拒否攻撃を可能とする脆弱性が存在します。(CVE-2026-58012)
- GLib の g_io_channel_read_line_backend() 関数には、バッファ
オーバーリードの問題があるため、リモートの攻撃者により、情報の
漏洩、およびサービス拒否攻撃を可能とする脆弱性が存在します。
(CVE-2026-58013)
- GLib の g_key_file_get_locale_string_list() 関数には、
オフバイワンエラーの問題があるため、リモートの攻撃者により、
情報の漏洩、データ破壊、およびサービス拒否攻撃を可能とする
脆弱性が存在します。(CVE-2026-58014)
- GLib の DBUS_COOKIE_SHA1 SASL 認証メカニズムの実装には、
リモートの攻撃者により、パストラバーサル攻撃を可能とする脆弱性
が存在します。(CVE-2026-58015)
- GLib の gio/gdbusintrospection.c には、整数アンダーフローの
問題があるため、リモートの攻撃者により、サービス拒否攻撃を可能
とする脆弱性が存在します。(CVE-2026-58016)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2025-14087
A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.
A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.
CVE-2026-58010
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
CVE-2026-58011
A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service.
A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service.
CVE-2026-58012
A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary.
A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary.
CVE-2026-58013
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
CVE-2026-58014
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
CVE-2026-58015
A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.
A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.
CVE-2026-58016
A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.
A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.
追加情報:
N/A
ダウンロード:
SRPMS
- mingw-glib2-2.70.1-9.el8_10.src.rpm
MD5: 5ae6bb7a1c484146a684fc400b71906d
SHA-256: fac9d89363d9466e1997485460a9cbd8bf3f43b16055d455a27560e83d2f94c8
Size: 4.62 MB
Asianux Server 8 for x86_64
- mingw32-glib2-2.70.1-9.el8_10.noarch.rpm
MD5: 03f0df32e7fc66c34b7dbd1e547788fb
SHA-256: 8fdb7c0f1055755ac28f8111053d79986847370fc4a6757e32e5f77bc4ae8abd
Size: 2.97 MB - mingw32-glib2-static-2.70.1-9.el8_10.noarch.rpm
MD5: 2f3d19153d19a27ef60b45e25bf5babe
SHA-256: 626902314490e2daf4917498e0aa58910390b5398ab4cda8e2aff4bd93d16011
Size: 1.20 MB - mingw64-glib2-2.70.1-9.el8_10.noarch.rpm
MD5: 853c6ba31d6fb31ee763ae4d756e2a15
SHA-256: 46201ebd36389bc46b29f691b24e1b268f77766ae72391fb68d36ca03e1d732a
Size: 3.02 MB - mingw64-glib2-static-2.70.1-9.el8_10.noarch.rpm
MD5: 806cd949d675cd1bfc3d022965716637
SHA-256: a12c13d12d7b420451824745c51af49c4f6b418efed36f239b47037f603e25fe
Size: 1.32 MB
English