CLSA-2023-1697740212

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1697740212.json
JSON Data
https://api.test.osv.dev/v1/vulns/CLSA-2023-1697740212
Upstream
Published
2023-10-19T18:30:17Z
Modified
2026-05-27T11:35:02.535459466Z
Summary
glib2: Fix of 5 CVEs
Details
  • Enable internal tests
  • Skip several failed tests from the check
  • CVE-2023-29499: Fix GVariant offset table entry size which is not checked in is_normal()
  • CVE-2023-32611: Fix an issue where gvariantbyteswap() can take a long time with some non-normal inputs
  • CVE-2023-32665: Fix GVariant deserialisation which does not match spec for non-normal data
  • CVE-2023-32636: Fix a wrong timeout in fuzzvarianttext()
  • CVE-2023-32643: Fix a heap-buffer-overflow in gvariantserialisedgetchild()
  • Fix gtestbug assertion in gvariant test
References

Affected packages

TuxCare:CentOS:8.4
glib2

Package

Name
glib2
Purl
pkg:rpm/tuxcare/glib2?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.56.4-156.el8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1697740212.json"
glib2-devel

Package

Name
glib2-devel
Purl
pkg:rpm/tuxcare/glib2-devel?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.56.4-156.el8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1697740212.json"
glib2-doc

Package

Name
glib2-doc
Purl
pkg:rpm/tuxcare/glib2-doc?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.56.4-156.el8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1697740212.json"
glib2-fam

Package

Name
glib2-fam
Purl
pkg:rpm/tuxcare/glib2-fam?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.56.4-156.el8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1697740212.json"
glib2-static

Package

Name
glib2-static
Purl
pkg:rpm/tuxcare/glib2-static?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.56.4-156.el8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1697740212.json"
glib2-tests

Package

Name
glib2-tests
Purl
pkg:rpm/tuxcare/glib2-tests?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.56.4-156.el8.tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1697740212.json"