An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace() is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libglib2.0-0": "2.48.2-0ubuntu4.8", "libglib2.0-tests-dbgsym": "2.48.2-0ubuntu4.8", "libglib2.0-0-refdbg": "2.48.2-0ubuntu4.8", "libglib2.0-0-dbg": "2.48.2-0ubuntu4.8", "libglib2.0-bin": "2.48.2-0ubuntu4.8", "libglib2.0-dev-dbgsym": "2.48.2-0ubuntu4.8", "libglib2.0-udeb-dbgsym": "2.48.2-0ubuntu4.8", "libglib2.0-doc": "2.48.2-0ubuntu4.8", "libglib2.0-0-dbgsym": "2.48.2-0ubuntu4.8", "libglib2.0-data": "2.48.2-0ubuntu4.8", "libglib2.0-tests": "2.48.2-0ubuntu4.8", "libglib2.0-udeb": "2.48.2-0ubuntu4.8", "libglib2.0-dev": "2.48.2-0ubuntu4.8", "libglib2.0-bin-dbgsym": "2.48.2-0ubuntu4.8", "libglib2.0-0-refdbg-dbgsym": "2.48.2-0ubuntu4.8" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libglib2.0-data": "2.56.4-0ubuntu0.18.04.8", "libglib2.0-doc": "2.56.4-0ubuntu0.18.04.8", "libglib2.0-0-dbgsym": "2.56.4-0ubuntu0.18.04.8", "libglib2.0-dev": "2.56.4-0ubuntu0.18.04.8", "libglib2.0-0": "2.56.4-0ubuntu0.18.04.8", "libglib2.0-dev-bin-dbgsym": "2.56.4-0ubuntu0.18.04.8", "libglib2.0-tests": "2.56.4-0ubuntu0.18.04.8", "libglib2.0-udeb": "2.56.4-0ubuntu0.18.04.8", "libglib2.0-dev-bin": "2.56.4-0ubuntu0.18.04.8", "libglib2.0-bin-dbgsym": "2.56.4-0ubuntu0.18.04.8", "libglib2.0-tests-dbgsym": "2.56.4-0ubuntu0.18.04.8", "libglib2.0-bin": "2.56.4-0ubuntu0.18.04.8" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libglib2.0-data": "2.64.6-1~ubuntu20.04.3", "libglib2.0-doc": "2.64.6-1~ubuntu20.04.3", "libglib2.0-0-dbgsym": "2.64.6-1~ubuntu20.04.3", "libglib2.0-dev": "2.64.6-1~ubuntu20.04.3", "libglib2.0-0": "2.64.6-1~ubuntu20.04.3", "libglib2.0-dev-bin-dbgsym": "2.64.6-1~ubuntu20.04.3", "libglib2.0-tests": "2.64.6-1~ubuntu20.04.3", "libglib2.0-udeb": "2.64.6-1~ubuntu20.04.3", "libglib2.0-dev-bin": "2.64.6-1~ubuntu20.04.3", "libglib2.0-bin-dbgsym": "2.64.6-1~ubuntu20.04.3", "libglib2.0-tests-dbgsym": "2.64.6-1~ubuntu20.04.3", "libglib2.0-bin": "2.64.6-1~ubuntu20.04.3" } ] }