USN-6165-1: GLib vulnerabilities

Releases

• Ubuntu 22.10
• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS

Packages

• glib2.0 - GLib library of C routines

Details

It was discovered that GLib incorrectly handled non-normal GVariants. An
attacker could use this issue to cause GLib to crash, resulting in a denial
of service, or perform other unknown attacks.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 22.10

• libglib2.0-0 - 2.74.3-0ubuntu1.2
• libglib2.0-bin - 2.74.3-0ubuntu1.2

Ubuntu 22.04

• libglib2.0-0 - 2.72.4-0ubuntu2.2
• libglib2.0-bin - 2.72.4-0ubuntu2.2

Ubuntu 20.04

• libglib2.0-0 - 2.64.6-1~ubuntu20.04.6
• libglib2.0-bin - 2.64.6-1~ubuntu20.04.6

In general, a standard system update will make all the necessary changes.

References

• CVE-2023-32636
• CVE-2023-32665
• CVE-2023-24593
• CVE-2023-32611
• CVE-2023-29499
• CVE-2023-25180
• CVE-2023-32643

Related notices

• USN-6165-2: libglib2.0-doc, libglib2.0-0, libglib2.0-bin, libglib2.0-dev, libglib2.0-dev-bin, glib2.0, libglib2.0-data, libglib2.0-0-refdbg, libglib2.0-tests