An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace() is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libglib2.0-0", "binary_version": "2.48.2-0ubuntu4.8" }, { "binary_name": "libglib2.0-0-dbg", "binary_version": "2.48.2-0ubuntu4.8" }, { "binary_name": "libglib2.0-0-dbgsym", "binary_version": "2.48.2-0ubuntu4.8" }, { "binary_name": "libglib2.0-0-refdbg", "binary_version": "2.48.2-0ubuntu4.8" }, { "binary_name": "libglib2.0-0-refdbg-dbgsym", "binary_version": "2.48.2-0ubuntu4.8" }, { "binary_name": "libglib2.0-bin", "binary_version": "2.48.2-0ubuntu4.8" }, { "binary_name": "libglib2.0-bin-dbgsym", "binary_version": "2.48.2-0ubuntu4.8" }, { "binary_name": "libglib2.0-data", "binary_version": "2.48.2-0ubuntu4.8" }, { "binary_name": "libglib2.0-dev", "binary_version": "2.48.2-0ubuntu4.8" }, { "binary_name": "libglib2.0-dev-dbgsym", "binary_version": "2.48.2-0ubuntu4.8" }, { "binary_name": "libglib2.0-doc", "binary_version": "2.48.2-0ubuntu4.8" }, { "binary_name": "libglib2.0-tests", "binary_version": "2.48.2-0ubuntu4.8" }, { "binary_name": "libglib2.0-tests-dbgsym", "binary_version": "2.48.2-0ubuntu4.8" }, { "binary_name": "libglib2.0-udeb", "binary_version": "2.48.2-0ubuntu4.8" }, { "binary_name": "libglib2.0-udeb-dbgsym", "binary_version": "2.48.2-0ubuntu4.8" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libglib2.0-0", "binary_version": "2.56.4-0ubuntu0.18.04.8" }, { "binary_name": "libglib2.0-0-dbgsym", "binary_version": "2.56.4-0ubuntu0.18.04.8" }, { "binary_name": "libglib2.0-bin", "binary_version": "2.56.4-0ubuntu0.18.04.8" }, { "binary_name": "libglib2.0-bin-dbgsym", "binary_version": "2.56.4-0ubuntu0.18.04.8" }, { "binary_name": "libglib2.0-data", "binary_version": "2.56.4-0ubuntu0.18.04.8" }, { "binary_name": "libglib2.0-dev", "binary_version": "2.56.4-0ubuntu0.18.04.8" }, { "binary_name": "libglib2.0-dev-bin", "binary_version": "2.56.4-0ubuntu0.18.04.8" }, { "binary_name": "libglib2.0-dev-bin-dbgsym", "binary_version": "2.56.4-0ubuntu0.18.04.8" }, { "binary_name": "libglib2.0-doc", "binary_version": "2.56.4-0ubuntu0.18.04.8" }, { "binary_name": "libglib2.0-tests", "binary_version": "2.56.4-0ubuntu0.18.04.8" }, { "binary_name": "libglib2.0-tests-dbgsym", "binary_version": "2.56.4-0ubuntu0.18.04.8" }, { "binary_name": "libglib2.0-udeb", "binary_version": "2.56.4-0ubuntu0.18.04.8" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libglib2.0-0", "binary_version": "2.64.6-1~ubuntu20.04.3" }, { "binary_name": "libglib2.0-0-dbgsym", "binary_version": "2.64.6-1~ubuntu20.04.3" }, { "binary_name": "libglib2.0-bin", "binary_version": "2.64.6-1~ubuntu20.04.3" }, { "binary_name": "libglib2.0-bin-dbgsym", "binary_version": "2.64.6-1~ubuntu20.04.3" }, { "binary_name": "libglib2.0-data", "binary_version": "2.64.6-1~ubuntu20.04.3" }, { "binary_name": "libglib2.0-dev", "binary_version": "2.64.6-1~ubuntu20.04.3" }, { "binary_name": "libglib2.0-dev-bin", "binary_version": "2.64.6-1~ubuntu20.04.3" }, { "binary_name": "libglib2.0-dev-bin-dbgsym", "binary_version": "2.64.6-1~ubuntu20.04.3" }, { "binary_name": "libglib2.0-doc", "binary_version": "2.64.6-1~ubuntu20.04.3" }, { "binary_name": "libglib2.0-tests", "binary_version": "2.64.6-1~ubuntu20.04.3" }, { "binary_name": "libglib2.0-tests-dbgsym", "binary_version": "2.64.6-1~ubuntu20.04.3" }, { "binary_name": "libglib2.0-udeb", "binary_version": "2.64.6-1~ubuntu20.04.3" } ] }