An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace() is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.48.2-0ubuntu4.8", "binary_name": "libglib2.0-0" }, { "binary_version": "2.48.2-0ubuntu4.8", "binary_name": "libglib2.0-0-dbg" }, { "binary_version": "2.48.2-0ubuntu4.8", "binary_name": "libglib2.0-0-dbgsym" }, { "binary_version": "2.48.2-0ubuntu4.8", "binary_name": "libglib2.0-0-refdbg" }, { "binary_version": "2.48.2-0ubuntu4.8", "binary_name": "libglib2.0-0-refdbg-dbgsym" }, { "binary_version": "2.48.2-0ubuntu4.8", "binary_name": "libglib2.0-bin" }, { "binary_version": "2.48.2-0ubuntu4.8", "binary_name": "libglib2.0-bin-dbgsym" }, { "binary_version": "2.48.2-0ubuntu4.8", "binary_name": "libglib2.0-data" }, { "binary_version": "2.48.2-0ubuntu4.8", "binary_name": "libglib2.0-dev" }, { "binary_version": "2.48.2-0ubuntu4.8", "binary_name": "libglib2.0-dev-dbgsym" }, { "binary_version": "2.48.2-0ubuntu4.8", "binary_name": "libglib2.0-doc" }, { "binary_version": "2.48.2-0ubuntu4.8", "binary_name": "libglib2.0-tests" }, { "binary_version": "2.48.2-0ubuntu4.8", "binary_name": "libglib2.0-tests-dbgsym" }, { "binary_version": "2.48.2-0ubuntu4.8", "binary_name": "libglib2.0-udeb" }, { "binary_version": "2.48.2-0ubuntu4.8", "binary_name": "libglib2.0-udeb-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.56.4-0ubuntu0.18.04.8", "binary_name": "libglib2.0-0" }, { "binary_version": "2.56.4-0ubuntu0.18.04.8", "binary_name": "libglib2.0-0-dbgsym" }, { "binary_version": "2.56.4-0ubuntu0.18.04.8", "binary_name": "libglib2.0-bin" }, { "binary_version": "2.56.4-0ubuntu0.18.04.8", "binary_name": "libglib2.0-bin-dbgsym" }, { "binary_version": "2.56.4-0ubuntu0.18.04.8", "binary_name": "libglib2.0-data" }, { "binary_version": "2.56.4-0ubuntu0.18.04.8", "binary_name": "libglib2.0-dev" }, { "binary_version": "2.56.4-0ubuntu0.18.04.8", "binary_name": "libglib2.0-dev-bin" }, { "binary_version": "2.56.4-0ubuntu0.18.04.8", "binary_name": "libglib2.0-dev-bin-dbgsym" }, { "binary_version": "2.56.4-0ubuntu0.18.04.8", "binary_name": "libglib2.0-doc" }, { "binary_version": "2.56.4-0ubuntu0.18.04.8", "binary_name": "libglib2.0-tests" }, { "binary_version": "2.56.4-0ubuntu0.18.04.8", "binary_name": "libglib2.0-tests-dbgsym" }, { "binary_version": "2.56.4-0ubuntu0.18.04.8", "binary_name": "libglib2.0-udeb" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.64.6-1~ubuntu20.04.3", "binary_name": "libglib2.0-0" }, { "binary_version": "2.64.6-1~ubuntu20.04.3", "binary_name": "libglib2.0-0-dbgsym" }, { "binary_version": "2.64.6-1~ubuntu20.04.3", "binary_name": "libglib2.0-bin" }, { "binary_version": "2.64.6-1~ubuntu20.04.3", "binary_name": "libglib2.0-bin-dbgsym" }, { "binary_version": "2.64.6-1~ubuntu20.04.3", "binary_name": "libglib2.0-data" }, { "binary_version": "2.64.6-1~ubuntu20.04.3", "binary_name": "libglib2.0-dev" }, { "binary_version": "2.64.6-1~ubuntu20.04.3", "binary_name": "libglib2.0-dev-bin" }, { "binary_version": "2.64.6-1~ubuntu20.04.3", "binary_name": "libglib2.0-dev-bin-dbgsym" }, { "binary_version": "2.64.6-1~ubuntu20.04.3", "binary_name": "libglib2.0-doc" }, { "binary_version": "2.64.6-1~ubuntu20.04.3", "binary_name": "libglib2.0-tests" }, { "binary_version": "2.64.6-1~ubuntu20.04.3", "binary_name": "libglib2.0-tests-dbgsym" }, { "binary_version": "2.64.6-1~ubuntu20.04.3", "binary_name": "libglib2.0-udeb" } ] }