Description
A flaw was found in GLib2. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the destination directory can win that race and redirect the write to another file.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 12 | | =2.74.6-2 || =2.74.6-2+deb12u1 || =2.74.6-2+deb12u2 || =2.74.6-2+deb12u3 || =2.74.6-2+deb12u4 || =2.74.6-2+deb12u5 || =2.74.6-2+deb12u6 || =2.74.6-2+deb12u7 || =2.74.6-2+deb12u8 || =2.74.6-2+deb12u9 || =2.75.0-1 || =2.75.2-1 || =2.75.3-1 || =2.75.3-2 || =2.75.3-3 || =2.75.4-1 || =2.76.0-1 || =2.76.1-1 || =2.76.2-1 || =2.76.3-1 || =2.76.4-1 || =2.76.4-2 || =2.76.4-3 || =2.76.4-4 || =2.77.0-1 || =2.77.1-1 || =2.77.1-2 || =2.77.2-1 || =2.77.3-1 || =2.78.0-1 || =2.78.0-2 || =2.78.1-1 || =2.78.1-2 || =2.78.1-3 || =2.78.1-4 || =2.78.2-1 || =2.78.3-1 || =2.78.3-2 || =2.78.4-1 || =2.78.4-2 || =2.78.4-2.1 || =2.78.4-3 || =2.78.4-4 || =2.78.4-5 || =2.78.4-6 || =2.78.4-7 || =2.79.0+git20240110~g38f5ba3c-1 || =2.79.0+git20240110~g38f5ba3c-2 || =2.79.0+git20240119~62ee8bf6-1 || =2.79.1-1 || =2.79.1-1.1~exp1 || =2.79.2-1 || =2.79.3-1 || =2.79.3-2 || =2.79.3-3 || =2.80.0-1 || =2.80.0-10 || =2.80.0-2 || =2.80.0-3 || =2.80.0-4 || =2.80.0-5 || =2.80.0-6 || =2.80.0-7 || =2.80.0-8 || =2.80.0-9 || =2.80.1-1 || =2.80.2-1 || =2.80.2-2 || =2.80.3-1 || =2.80.4-1 || =2.81.0-1 || =2.81.1-1 || =2.81.1-2 || =2.81.1-3 || =2.81.2-1 || =2.82.0-1 || =2.82.0-2 || =2.82.1-1 || =2.82.2-1 || =2.82.2-2 || =2.82.2-3 || =2.82.3-1 || =2.82.3-2 || =2.82.4-1 || =2.82.4-2 || =2.83.2-1 || =2.83.2-2 || =2.83.3-1 || =2.83.3-2 || =2.83.4-1 || =2.83.5-1 || =2.84.0-1 || =2.84.0-2 || =2.84.1-1 || =2.84.1-2 || =2.84.1-3 || =2.84.2-1 || =2.84.3-1 || =2.84.4-1 || =2.84.4-2 || =2.84.4-3 || =2.84.4-3~deb13u1 || =2.84.4-3~deb13u2 || =2.84.4-3~deb13u3 || =2.84.4-3~deb13u4 || =2.84.4-3~deb13u5 || =2.85.1-1 || =2.85.1-2 || =2.85.2-2 || =2.85.3-1 || =2.85.4-1 || =2.86.0-1 || =2.86.0-2 || =2.86.0-3 || =2.86.0-4 || =2.86.0-5 || =2.86.0-6 || =2.86.0-7 || =2.86.1-1 || =2.86.1-2 || =2.86.2-1 || =2.86.3-1 || =2.86.3-2 || =2.86.3-3 || =2.86.3-4 || =2.86.3-5 || =2.87.1-1 || =2.87.2-1 || =2.87.2-2 || =2.87.2-3 || =2.87.3-1 || =2.87.3~gitlab0-1 || =2.87.5-1 || =2.88.0-1 || =2.88.1-2 || =2.88.2-1 || =2.88.3-1 || =2.88.3-2 || =2.88.3-3 || =2.89.2-1 || =2.89.3-1 || =2.89.3-2 || =2.89.3-3 || =2.89.3-4 || =2.89.3-5 || =2.89.4-2 || =2.90.0-1 |
debian 13 | | =2.84.3-1 || =2.84.4-1 || =2.84.4-2 || =2.84.4-3 || =2.84.4-3~deb13u1 || =2.84.4-3~deb13u2 || =2.84.4-3~deb13u3 || =2.84.4-3~deb13u4 || =2.84.4-3~deb13u5 || =2.85.1-1 || =2.85.1-2 || =2.85.2-2 || =2.85.3-1 || =2.85.4-1 || =2.86.0-1 || =2.86.0-2 || =2.86.0-3 || =2.86.0-4 || =2.86.0-5 || =2.86.0-6 || =2.86.0-7 || =2.86.1-1 || =2.86.1-2 || =2.86.2-1 || =2.86.3-1 || =2.86.3-2 || =2.86.3-3 || =2.86.3-4 || =2.86.3-5 || =2.87.1-1 || =2.87.2-1 || =2.87.2-2 || =2.87.2-3 || =2.87.3-1 || =2.87.3~gitlab0-1 || =2.87.5-1 || =2.88.0-1 || =2.88.1-2 || =2.88.2-1 || =2.88.3-1 || =2.88.3-2 || =2.88.3-3 || =2.89.2-1 || =2.89.3-1 || =2.89.3-2 || =2.89.3-3 || =2.89.3-4 || =2.89.3-5 || =2.89.4-2 || =2.90.0-1 |
debian 14 | | =2.84.3-1 || =2.84.4-1 || =2.84.4-2 || =2.84.4-3 || =2.84.4-3~deb13u1 || =2.84.4-3~deb13u2 || =2.84.4-3~deb13u3 || =2.84.4-3~deb13u4 || =2.84.4-3~deb13u5 || =2.85.1-1 || =2.85.1-2 || =2.85.2-2 || =2.85.3-1 || =2.85.4-1 || =2.86.0-1 || =2.86.0-2 || =2.86.0-3 || =2.86.0-4 || =2.86.0-5 || =2.86.0-6 || =2.86.0-7 || =2.86.1-1 || =2.86.1-2 || =2.86.2-1 || =2.86.3-1 || =2.86.3-2 || =2.86.3-3 || =2.86.3-4 || =2.86.3-5 || =2.87.1-1 || =2.87.2-1 || =2.87.2-2 || =2.87.2-3 || =2.87.3-1 || =2.87.3~gitlab0-1 || =2.87.5-1 || =2.88.0-1 || =2.88.1-2 || =2.88.2-1 || =2.88.3-1 || =2.88.3-2 || =2.88.3-3 || =2.89.2-1 || =2.89.3-1 || =2.89.3-2 || =2.89.3-3 || =2.89.3-4 || =2.89.3-5 || =2.89.4-2 || =2.90.0-1 |
 rpm rhel6 | | - |
rpm rhel8 | | - |
rpm rhel10 | | - |
rpm rhel8 | | - |
rpm rhel9 | | - |
rpm rhel10 | | - |
rpm rhel7 | | - |
