| Package | Affected versions | Patched versions |
|---|---|---|
| glib | < 2.86.3 | 2.86.3 |
| ceph storage | = 8.0 | |
| codeready linux builder | = 9.0 | |
| codeready linux builder for arm64 | = 10.0= 8.0= 9.6 | |
| codeready linux builder for arm64 eus | = 10.0= 9.4 | |
| codeready linux builder for ibm z systems | = 10.0_s390x= 8.0_s390x= 9.0_s390x= 9.4_s390x= 9.6_s390x | |
| codeready linux builder for ibm z systems eus | = 10.0_s390x | |
| codeready linux builder for power little endian | = 10.0_ppc64le= 8.0_ppc64le= 9.0_ppc64le= 9.4_ppc64le= 9.6_ppc64le | |
| codeready linux builder for power little endian eus | = 10.0_ppc64le | |
| codeready linux builder for x86 64 | = 10.0= 8.0= 9.0= 9.4= 9.6 | |
| codeready linux builder for x86 64 eus | = 10.0 | |
| discovery | = 2.0 | |
| openshift container platform | = 4.12= 4.16= 4.17= 4.18= 4.19 | |
| openshift container platform for arm64 | = 4.12= 4.16= 4.17= 4.18= 4.19 | |
| openshift container platform for ibm z | = 4.12= 4.16= 4.17= 4.18= 4.19 | |
| openshift container platform for linuxone | = 4.12= 4.16= 4.17= 4.18= 4.19 | |
| openshift container platform for power | = 4.12= 4.16= 4.17= 4.18= 4.19 |
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free