RHSA-2022:8418LowCVSS 5.3
Red Hat Security Advisory: mingw-glib2 security and bug fix update
🔗 CVE IDs covered (1)
📋 Description
CVE-2021-28153 — glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink
🎯 Affected products8
- Red Hat CodeReady Linux Builder (v. 9)
- mingw-glib2-0:2.70.1-2.el9.src as a component of Red Hat CodeReady Linux Builder (v. 9)
- mingw32-glib2-0:2.70.1-2.el9.noarch as a component of Red Hat CodeReady Linux Builder (v. 9)
- mingw32-glib2-debuginfo-0:2.70.1-2.el9.noarch as a component of Red Hat CodeReady Linux Builder (v. 9)
- mingw32-glib2-static-0:2.70.1-2.el9.noarch as a component of Red Hat CodeReady Linux Builder (v. 9)
- mingw64-glib2-0:2.70.1-2.el9.noarch as a component of Red Hat CodeReady Linux Builder (v. 9)
- mingw64-glib2-debuginfo-0:2.70.1-2.el9.noarch as a component of Red Hat CodeReady Linux Builder (v. 9)
- mingw64-glib2-static-0:2.70.1-2.el9.noarch as a component of Red Hat CodeReady Linux Builder (v. 9)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2022:8418
- externalhttps://access.redhat.com/security/updates/classification/#low
- externalhttps://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1938291
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2116278
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8418.json