CVE-2024-34397
glib2: This update for glib2 fixes the following issues: Update to version 2.78.6: + Fix a regression with IBus caused by...
CVE-2024-34397 is fixed in 21 products on 1 platform, first by gir1.2-girepository-3.0 2.80.0-6ubuntu3.1, released May 6, 2024. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.0
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0076
55th percentile
This update for glib2 fixes the following issues: Update to version 2.78.6: + Fix a regression with IBus caused by the fix for CVE-2024-34397 Changes in version 2.78.5: + Fix CVE-2024-34397: GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing. (bsc#1224044) + Bugs fixed: - gvfs-udisks2-volume-monitor SIGSEGV in g_content_type_guess_for_tree() due to filename with bad encoding - gcontenttype: Make filename valid utf-8 string before processing. - gdbusconnection: Don't deliver signals if the sender doesn't match. Changes in version 2.78.4: + Bugs fixed: - Fix generated RST anchors for methods, signals and properties. - docs/reference: depend on a native gtk-doc. - gobject_gdb.py: Do not break bt on optimized build. - gregex: clean up usage of _GRegex.jit_status.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| gir1.2-girepository-3.0 · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.1 | gir1.2-girepository-3.0 2.80.0-6ubuntu3.1 | May 6, 2024 |
| gir1.2-girepository-3.0 · Ubuntu 24.10 (oracular) | 2.80.1-1 | gir1.2-girepository-3.0 2.80.1-1 | May 7, 2024 |
| gir1.2-girepository-3.0 · Ubuntu 25.04 (plucky) | 2.80.1-1 | gir1.2-girepository-3.0 2.80.1-1 | May 7, 2024 |
| gir1.2-glib-2.0 · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.1 | gir1.2-glib-2.0 2.80.0-6ubuntu3.1 | May 6, 2024 |
| gir1.2-glib-2.0 · Ubuntu 24.10 (oracular) | 2.80.1-1 | gir1.2-glib-2.0 2.80.1-1 | May 7, 2024 |
| gir1.2-glib-2.0 · Ubuntu 25.04 (plucky) | 2.80.1-1 | gir1.2-glib-2.0 2.80.1-1 | May 7, 2024 |
| glib2 · RHEL 8 | 0:2.56.4-166.el8_10 | RHSA-2025:11327 | Jul 16, 2025 |
| glib2 · RHEL 9 | 0:2.68.4-14.el9_4.1 | RHSA-2024:6464 | Sep 9, 2024 |
| glib2 · almalinux 8 | 2.56.4-166.el8_10 | ALSA-2025:11327 | Jul 16, 2025 |
| glib2 · almalinux 9 | 2.68.4-14.el9_4.1 | ALSA-2024:6464 | Sep 9, 2024 |
| glib2 · ol 8 | 0:2.56.4-166.el8_10 | ELSA-2025-11327 | Jul 16, 2025 |
| glib2 · ol 9 | 0:2.68.4-14.el9_4.1 | ELSA-2024-6464 | Sep 9, 2024 |
| glib2 · opensuse-leap 15.6 | 2.78.6-150600.4.3.1 | SUSE-SU-2024:1950-1 | Jun 7, 2024 |
| glib2 · rocky 8 | 0:2.56.4-166.el8_10 | RLSA-2025:11327 | Jul 29, 2025 |
| glib2 · rocky 9 | 0:2.68.4-14.el9_4.1 | RLSA-2024:6464 | Sep 17, 2024 |
| glib2 · sles 15.6 | 2.78.6-150600.4.3.1 | SUSE-SU-2024:1950-1 | Jun 7, 2024 |
| glib2-branding-SLE · opensuse-leap 15.6 | 15-150600.35.2.1 | SUSE-SU-2024:1950-1 | Jun 7, 2024 |
| glib2-branding-SLE · sles 15.6 | 15-150600.35.2.1 | SUSE-SU-2024:1950-1 | Jun 7, 2024 |
| glib2-devel · RHEL 8 | 0:2.56.4-166.el8_10 | RHSA-2025:11327 | Jul 16, 2025 |
| glib2-devel · RHEL 9 | 0:2.68.4-14.el9_4.1 | RHSA-2024:6464 | Sep 9, 2024 |
| glib2-devel · almalinux 8 | 2.56.4-166.el8_10 | ALSA-2025:11327 | Jul 16, 2025 |
| glib2-devel · almalinux 9 | 2.68.4-14.el9_4.1 | ALSA-2024:6464 | Sep 9, 2024 |
| glib2-devel · ol 8 | 0:2.56.4-166.el8_10 | ELSA-2025-11327 | Jul 16, 2025 |
| glib2-devel · ol 9 | 0:2.68.4-14.el9_4.1 | ELSA-2024-6464 | Sep 9, 2024 |
| glib2-doc · RHEL 8 | 0:2.56.4-166.el8_10 | RHSA-2025:11327 | Jul 16, 2025 |
| glib2-doc · RHEL 9 | 0:2.68.4-14.el9_4.1 | RHSA-2024:6464 | Sep 9, 2024 |
| glib2-doc · almalinux 8 | 2.56.4-166.el8_10 | ALSA-2025:11327 | Jul 16, 2025 |
| glib2-doc · almalinux 9 | 2.68.4-14.el9_4.1 | ALSA-2024:6464 | Sep 9, 2024 |
| glib2-doc · ol 8 | 0:2.56.4-166.el8_10 | ELSA-2025-11327 | Jul 16, 2025 |
| glib2-doc · ol 9 | 0:2.68.4-14.el9_4.1 | ELSA-2024-6464 | Sep 9, 2024 |
| glib2-doc · opensuse-leap 15.6 | 2.78.6-150600.4.3.1 | SUSE-SU-2024:1950-1 | Jun 7, 2024 |
| glib2-fam · RHEL 8 | 0:2.56.4-166.el8_10 | RHSA-2025:11327 | Jul 16, 2025 |
| glib2-fam · almalinux 8 | 2.56.4-166.el8_10 | ALSA-2025:11327 | Jul 16, 2025 |
| glib2-fam · ol 8 | 0:2.56.4-166.el8_10 | ELSA-2025-11327 | Jul 16, 2025 |
| glib2-static · RHEL 8 | 0:2.56.4-166.el8_10 | RHSA-2025:11327 | Jul 16, 2025 |
| glib2-static · RHEL 9 | 0:2.68.4-14.el9_4.1 | RHSA-2024:6464 | Sep 9, 2024 |
| glib2-static · almalinux 8 | 2.56.4-166.el8_10 | ALSA-2025:11327 | Jul 16, 2025 |
| glib2-static · almalinux 9 | 2.68.4-14.el9_4.1 | ALSA-2024:6464 | Sep 9, 2024 |
| glib2-static · ol 8 | 0:2.56.4-166.el8_10 | ELSA-2025-11327 | Jul 16, 2025 |
| glib2-static · ol 9 | 0:2.68.4-14.el9_4.1 | ELSA-2024-6464 | Sep 9, 2024 |
| glib2-tests · RHEL 8 | 0:2.56.4-166.el8_10 | RHSA-2025:11327 | Jul 16, 2025 |
| glib2-tests · RHEL 9 | 0:2.68.4-14.el9_4.1 | RHSA-2024:6464 | Sep 9, 2024 |
| glib2-tests · almalinux 8 | 2.56.4-166.el8_10 | ALSA-2025:11327 | Jul 16, 2025 |
| glib2-tests · almalinux 9 | 2.68.4-14.el9_4.1 | ALSA-2024:6464 | Sep 9, 2024 |
| glib2-tests · ol 8 | 0:2.56.4-166.el8_10 | ELSA-2025-11327 | Jul 16, 2025 |
| glib2-tests · ol 9 | 0:2.68.4-14.el9_4.1 | ELSA-2024-6464 | Sep 9, 2024 |
| glib2.0 · Debian 11.6 (bullseye) | 2.66.8-1+deb11u2 | DSA-5682-1 | May 7, 2024 |
| glib2.0 · Debian 12.15 (bookworm) | 2.74.6-2+deb12u1 | DSA-5682-1 | May 7, 2024 |
| glib2.0 · Debian 13.5 (trixie) | 2.80.0-10 | DEBIAN-CVE-2024-34397 | May 7, 2024 |
| glib2.0 · Debian 14 | 2.80.0-10 | DEBIAN-CVE-2024-34397 | May 7, 2024 |
| libgirepository-2.0-0 · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.1 | libgirepository-2.0-0 2.80.0-6ubuntu3.1 | May 6, 2024 |
| libgirepository-2.0-0 · Ubuntu 24.10 (oracular) | 2.80.1-1 | libgirepository-2.0-0 2.80.1-1 | May 7, 2024 |
| libgirepository-2.0-0 · Ubuntu 25.04 (plucky) | 2.80.1-1 | libgirepository-2.0-0 2.80.1-1 | May 7, 2024 |
| libglib2.0-0 · Ubuntu 20.04 LTS (focal) | 2.64.6-1~ubuntu20.04.7 | libglib2.0-0 2.64.6-1~ubuntu20.04.7 | May 6, 2024 |
| libglib2.0-0 · Ubuntu 22.04.1 LTS (jammy) | 2.72.4-0ubuntu2.3 | libglib2.0-0 2.72.4-0ubuntu2.3 | May 6, 2024 |
| libglib2.0-0t64 · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.1 | libglib2.0-0t64 2.80.0-6ubuntu3.1 | May 6, 2024 |
| libglib2.0-0t64 · Ubuntu 24.10 (oracular) | 2.80.1-1 | libglib2.0-0t64 2.80.1-1 | May 7, 2024 |
| libglib2.0-0t64 · Ubuntu 25.04 (plucky) | 2.80.1-1 | libglib2.0-0t64 2.80.1-1 | May 7, 2024 |
| libglib2.0-bin · Ubuntu 20.04 LTS (focal) | 2.64.6-1~ubuntu20.04.7 | libglib2.0-bin 2.64.6-1~ubuntu20.04.7 | May 6, 2024 |
| libglib2.0-bin · Ubuntu 22.04.1 LTS (jammy) | 2.72.4-0ubuntu2.3 | libglib2.0-bin 2.72.4-0ubuntu2.3 | May 6, 2024 |
| libglib2.0-bin · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.1 | libglib2.0-bin 2.80.0-6ubuntu3.1 | May 6, 2024 |
| libglib2.0-bin · Ubuntu 24.10 (oracular) | 2.80.1-1 | libglib2.0-bin 2.80.1-1 | May 7, 2024 |
| libglib2.0-bin · Ubuntu 25.04 (plucky) | 2.80.1-1 | libglib2.0-bin 2.80.1-1 | May 7, 2024 |
| libglib2.0-data · Ubuntu 20.04 LTS (focal) | 2.64.6-1~ubuntu20.04.7 | libglib2.0-data 2.64.6-1~ubuntu20.04.7 | May 6, 2024 |
| libglib2.0-data · Ubuntu 22.04.1 LTS (jammy) | 2.72.4-0ubuntu2.3 | libglib2.0-data 2.72.4-0ubuntu2.3 | May 6, 2024 |
| libglib2.0-data · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.1 | libglib2.0-data 2.80.0-6ubuntu3.1 | May 6, 2024 |
| libglib2.0-data · Ubuntu 24.10 (oracular) | 2.80.1-1 | libglib2.0-data 2.80.1-1 | May 7, 2024 |
| libglib2.0-data · Ubuntu 25.04 (plucky) | 2.80.1-1 | libglib2.0-data 2.80.1-1 | May 7, 2024 |
| libglib2.0-dev-bin · Ubuntu 20.04 LTS (focal) | 2.64.6-1~ubuntu20.04.7 | libglib2.0-dev-bin 2.64.6-1~ubuntu20.04.7 | May 6, 2024 |
| libglib2.0-dev-bin · Ubuntu 22.04.1 LTS (jammy) | 2.72.4-0ubuntu2.3 | libglib2.0-dev-bin 2.72.4-0ubuntu2.3 | May 6, 2024 |
| libglib2.0-dev-bin · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.1 | libglib2.0-dev-bin 2.80.0-6ubuntu3.1 | May 6, 2024 |
| libglib2.0-tests · Ubuntu 20.04 LTS (focal) | 2.64.6-1~ubuntu20.04.7 | libglib2.0-tests 2.64.6-1~ubuntu20.04.7 | May 6, 2024 |
| libglib2.0-tests · Ubuntu 22.04.1 LTS (jammy) | 2.72.4-0ubuntu2.3 | libglib2.0-tests 2.72.4-0ubuntu2.3 | May 6, 2024 |
| libglib2.0-tests · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.1 | libglib2.0-tests 2.80.0-6ubuntu3.1 | May 6, 2024 |
| libglib2.0-tests · Ubuntu 24.10 (oracular) | 2.80.1-1 | libglib2.0-tests 2.80.1-1 | May 7, 2024 |
| libglib2.0-tests · Ubuntu 25.04 (plucky) | 2.80.1-1 | libglib2.0-tests 2.80.1-1 | May 7, 2024 |
| mingw32-glib2 · RHEL 9 | 0:2.78.6-1.el9 | RHSA-2024:9442 | Nov 12, 2024 |
| mingw32-glib2 · almalinux 9 | 2.78.6-1.el9 | ALSA-2024:9442 | Nov 12, 2024 |
| mingw32-glib2 · ol 9 | 0:2.78.6-1.el9 | ELSA-2024-9442 | Nov 14, 2024 |
| mingw32-glib2-static · RHEL 9 | 0:2.78.6-1.el9 | RHSA-2024:9442 | Nov 12, 2024 |
| mingw32-glib2-static · almalinux 9 | 2.78.6-1.el9 | ALSA-2024:9442 | Nov 12, 2024 |
| mingw32-glib2-static · ol 9 | 0:2.78.6-1.el9 | ELSA-2024-9442 | Nov 14, 2024 |
| mingw64-glib2 · RHEL 9 | 0:2.78.6-1.el9 | RHSA-2024:9442 | Nov 12, 2024 |
| mingw64-glib2 · almalinux 9 | 2.78.6-1.el9 | ALSA-2024:9442 | Nov 12, 2024 |
| mingw64-glib2 · ol 9 | 0:2.78.6-1.el9 | ELSA-2024-9442 | Nov 14, 2024 |
| mingw64-glib2-static · RHEL 9 | 0:2.78.6-1.el9 | RHSA-2024:9442 | Nov 12, 2024 |
| mingw64-glib2-static · almalinux 9 | 2.78.6-1.el9 | ALSA-2024:9442 | Nov 12, 2024 |
| mingw64-glib2-static · ol 9 | 0:2.78.6-1.el9 | ELSA-2024-9442 | Nov 14, 2024 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.