Linux · Security advisory · July 16, 2025

ALSA-2025:11327: Security update for 6 packages

ALSA-2025:11327, released July 16, 2025, fixes 3 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0151
74th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
glib2almalinux 82.56.4-166.el8_10
glib2-develalmalinux 82.56.4-166.el8_10
glib2-docalmalinux 82.56.4-166.el8_10
glib2-famalmalinux 82.56.4-166.el8_10
glib2-staticalmalinux 82.56.4-166.el8_10
glib2-testsalmalinux 82.56.4-166.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-52533 libglib2.0-data: gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error andresultant buffer overflow because SOCKS4_C... 9.8 0.0151 None reported
High CVE-2024-34397 glib2: This update for glib2 fixes the following issues: Update to version 2.78.6: + Fix a regression with IBus caused by... 7.0 0.0076 None reported
High CVE-2025-4373 Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar 7.0 0.0065 None reported
Showing 1 to 3 of 3 1