tocsin

Debian/glib2.0: critical 9.8

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

Action: Upgrade glib2.0 to 2.74.6-2+deb12u5 or later.

Affected

introducedfixedlast affected
02.74.6-2+deb12u5-

Fixed versions

2.74.6-2+deb12u5

Sources

published · modified · JSON