Back to bug 2211832

Who When What Removed Added
Dhananjay Arunesh 2023-06-05 04:23:39 UTC CC mcatanza, mdean, rh-spice-bugs, virt-maint, walters
Dhananjay Arunesh 2023-06-06 07:24:30 UTC Depends On 2212718, 2212719, 2212717
Product Security DevOps Team 2023-06-06 12:56:41 UTC Resolution --- NOTABUG
Status NEW CLOSED
Last Closed 2023-06-06 12:56:41 UTC
Pedro Sampaio 2023-07-20 20:16:51 UTC Doc Text GLib's GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665.
Paige Jung 2023-07-20 20:51:31 UTC Doc Text GLib's GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665. A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665.
Pedro Sampaio 2023-07-24 15:13:21 UTC Summary CVE-2023-32643 glib: fuzz_variant_binary_byteswap: Heap-buffer-overflow in g_variant_serialised_get_child CVE-2023-32643 glib: Heap-buffer-overflow in g_variant_serialised_get_child

Back to bug 2211832