Bug#982778: libglib2.0-0: GHSL-2021-045: Integer overflow in g_memdup()/g_bytes_new() on 64-bit platforms

Simon McVittie smcv at debian.org
Mon Feb 15 16:45:49 GMT 2021


Control: retitle -1 libglib2.0-0: CVE-2021-27219: Integer overflow in g_memdup()/g_bytes_new() on 64-bit platforms

On Sun, 14 Feb 2021 at 11:37:51 +0000, Simon McVittie wrote:
> Kevin Backhouse of the GitHub Security Lab found an integer overflow in
> GLib: <https://gitlab.gnome.org/GNOME/glib/-/issues/2319>. I've requested a
> CVE ID. Until then, it's tracked as GHSL-2021-045, or within Debian as
> TEMP-0000000-300CAD.

MITRE has allocated CVE-2021-27219.



More information about the pkg-gnome-maintainers mailing list