There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead
    of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled.
    This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest
    security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there
    is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected. (CVE-2020-6750)

CVE-2020-6750および関連する問題用のパッチを追加します。

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

この更新プログラムは、CVE-2020-6750の修正をバックポートします。

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

The remote NewStart CGSL host, running version MAIN 6.06, has glib2 packages installed that are affected by multiple vulnerabilities:

  - file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file     permissions while a copy operation is in progress. Instead, default permissions are used. (CVE-2019-12450)

  - GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead     of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled.
    This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest     security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there     is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected. (CVE-2020-6750)

  - Rejected reason: Rejected by upstream. (CVE-2023-24593, CVE-2023-25180)

  - An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-     based client subscribes to signals from a trusted system service such as NetworkManager on a shared     computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will     wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based     client behaving incorrectly, with an application-dependent impact. (CVE-2024-34397)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Add patch for CVE-2020-6750 and related issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update backports a fix for CVE-2020-6750.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
423972	Alpine: multiple glib packages: security update to 2.62.5-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	medium
423972	Alpine: multiple glib packages: security update to 2.62.5-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	medium
133881	Fedora 30：glib2（2020-092ef6572a）	Nessus	Fedora Local Security Checks	2020/2/24	2024/3/26	medium
133566	Fedora 31：glib2（2020-339d413324）	Nessus	Fedora Local Security Checks	2020/2/10	2024/3/27	medium
133821	Fedora 31：mingw-glib2（2020-c101a316ab）	Nessus	Fedora Local Security Checks	2020/2/20	2024/3/27	medium
330504	NewStart CGSL MAIN 6.06 : glib2 Multiple Vulnerabilities (NS-SA-2026-0061)	Nessus	NewStart CGSL Local Security Checks	2026/7/29	2026/7/29	critical
133881	Fedora 30 : glib2 (2020-092ef6572a)	Nessus	Fedora Local Security Checks	2020/2/24	2024/3/26	medium
133566	Fedora 31 : glib2 (2020-339d413324)	Nessus	Fedora Local Security Checks	2020/2/10	2024/3/27	medium
133821	Fedora 31 : mingw-glib2 (2020-c101a316ab)	Nessus	Fedora Local Security Checks	2020/2/20	2024/3/27	medium

检测

插件搜索

medium

medium

medium

medium

medium

critical

medium

medium

medium