JLSEC-2025-165

    Dashboard / Vulnerabilities / JLSEC-2025-165

    JLSEC-2025-165

    Published: 19 Oct 2025Last Modified: 18 Jul 2026
    Upstream:
    CVE-2024-34397

    Summary: An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1

    Details: An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based client behaving incorrectly, with an application-dependent impact.

    References: https://cert-portal.siemens.com/productcert/html/ssa-082556.html, https://cert-portal.siemens.com/productcert/html/ssa-613116.html, https://gitlab.gnome.org/GNOME/glib/-/issues/3268, https://lists.debian.org/debian-lts-announce/2024/05/msg00008.html, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IRSFYAE5X23TNRWX7ZWEJOMISLCDSYNS/, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCDY3KA7G7D3DRXYTT46K6LFHS2KHWBH/, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LL6HSJDXCXMLEIJBYV6CPOR4K2NTCTXW/, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNFJHISR4O6VFOHBFWH5I5WWMG37H63A/, https://lists.fedoraproject.org/archives/list/[email protected]/message/IRSFYAE5X23TNRWX7ZWEJOMISLCDSYNS/, https://lists.fedoraproject.org/archives/list/[email protected]/message/LCDY3KA7G7D3DRXYTT46K6LFHS2KHWBH/, https://lists.fedoraproject.org/archives/list/[email protected]/message/LL6HSJDXCXMLEIJBYV6CPOR4K2NTCTXW/, https://lists.fedoraproject.org/archives/list/[email protected]/message/UNFJHISR4O6VFOHBFWH5I5WWMG37H63A/, https://security.netapp.com/advisory/ntap-20240531-0008/, https://www.openwall.com/lists/oss-security/2024/05/07/5

    Affected packages

    Package

    Name: Glib_jll

    Purl: pkg:julia/Glib_jll?uuid=7746bdde-850d-59dc-9ae8-88ece973131d

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -2.80.2+0

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    JLSEC-2025-165 | CVE-DB