[SECURITY] Fedora 40 Update: glib2-2.80.2-1.fc40
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-635a54eb7e
2024-05-12 04:16:43.337255
--------------------------------------------------------------------------------
Name : glib2
Product : Fedora 40
Version : 2.80.2
Release : 1.fc40
URL : https://www.gtk.org
Summary : A library of handy utility functions
Description :
GLib is the low-level core library that forms the basis for projects
such as GTK+ and GNOME. It provides data structure handling for C,
portability wrappers, and interfaces for such runtime functionality
as an event loop, threads, dynamic loading, and an object system.
--------------------------------------------------------------------------------
Update Information:
Resolve CVE-2024-34397 (GDBus signal subscriptions for well-known names are
vulnerable to unicast spoofing), and also update gnome-shell to ensure this fix
does not break the screencast feature.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 9 2024 Michael Catanzaro <mcatanzaro(a)redhat.com> - 2.80.2-1
- Update to 2.80.2
* Tue May 7 2024 Michael Catanzaro <mcatanzaro(a)redhat.com> - 2.80.1-1
- Update to 2.80.1
* Thu Apr 18 2024 Michael Catanzaro <mcatanzaro(a)redhat.com> - 2.80.0-2
- Add missing bundled provides
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2279637 - CVE-2024-34397 glib2: Signal subscription vulnerabilities
[fedora-40]
https://bugzilla.redhat.com/show_bug.cgi?id=2279637
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-635a54eb7e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------