USN-6768-1: GLib vulnerability

Releases

• Ubuntu 24.04 LTS
• Ubuntu 23.10
• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS

Packages

• glib2.0 - GLib library of C routines

Details

Alicia Boya García discovered that GLib incorrectly handled signal
subscriptions. A local attacker could use this issue to spoof D-Bus signals
resulting in a variety of impacts including possible privilege escalation.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.04

• libglib2.0-0t64 - 2.80.0-6ubuntu3.1
• libglib2.0-bin - 2.80.0-6ubuntu3.1

Ubuntu 23.10

• libglib2.0-0 - 2.78.0-2ubuntu0.1
• libglib2.0-bin - 2.78.0-2ubuntu0.1

Ubuntu 22.04

• libglib2.0-0 - 2.72.4-0ubuntu2.3
• libglib2.0-bin - 2.72.4-0ubuntu2.3

Ubuntu 20.04

• libglib2.0-0 - 2.64.6-1~ubuntu20.04.7
• libglib2.0-bin - 2.64.6-1~ubuntu20.04.7

After a standard system update you need to reboot your computer to make all
the necessary changes.

References

• CVE-2024-34397