PT-2025-45951 · Julia · Glib Jll

Published 2025-10-19 · Updated 2025-10-19

OSV

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.

Related Identifiers

JLSEC-2025-159

Affected Products

Glib Jll

References · 7

• https://osv.dev/vulnerability/JLSEC-2025-159 · Vendor Advisory
• https://gitlab.gnome.org/GNOME/glib/-/commit/3529bb4450a51995 · Note
• https://access.redhat.com/security/cve/CVE-2021-3800 · Note
• https://openwall.com/lists/oss-security/2017/06/23/8 · Note
• https://lists.debian.org/debian-lts-announce/2022/09/msg00020.html · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1938284 · Note
• https://security.netapp.com/advisory/ntap-20221028-0004 · Note