CVE-2019-12450
Fixed in a distro release EPSS 3%
file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.
Products: gnome glib, debian_linux, redhat enterprise_linux, redhat enterprise_linux_eus, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, canonical ubuntu_linux, opensuse leap, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | glib | 2.60.4-r0 |
| Alpine 3.11 | glib | 2.60.4-r0 |
| Alpine 3.12 | glib | 2.60.4-r0 |
| Alpine 3.13 | glib | 2.60.4-r0 |
| Alpine 3.14 | glib | 2.60.4-r0 |
| Alpine 3.15 | glib | 2.60.4-r0 |
| Alpine 3.16 | glib | 2.60.4-r0 |
| Alpine 3.17 | glib | 2.60.4-r0 |
| Alpine 3.18 | glib | 2.60.4-r0 |
| Alpine 3.19 | glib | 2.60.4-r0 |
| Alpine 3.20 | glib | 2.60.4-r0 |
| Alpine 3.21 | glib | 2.60.4-r0 |
| Alpine 3.22 | glib | 2.60.4-r0 |
| Alpine 3.23 | glib | 2.60.4-r0 |
| Alpine 3.24 | glib | 2.60.4-r0 |
| Alpine 3.7 | glib | 2.54.2-r1 |
| Alpine 3.8 | glib | 2.56.1-r1 |
| Alpine 3.9 | glib | 2.58.1-r3 |
| Amazon Linux 2 | glib2 | 2.56.1-7.amzn2.0.1 |
| Amazon Linux 2 | glib2-devel | 2.56.1-7.amzn2.0.1 |
| Amazon Linux 2 | glib2-doc | 2.56.1-7.amzn2.0.1 |
| Amazon Linux 2 | glib2-fam | 2.56.1-7.amzn2.0.1 |
| Amazon Linux 2 | glib2-static | 2.56.1-7.amzn2.0.1 |
| Amazon Linux 2 | glib2-tests | 2.56.1-7.amzn2.0.1 |
| Debian 12 | glib2.0 | 2.58.3-2 |
| Debian 13 | glib2.0 | 2.58.3-2 |
| Debian 14 | glib2.0 | 2.58.3-2 |
| Debian 8 | glib2.0 | 2.42.1-1+deb8u1 |
| Red Hat Enterprise Linux 7 | glib2 | 0:2.56.1-7.el7 |
| Red Hat Enterprise Linux 7 | glib2-debuginfo | 0:2.56.1-7.el7 |
| Red Hat Enterprise Linux 7 | glib2-devel | 0:2.56.1-7.el7 |
| Red Hat Enterprise Linux 7 | glib2-doc | 0:2.56.1-7.el7 |
| Red Hat Enterprise Linux 7 | glib2-fam | 0:2.56.1-7.el7 |
| Red Hat Enterprise Linux 7 | glib2-static | 0:2.56.1-7.el7 |
| Red Hat Enterprise Linux 7 | glib2-tests | 0:2.56.1-7.el7 |
| Red Hat Enterprise Linux 7 | ibus | 0:1.5.17-11.el7 |
| Red Hat Enterprise Linux 7 | ibus-debuginfo | 0:1.5.17-11.el7 |
| Red Hat Enterprise Linux 7 | ibus-devel | 0:1.5.17-11.el7 |
| Red Hat Enterprise Linux 7 | ibus-devel-docs | 0:1.5.17-11.el7 |
| Red Hat Enterprise Linux 7 | ibus-gtk2 | 0:1.5.17-11.el7 |
| Red Hat Enterprise Linux 7 | ibus-gtk3 | 0:1.5.17-11.el7 |
| Red Hat Enterprise Linux 7 | ibus-libs | 0:1.5.17-11.el7 |
| Red Hat Enterprise Linux 7 | ibus-pygtk2 | 0:1.5.17-11.el7 |
| Red Hat Enterprise Linux 7 | ibus-setup | 0:1.5.17-11.el7 |
| Red Hat Enterprise Linux 8 | glib2 | 0:2.56.4-7.el8 |
| Red Hat Enterprise Linux 8 | glib2-debuginfo | 0:2.56.4-7.el8 |
| Red Hat Enterprise Linux 8 | glib2-debugsource | 0:2.56.4-7.el8 |
| Red Hat Enterprise Linux 8 | glib2-devel | 0:2.56.4-7.el8 |
| Red Hat Enterprise Linux 8 | glib2-devel-debuginfo | 0:2.56.4-7.el8 |
| Red Hat Enterprise Linux 8 | glib2-doc | 0:2.56.4-7.el8 |
| Red Hat Enterprise Linux 8 | glib2-fam | 0:2.56.4-7.el8 |
| Red Hat Enterprise Linux 8 | glib2-fam-debuginfo | 0:2.56.4-7.el8 |
| Red Hat Enterprise Linux 8 | glib2-static | 0:2.56.4-7.el8 |
| Red Hat Enterprise Linux 8 | glib2-tests | 0:2.56.4-7.el8 |
| Red Hat Enterprise Linux 8 | glib2-tests-debuginfo | 0:2.56.4-7.el8 |
| SUSE Enterprise Storage 4 | glib2 | 2.48.2-12.12.2 |
| SUSE Linux Enterprise Desktop 12 SP3 | glib2 | 2.48.2-12.12.2 |
| SUSE Linux Enterprise Desktop 12 SP4 | glib2 | 2.48.2-12.12.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | glib2 | 2.54.3-4.15.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | glib2 | 2.54.3-4.15.1 |
| SUSE Linux Enterprise Module for Package Hub 15 | glib2 | 2.54.3-4.15.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | glib2 | 2.22.5-0.8.39.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | glib2 | 2.22.5-0.8.39.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | glib2 | 2.38.2-7.9.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | glib2 | 2.48.2-12.12.2 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | glib2 | 2.48.2-12.12.2 |
| SUSE Linux Enterprise Server 12 SP3 | glib2 | 2.48.2-12.12.2 |
| SUSE Linux Enterprise Server 12 SP4 | glib2 | 2.48.2-12.12.2 |
| SUSE Linux Enterprise Server 12-LTSS | glib2 | 2.38.2-7.9.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | glib2 | 2.48.2-12.12.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | glib2 | 2.48.2-12.12.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | glib2 | 2.48.2-12.12.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | glib2 | 2.48.2-12.12.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | glib2 | 2.48.2-12.12.2 |
| SUSE Linux Enterprise Workstation Extension 12 SP3 | glib2 | 2.48.2-12.12.2 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | glib2 | 2.48.2-12.12.2 |
| SUSE OpenStack Cloud 7 | glib2 | 2.48.2-12.12.2 |
| Ubuntu 16.04 LTS | glib2.0 | 2.48.2-0ubuntu4.2 |
| Ubuntu 18.04 LTS | glib2.0 | 2.56.4-0ubuntu0.18.04.3 |
| Ubuntu Pro 14.04 LTS | glib2.0 | 2.40.2-0ubuntu1.1+esm1 |
| openSUSE Leap 15.0 | glib2 | 2.54.3-lp150.3.10.1 |