The GLib2 library, which provides core application building blocks for C libraries and applications including GNOME components, has multiple security flaws. These include signal subscription vulnerabilities (CVE-2024-34397), a buffer overflow vulnerability in the set_connect_msg() function (CVE-2024-52533), and a buffer underflow vulnerability in the g_string_insert_unichar function (CVE-2025-4373). These vulnerabilities affect Red Hat Enterprise Linux 8.2 AUS and related packages. Red Hat has released security updates to address these issues, with advisories RHSA-2025:14991 and RHSA-2025:11662 providing details and update instructions. The vulnerabilities have been assessed as moderate in severity, and no active exploitation has been reported.

The identified vulnerabilities could potentially allow attackers to cause memory corruption issues such as buffer overflow and underflow, and exploit signal subscription weaknesses in GLib2. This could lead to application instability or other security impacts depending on the context of use. However, Red Hat rates the overall impact as moderate, and there are no known exploits in the wild at this time.

Red Hat has released updated glib2 packages for Red Hat Enterprise Linux 8.2 AUS that address these vulnerabilities. Users should apply these official security updates promptly following Red Hat's guidance at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory. Systems running affected versions should be updated to the fixed package versions to remediate these issues.