The Red Hat security advisory RHSA-2025:11140 addresses two vulnerabilities in the GLib library: a buffer overflow in set_connect_msg() (CVE-2024-52533) and a buffer underflow in g_string_insert_unichar (CVE-2025-4373). GLib is a foundational C library used extensively in GNOME and other applications. These vulnerabilities could lead to memory corruption issues. The advisory covers Red Hat Enterprise Linux 9 and related variants, providing updated glib2 packages to fix the issues. No CVSS scores are provided in the advisory, but the severity is rated as moderate by Red Hat Product Security. No known exploits have been reported. The vendor advisory includes detailed package updates and instructions for remediation.

The vulnerabilities involve memory corruption (buffer overflow and underflow) in GLib, which could potentially lead to application crashes or other unintended behavior. Red Hat rates the security impact as moderate. There is no evidence of active exploitation in the wild. The affected products include multiple Red Hat Enterprise Linux 9 variants and related builder and update services. The impact is limited to systems running the affected GLib versions prior to applying the security update.

Red Hat has released updated glib2 packages for Red Hat Enterprise Linux 9 and related products that address these vulnerabilities. Users should apply these official updates as detailed in Red Hat advisory RHSA-2025:11140 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated or required beyond applying the vendor-provided patches.