Red Hat Product Security has released an advisory (RHSA-2025:12275) for two vulnerabilities in the glib2 package affecting Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. The first vulnerability (CVE-2024-52533) is a buffer overflow in the set_connect_msg() function. The second (CVE-2025-4373) is a buffer underflow in the g_string_insert_unichar function within glib/gstring.c. Both vulnerabilities stem from improper memory handling in GLib, which provides core application building blocks for C libraries and GNOME. The advisory includes updated glib2 packages that fix these issues. The severity is rated moderate by Red Hat, and no exploits are currently known. Detailed patch instructions and updated package links are provided in the vendor advisory.

The vulnerabilities could lead to memory corruption issues such as buffer overflow and underflow in GLib, potentially affecting applications relying on this library. Red Hat rates the security impact as moderate. No known exploits in the wild have been reported. The issues affect Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions on multiple architectures including x86_64, ppc64le, aarch64, and s390x.

Red Hat has released updated glib2 packages that address these vulnerabilities. Users of affected Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions should apply the security update as described in the Red Hat advisory RHSA-2025:12275 and the referenced article https://access.redhat.com/articles/11258. Applying these official patches is the recommended remediation. There is no indication that additional mitigation steps are required beyond applying the update.