Red Hat Product Security has issued an advisory for glib2 addressing three security vulnerabilities: signal subscription vulnerabilities (CVE-2024-34397), a buffer overflow in the set_connect_msg() function (CVE-2024-52533), and a buffer underflow in g_string_insert_unichar (CVE-2025-4373). GLib is a fundamental library providing core application building blocks for C applications, including the GNOME platform. The vulnerabilities could lead to memory corruption issues. The advisory covers Red Hat Enterprise Linux 8.4 Extended Update Support and Advanced Mission Critical Update Support variants. Updated glib2 packages are available to fix these issues. The advisory rates the security impact as moderate and no exploits are currently known in the wild. Detailed CVSS scores are not provided, but the overall severity is medium.

The vulnerabilities affect core GLib functionality, potentially allowing memory corruption through signal subscription handling, buffer overflow, and buffer underflow conditions. Such issues could lead to application crashes or other unintended behavior. The advisory rates the impact as moderate. There are no known active exploits targeting these vulnerabilities at this time.

Red Hat has released updated glib2 packages for affected Red Hat Enterprise Linux 8.4 variants that address these vulnerabilities. Users should apply these official updates as described in the Red Hat advisory (RHSA-2025:14990) to remediate the issues. Patch status is confirmed by the vendor advisory. There is no indication that additional mitigation steps are required beyond applying the update.