Skip to content
Fedora 42: Fix for Important Integer Overflow Vulnerability in mingw

Fedora 42: Fix for Important Integer Overflow Vulnerability in mingw

Linuxsecurity •LinuxSecurity Advisories • December 23, 2025

MinGW Windows Glib2 library. Update Information : Update to glib-2.84.4 and backport fixes for CVE-2025-13601, CVE-2025-14087 and CVE-2025-14512.

MinGW Windows Glib2 library.

Update to glib-2.84.4 and backport fixes for CVE-2025-13601, CVE-2025-14087 and CVE-2025-14512.

* Sun Dec 14 2025 Sandro Mani - 2.84.1-1 - Update to 2.84.1 - Backport patch for CVE-2025-14512 - Backport patch for CVE-2025-14087 * Sun Dec 14 2025 Sandro Mani - 2.84.3-3 - Backport patch for CVE-2025-13601

* Sun Dec 14 2025 Sandro Mani - 2.84.1-1 - Update to 2.84.1 - Backport patch for CVE-2025-14512 - Backport patch for CVE-2025-14087 * Sun Dec 14 2025 Sandro Mani - 2.84.3-3 - Backport patch for CVE-2025-13601

[ 1 ] Bug #2417052 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string() [fedora-42] [ 2 ] Bug #2419111 - CVE-2025-14087 mingw-glib2: A buffer-underflow vulnerability exists in GLib\u2019s GVariant parser, specifically within bytestring_parse() and string_parse(). The parser uses signed 32-bit integers (gint) as loop indices (i and j). When extreme ... [fedora-42] [ 3 ] Bug #2421343 - CVE-2025-14512 mingw-glib2: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow [fedora-42]

[ 1 ] Bug #2417052 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string() [fedora-42] [ 2 ] Bug #2419111 - CVE-2025-14087 mingw-glib2: A buffer-underflow vulnerability exists in GLib\u2019s GVariant parser, specifically within bytestring_parse() and string_parse(). The parser uses signed 32-bit integers (gint) as loop indices (i and j). When extreme ... [fedora-42] [ 3 ] Bug #2421343 - CVE-2025-14512 mingw-glib2: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow [fedora-42]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-b2df36b70a' at the command line. For more information, refer to the dnf documentation available at

Extracted Entities

Companies (1)

Platforms (1)