Back Linuxsecurity Fedora 42: Fix for Important Integer Overflow Vulnerability in mingw
MinGW Windows Glib2 library. Update Information : Update to glib-2.84.4 and backport fixes for CVE-2025-13601, CVE-2025-14087 and CVE-2025-14512.
MinGW Windows Glib2 library.
Update to glib-2.84.4 and backport fixes for CVE-2025-13601, CVE-2025-14087 and CVE-2025-14512.
* Sun Dec 14 2025 Sandro Mani - 2.84.1-1 - Update to 2.84.1 - Backport patch for CVE-2025-14512 - Backport patch for CVE-2025-14087 * Sun Dec 14 2025 Sandro Mani - 2.84.3-3 - Backport patch for CVE-2025-13601
* Sun Dec 14 2025 Sandro Mani - 2.84.1-1 - Update to 2.84.1 - Backport patch for CVE-2025-14512 - Backport patch for CVE-2025-14087 * Sun Dec 14 2025 Sandro Mani - 2.84.3-3 - Backport patch for CVE-2025-13601
[ 1 ] Bug #2417052 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string() [fedora-42] [ 2 ] Bug #2419111 - CVE-2025-14087 mingw-glib2: A buffer-underflow vulnerability exists in GLib\u2019s GVariant parser, specifically within bytestring_parse() and string_parse(). The parser uses signed 32-bit integers (gint) as loop indices (i and j). When extreme ... [fedora-42] [ 3 ] Bug #2421343 - CVE-2025-14512 mingw-glib2: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow [fedora-42]
[ 1 ] Bug #2417052 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string() [fedora-42] [ 2 ] Bug #2419111 - CVE-2025-14087 mingw-glib2: A buffer-underflow vulnerability exists in GLib\u2019s GVariant parser, specifically within bytestring_parse() and string_parse(). The parser uses signed 32-bit integers (gint) as loop indices (i and j). When extreme ... [fedora-42] [ 3 ] Bug #2421343 - CVE-2025-14512 mingw-glib2: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow [fedora-42]
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-b2df36b70a' at the command line. For more information, refer to the dnf documentation available at
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
