==========================================================================
Ubuntu Security Notice USN-4049-1
July 08, 2019

glib2.0 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 18.10
– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS

Summary:

GLib did not properly restrict directory and file permissions.

Software Description:
– glib2.0: GLib Input, Output and Streaming Library (fam module)

Details:

It was discovered that GLib created directories and files without properly
restricting permissions. An attacker could possibly use this issue to access
sensitive information.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
libglib2.0-0 2.58.1-2ubuntu0.2
libglib2.0-bin 2.58.1-2ubuntu0.2

Ubuntu 18.04 LTS:
libglib2.0-0 2.56.4-0ubuntu0.18.04.4
libglib2.0-bin 2.56.4-0ubuntu0.18.04.4

Ubuntu 16.04 LTS:
libglib2.0-0 2.48.2-0ubuntu4.3
libglib2.0-bin 2.48.2-0ubuntu4.3

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4049-1
CVE-2019-13012

Package Information:
https://launchpad.net/ubuntu/+source/glib2.0/2.58.1-2ubuntu0.2
https://launchpad.net/ubuntu/+source/glib2.0/2.56.4-0ubuntu0.18.04.4
https://launchpad.net/ubuntu/+source/glib2.0/2.48.2-0ubuntu4.3
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1
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=lmQG
—–END PGP SIGNATURE—–
—