CVE catalog

CVE-2019-12450

glib2.0: CVE-2019-12450

[CVE catalog]

Severity
High · CVSS 8.1CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
2.62% · Oct 25, 2026

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianglib2.0sid2.90.1-2fixed
Debianglib2.0forky2.90.1-2fixed
Debianglib2.0trixie2.84.4-3~deb13u5fixed
Debianglib2.0bookworm2.74.6-2+deb12u9fixed
Debianglib2.0bookworm-security2.74.6-2+deb12u2fixed
Alpineglib3.102.60.4-r0fixed
Alpineglib3.112.60.4-r0fixed
Alpineglib3.122.60.4-r0fixed
Alpineglib3.132.60.4-r0fixed
Alpineglib3.142.60.4-r0fixed
Alpineglib3.152.60.4-r0fixed
Alpineglib3.162.60.4-r0fixed
Alpineglib3.172.60.4-r0fixed
Alpineglib3.182.60.4-r0fixed
Alpineglib3.192.60.4-r0fixed
Alpineglib3.202.60.4-r0fixed
Alpineglib3.212.60.4-r0fixed
Alpineglib3.222.60.4-r0fixed
Alpineglib3.232.60.4-r0fixed
Alpineglib3.242.60.4-r0fixed
Alpineglib3.72.54.2-r1fixed
Alpineglib3.82.56.1-r1fixed
Alpineglib3.92.58.1-r3fixed
Ubuntuglib2.0pro2.38.0-1ubuntu1vulnerable
Ubuntuglib2.0pro2.38.1-1vulnerable
Ubuntuglib2.0pro2.39.1-0ubuntu1vulnerable
Ubuntuglib2.0pro2.39.1-0ubuntu2vulnerable
Ubuntuglib2.0pro2.39.1-0ubuntu3vulnerable
Ubuntuglib2.0pro2.39.2-0ubuntu1vulnerable
Ubuntuglib2.0pro2.39.2-0ubuntu2vulnerable
Ubuntuglib2.0pro2.39.3-0ubuntu4vulnerable
Ubuntuglib2.0pro2.39.4-0ubuntu1vulnerable
Ubuntuglib2.0pro2.39.90-0ubuntu1vulnerable
Ubuntuglib2.0pro2.39.91-0ubuntu2vulnerable
Ubuntuglib2.0pro2.39.91-0ubuntu3vulnerable
Ubuntuglib2.0pro2.39.92-2vulnerable
Ubuntuglib2.0pro2.40.0-1vulnerable
Ubuntuglib2.0pro2.40.0-1ubuntu1vulnerable
Ubuntuglib2.0pro2.40.0-2vulnerable
Ubuntuglib2.0pro2.40.2-0ubuntu1vulnerable
Ubuntuglib2.0pro2.40.2-0ubuntu1.1vulnerable
Ubuntuglib2.0pro2.40.2-0ubuntu1.1+esm1fixed
Ubuntuglib2.016.042.46.1-1vulnerable
Ubuntuglib2.016.042.46.1-2vulnerable
Ubuntuglib2.016.042.47.1-1vulnerable
Ubuntuglib2.016.042.47.3-3vulnerable
Ubuntuglib2.016.042.47.4-1vulnerable
Ubuntuglib2.016.042.47.5-1vulnerable
Ubuntuglib2.016.042.47.6-1vulnerable
Ubuntuglib2.016.042.48.0-1ubuntu3vulnerable
Ubuntuglib2.016.042.48.0-1ubuntu4vulnerable
Ubuntuglib2.016.042.48.1-1~ubuntu16.04.1vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu1vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu3vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu4vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu4.1vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu4.2fixed
Ubuntuglib2.018.042.54.1-1ubuntu1vulnerable
Ubuntuglib2.018.042.55.2-2ubuntu1vulnerable
Ubuntuglib2.018.042.56.0-2ubuntu1vulnerable
Ubuntuglib2.018.042.56.0-4ubuntu1vulnerable
Ubuntuglib2.018.042.56.1-2ubuntu1vulnerable
Ubuntuglib2.018.042.56.2-0ubuntu0.18.04.1vulnerable
Ubuntuglib2.018.042.56.2-0ubuntu0.18.04.2vulnerable
Ubuntuglib2.018.042.56.3-0ubuntu0.18.04.1vulnerable
Ubuntuglib2.018.042.56.4-0ubuntu0.18.04.2vulnerable
Ubuntuglib2.018.042.56.4-0ubuntu0.18.04.3fixed
Ubuntuglib2.0pro2.38.0-1ubuntu1vulnerable
Ubuntuglib2.0pro2.38.1-1vulnerable
Ubuntuglib2.0pro2.39.1-0ubuntu1vulnerable
Ubuntuglib2.0pro2.39.1-0ubuntu2vulnerable
Ubuntuglib2.0pro2.39.1-0ubuntu3vulnerable
Ubuntuglib2.0pro2.39.2-0ubuntu1vulnerable
Ubuntuglib2.0pro2.39.2-0ubuntu2vulnerable
Ubuntuglib2.0pro2.39.3-0ubuntu4vulnerable
Ubuntuglib2.0pro2.39.4-0ubuntu1vulnerable
Ubuntuglib2.0pro2.39.90-0ubuntu1vulnerable
Ubuntuglib2.0pro2.39.91-0ubuntu2vulnerable
Ubuntuglib2.0pro2.39.91-0ubuntu3vulnerable
Ubuntuglib2.0pro2.39.92-2vulnerable
Ubuntuglib2.0pro2.40.0-1vulnerable
Ubuntuglib2.0pro2.40.0-1ubuntu1vulnerable
Ubuntuglib2.0pro2.40.0-2vulnerable
Ubuntuglib2.0pro2.40.2-0ubuntu1vulnerable
Ubuntuglib2.0pro2.40.2-0ubuntu1.1vulnerable
Ubuntuglib2.0pro2.40.2-0ubuntu1.1+esm1fixed
Ubuntuglib2.016.042.46.1-1vulnerable
Ubuntuglib2.016.042.46.1-2vulnerable
Ubuntuglib2.016.042.47.1-1vulnerable
Ubuntuglib2.016.042.47.3-3vulnerable
Ubuntuglib2.016.042.47.4-1vulnerable
Ubuntuglib2.016.042.47.5-1vulnerable
Ubuntuglib2.016.042.47.6-1vulnerable
Ubuntuglib2.016.042.48.0-1ubuntu3vulnerable
Ubuntuglib2.016.042.48.0-1ubuntu4vulnerable
Ubuntuglib2.016.042.48.1-1~ubuntu16.04.1vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu1vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu3vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu4vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu4.1vulnerable
Ubuntuglib2.016.042.48.2-0ubuntu4.2fixed
Ubuntuglib2.018.042.54.1-1ubuntu1vulnerable
Ubuntuglib2.018.042.55.2-2ubuntu1vulnerable
Ubuntuglib2.018.042.56.0-2ubuntu1vulnerable
Ubuntuglib2.018.042.56.0-4ubuntu1vulnerable
Ubuntuglib2.018.042.56.1-2ubuntu1vulnerable
Ubuntuglib2.018.042.56.2-0ubuntu0.18.04.1vulnerable
Ubuntuglib2.018.042.56.2-0ubuntu0.18.04.2vulnerable
Ubuntuglib2.018.042.56.3-0ubuntu0.18.04.1vulnerable
Ubuntuglib2.018.042.56.4-0ubuntu0.18.04.2vulnerable
Ubuntuglib2.018.042.56.4-0ubuntu0.18.04.3fixed
Suseglib2linux enterprise module for basesystem 152.54.3-4.15.1fixed
Suseglib2linux enterprise module for basesystem 15 sp12.54.3-4.15.1fixed
Suseglib2linux enterprise module for package hub 152.54.3-4.15.1fixed
Opensuseglib2leap 15.02.54.3-lp150.3.10.1fixed
Suseglib2linux enterprise point of sale 11 sp32.22.5-0.8.39.1fixed
Suseglib2linux enterprise server 11 sp4-ltss2.22.5-0.8.39.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianglib2.0sourcesid2.58.3-2not yet assignedNot reported[929753]
Debianglib2.0sourceforky2.58.3-2not yet assignedNot reported[929753]
Debianglib2.0sourcetrixie2.58.3-2not yet assignedNot reported[929753]
Debianglib2.0sourcebookworm2.58.3-2not yet assignedNot reported[929753]
Alpineglibapk3.102.60.4-r0Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.112.60.4-r0Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.122.60.4-r0Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.132.60.4-r0Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.142.60.4-r0Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.152.60.4-r0Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.162.60.4-r0Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.172.60.4-r0Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.182.60.4-r0Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.192.60.4-r0Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.202.60.4-r0Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.212.60.4-r0Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.222.60.4-r0Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.232.60.4-r0Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.242.60.4-r0Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.72.54.2-r1Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.82.56.1-r1Not reportedALPINE-CVE-2019-12450Not reported
Alpineglibapk3.92.58.1-r3Not reportedALPINE-CVE-2019-12450Not reported
Ubuntuglib2.0debpro2.40.2-0ubuntu1.1+esm1Not reportedUBUNTU-CVE-2019-12450Not reported
Ubuntuglib2.0deb16.042.48.2-0ubuntu4.2Not reportedUBUNTU-CVE-2019-12450Not reported
Ubuntuglib2.0deb18.042.56.4-0ubuntu0.18.04.3Not reportedUBUNTU-CVE-2019-12450Not reported
Ubuntuglib2.0debpro2.40.2-0ubuntu1.1+esm1Not reportedUSN-4014-2Not reported
Ubuntuglib2.0deb16.042.48.2-0ubuntu4.2Not reportedUSN-4014-1Not reported
Ubuntuglib2.0deb18.042.56.4-0ubuntu0.18.04.3Not reportedUSN-4014-1Not reported
Suseglib2rpmlinux enterprise module for basesystem 152.54.3-4.15.1Not reportedSUSE-SU-2019:1594-1Not reported
Suseglib2rpmlinux enterprise module for basesystem 15 sp12.54.3-4.15.1Not reportedSUSE-SU-2019:1594-1Not reported
Suseglib2rpmlinux enterprise module for package hub 152.54.3-4.15.1Not reportedSUSE-SU-2019:1594-1Not reported
Opensuseglib2rpmleap 15.02.54.3-lp150.3.10.1Not reportedOPENSUSE-SU-2019:1650-1Not reported
Suseglib2rpmlinux enterprise point of sale 11 sp32.22.5-0.8.39.1Not reportedSUSE-SU-2019:14102-1Not reported
Suseglib2rpmlinux enterprise server 11 sp4-ltss2.22.5-0.8.39.1Not reportedSUSE-SU-2019:14102-1Not reported

[Debian bug #929753]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · all · bookworm

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u9 · all · bookworm

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · all · bookworm-security

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · all · bookworm-security

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · all · bookworm

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u9 · all · bookworm

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · all · bookworm-security

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · all · bookworm-security

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · amd64 · bookworm

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u9 · arm64 · bookworm

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

    • 2.74.6-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · bookworm; dsa · glib2.0 · debian · 12

[Debian 13 (Trixie)]

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · all · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · all · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

  • Source package: [glib2.0]

    Details (2)
    • 2.84.4-3~deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

    • 2.84.4-3~deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.58.3-2

      dsa · glib2.0 · debian · 13

Next results

Observed:

References