CVE-2025-4373
medium
CVSS v3
4.8
CVSS v4 NEW
—
VIR risk
4.8
Description
RHSA-2025:11327: glib2 security update (Moderate)
Predictions
Exploit likelihood
58%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| rhel | 9 | fixed | |
| rocky | 8 | fixed | |
| debian | bookworm | fixed | 2.74.6-2+deb12u7 |
| debian | bullseye | fixed | 2.66.8-1+deb11u7 |
| debian | forky | fixed | 2.84.1-3 |
| debian | sid | fixed | 2.84.1-3 |
| debian | trixie | fixed | 2.84.1-3 |
| sles | affected | | |
| rocky | 9 | fixed | |
| almalinux | 9 | fixed | glib2-doc-2.68.4-16.el9_6.2.noarch.rpm |
| almalinux | 8 | fixed | glib2-devel-2.56.4-166.el8_10.i686.rpm |
| rhel | 8 | fixed | |
References
- https://access.redhat.com/errata/RHSA-2025:11140
- https://access.redhat.com/errata/RHSA-2025:10855
- https://access.redhat.com/errata/RHSA-2025:11327
- https://access.redhat.com/errata/RHSA-2025:11373
- https://access.redhat.com/errata/RHSA-2025:11374
- https://access.redhat.com/errata/RHSA-2025:11662
- https://access.redhat.com/errata/RHSA-2025:12275
- https://access.redhat.com/errata/RHSA-2025:13335
- https://access.redhat.com/errata/RHSA-2025:14988
- https://access.redhat.com/errata/RHSA-2025:14989
- https://access.redhat.com/errata/RHSA-2025:14990
- https://access.redhat.com/errata/RHSA-2025:14991
- https://access.redhat.com/security/cve/CVE-2025-4373
- https://bugzilla.redhat.com/show_bug.cgi?id=2364265
- https://gitlab.gnome.org/GNOME/glib/-/issues/3677
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://cert-portal.siemens.com/productcert/html/ssa-089022.html
- https://errata.rockylinux.org/RLSA-2025:11327
- https://security-tracker.debian.org/tracker/CVE-2025-4373
- https://www.suse.com/security/cve/CVE-2025-4373.html
- https://errata.rockylinux.org/RLSA-2025:11140
- https://bugzilla.redhat.com/2325340
- https://bugzilla.redhat.com/2364265
- https://errata.almalinux.org/9/ALSA-2025-11140.html
- https://bugzilla.redhat.com/2279632
CWEs
CWE-124
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.