GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1405 advisory.

    This advisory aggregates security fixes for the glib2 SRPM in CIQ LTS 9.6. It addresses 6 CVEs:
    CVE-2023-25180, CVE-2024-34397, CVE-2025-3360, CVE-2019-12450, CVE-2023-24593, and 1 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0422 advisory.

    This advisory aggregates security fixes for the glib2 SRPM in CIQ LTS 9.2. It addresses 7 CVEs:
    CVE-2023-24593, CVE-2020-6750, CVE-2023-25180, CVE-2024-52533, CVE-2025-4373, and 2 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.06, has glib2 packages installed that are affected by multiple vulnerabilities:

  - file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file     permissions while a copy operation is in progress. Instead, default permissions are used. (CVE-2019-12450)

  - GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead     of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled.
    This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest     security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there     is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected. (CVE-2020-6750)

  - Rejected reason: Rejected by upstream. (CVE-2023-24593, CVE-2023-25180)

  - An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-     based client subscribes to signals from a trusted system service such as NetworkManager on a shared     computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will     wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based     client behaving incorrectly, with an application-dependent impact. (CVE-2024-34397)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead
    of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled.
    This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest
    security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there
    is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected. (CVE-2020-6750)

Add patch for CVE-2020-6750 and related issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update backports a fix for CVE-2020-6750.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
356954	Rocky Linux 9.6 [CIQ] Security Update: glib2 / glib2-devel / glib2-doc / glib2-static / glib2-tests Multiple Vulnerabilities (ciqsa-2026_1405)	Nessus	Rocky Linux Local Security Checks	Local	critical
353888	Rocky Linux 9.2 [CIQ] Security Update: glib2 / glib2-debuginfo / glib2-debugsource / glib2-devel / etc Multiple Vulnerabilities (ciqsa-2026_0422)	Nessus	Rocky Linux Local Security Checks	Local	critical
330504	NewStart CGSL MAIN 6.06 : glib2 Multiple Vulnerabilities (NS-SA-2026-0061)	Nessus	NewStart CGSL Local Security Checks	Local	critical
423972	Alpine: multiple glib packages: security update to 2.62.5-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	medium
423972	Alpine: multiple glib packages: security update to 2.62.5-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	medium
133881	Fedora 30 : glib2 (2020-092ef6572a)	Nessus	Fedora Local Security Checks	Local	medium
133821	Fedora 31 : mingw-glib2 (2020-c101a316ab)	Nessus	Fedora Local Security Checks	Local	medium
133566	Fedora 31 : glib2 (2020-339d413324)	Nessus	Fedora Local Security Checks	Local	medium

Detections

Analytics

CVE-2020-6750

medium

Tenable Plugins

critical

critical

critical

medium

medium

medium

medium

medium