CVE-2024-34397

Medium

Advisory

Published 7 May 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.2; base score, highest
EPSS: 0.008; 53rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 364; of 17,787 indexed, latest versions
Container images: 409; deployed by those charts
Fix available: 2 of 2; affected packages

glib2.0 - security update

Carried by container images the latest versions of 364 of 17,787 indexed charts deploy, on 409 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+25 more	2.58.3-2+deb10u6, 2.64.6-1~ubuntu20.04.7, 2.66.8-1+deb11u2, 2.72.4-0ubuntu2.3+1 more	379
glib2rpm	2.68.4-5.el9, 2.68.4-6.el9, 2.68.4-11.el9, 2.68.4-14.el9	0:2.68.4-14.el9_4.1	30

OSV records: DEBIAN-CVE-2024-34397 UBUNTU-CVE-2024-34397 RHSA-2024:6464 DLA-3814-1 DSA-5682-1 RLSA-2024:6464
Also known as: RHSA-2025:10780, USN-6768-1

Charts affected

364 by stars

Chart

Latest

Affected images

Radar Score

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7

Open the chart page →

11,405

apiwbstack

0.36.0

1 of 1 See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

2,019

mediawikiwbstack

0.14.0

1 of 1 See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

2,132

tool-cradlewbstack

0.2.0

1 of 1 See more

tool-cradle wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/cradle :2.0.1	1c7a78c54f77	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6

Open the chart page →

1,316

tool-quickstatementswbstack

0.4.0

1 of 1 See more

tool-quickstatements wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/quickstatements :1.3.5	88423e422ea8	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6

Open the chart page →

1,698

tool-widarwbstack

0.4.0

1 of 1 See more

tool-widar wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/widar :1.3	1702fc9df79f	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6

Open the chart page →

1,480

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed

Open the chart page →

9,743

weather-chartweather-web-app

0.1.0

1 of 1 See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
zohardocker12/weather_app_flask :latest	b86d60dbb68d	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6

Open the chart page →

2,670

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.7

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.7

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7

Open the chart page →

28,605

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

2,021

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

1,838

Container images carrying it

409 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/fairwinds/yelb-appserver :v0.6.0	fae21f06131f	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	glib2.0@2.48.2-0ubuntu4.4	no fix listed	1
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	glib2@2.68.4-14.el9	0:2.68.4-14.el9_4.1	1
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	glib2@2.68.4-6.el9	0:2.68.4-14.el9_4.1	1
quay.io/redhat-cop/patch-operator :v0.1.11	030ade9b9428	glib2@2.68.4-14.el9	0:2.68.4-14.el9_4.1	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	glib2.0@2.74.6-2	2.74.6-2+deb12u1	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	glib2.0@2.64.6-1~ubuntu20.04.3	2.64.6-1~ubuntu20.04.7	1
registry.gitlab.com/open-forms/design-catalogue :latest	f21f19346b29	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1