CVE-2009-3289: Gnome Glib

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777), which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory.

Affected products

• Gnome Glib: version 2.0 only
• Opensuse Opensuse: version 11.0 only; version 11.1 only
• Suse Suse Linux Enterprise Server: version 11 only

Published 2009-09-22. Last modified 2026-06-16.