{"id":"CVE-2021-28153","revision":"71b73594045242b68da3cccc4911c90b","records":[{"revision":"71b73594045242b68da3cccc4911c90b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2021-28153","aliases":[],"title":"An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, …","description":"An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)","state":0,"publishedAt":"2021-03-11T21:04:15+00:00","modifiedAt":"2026-10-14T11:39:29.929+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"n/a\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"n/a\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://gitlab.gnome.org/GNOME/glib/-/issues/2325","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6RXTD5HCP2K4AAUSWWZTBKQNHRCTAEOF/","https://security.netapp.com/advisory/ntap-20210416-0003/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ICUTQPHZNZWX2DZR46QFLQZRHVMHIILJ/","https://security.gentoo.org/glsa/202107-13","https://lists.debian.org/debian-lts-announce/2022/06/msg00006.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2021-28153","license":"CVE Program Terms of Use","key":"cve-program:CVE-2021-28153","identifiers":["CVE-2021-28153"]},"retained":false,"historicalAffected":[]}],"coverage":[]}