Oval Definition:oval:org.opensuse.security:def:69610
Revision Date:2021-03-19Version:1
Title:Security update for glib2 (Important)
Description:

This update for glib2 fixes the following issues:

- CVE-2021-27218: g_byte_array_new_take takes a gsize as length but stores in a guint, this patch will refuse if the length is larger than guint. (bsc#1182328)

- CVE-2021-27219: g_memdup takes a guint as parameter and sometimes leads into an integer overflow, so add a g_memdup2 function which uses gsize to replace it. (bsc#1182362)
Family:unixClass:patch
Status:Reference(s):1140868
1182328
1182362
CVE-2016-9082
CVE-2017-7475
CVE-2017-9814
CVE-2019-11709
CVE-2019-11711
CVE-2019-11712
CVE-2019-11713
CVE-2019-11715
CVE-2019-11717
CVE-2019-11719
CVE-2019-11729
CVE-2019-11730
CVE-2019-9811
CVE-2021-27218
CVE-2021-27219
SUSE-SU-2019:1960-1
SUSE-SU-2021:0890-1
Platform(s):SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Workstation Extension 15 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • AND Package Information
  • cairo-devel-1.16.0-1 is installed
  • OR libcairo-gobject2-1.16.0-1 is installed
  • OR libcairo-script-interpreter2-1.16.0-1 is installed
  • OR libcairo2-1.16.0-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 15-LTSS is installed
  • AND Package Information
  • glib2-devel-2.54.3-4.24.1 is installed
  • OR glib2-lang-2.54.3-4.24.1 is installed
  • OR glib2-tools-2.54.3-4.24.1 is installed
  • OR libgio-2_0-0-2.54.3-4.24.1 is installed
  • OR libgio-2_0-0-32bit-2.54.3-4.24.1 is installed
  • OR libglib-2_0-0-2.54.3-4.24.1 is installed
  • OR libglib-2_0-0-32bit-2.54.3-4.24.1 is installed
  • OR libgmodule-2_0-0-2.54.3-4.24.1 is installed
  • OR libgmodule-2_0-0-32bit-2.54.3-4.24.1 is installed
  • OR libgobject-2_0-0-2.54.3-4.24.1 is installed
  • OR libgobject-2_0-0-32bit-2.54.3-4.24.1 is installed
  • OR libgthread-2_0-0-2.54.3-4.24.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND Package Information
  • MozillaThunderbird-60.8.0-3.46 is installed
  • OR MozillaThunderbird-translations-common-60.8.0-3.46 is installed
  • OR MozillaThunderbird-translations-other-60.8.0-3.46 is installed
  • BACK