Important: glib2

Issue Overview: A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of unacceptable characters which would need escaping, the calculation of the length of the...

glib2 security update

2.68.4-16.2 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94290 - Resolves: RHEL-102845...

SUSE-SU-2025:02167-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2025-6052: Fixed integer overflow in gstringmaybeexpand leads to potential buffer overflow in GString bsc1244596. - CVE-2025-4373: Fixed buffer underflow through glib/gstring.c via function gstringinsertunichar bsc1242844...

SUSE-SU-2025:01880-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2025-4373: integer overflow in the gstringinsertunichar function can lead to buffer underwrite and memory corruption bsc1242844...

SUSE-SU-2025:01599-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2025-3360: Fixed integer overflow and buffer underread when parsing a very long and invalid ISO 8601 timestamp with gdatetimenewfromiso8601 bsc1240897...

SUSE-SU-2024:4051-2 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2024-52533: Fixed a single byte buffer overflow bsc1233282...

SUSE-SU-2024:1830-2 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2024-34397: Fixed signal subscription unicast spoofing vulnerability bsc1224044...

Important: glib2

Issue Overview: GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a...

SUSE-SU-2022:1455-2 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files bsc1183533...

SUSE-SU-2023:0174-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files bsc1183533...

SUSE-SU-2022:1758-2 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2021-28153: Fixed a dangling symlink when gfilereplace is used with GFILECREATEREPLACEDESTINATION bsc1183533...

SUSE-SU-2022:1455-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files bsc1183533...

OPENSUSE-SU-2021:0406-1 Security update for glib2

This update for glib2 fixes the following issues: - CVE-2021-27218: gbytearraynewtake takes a gsize as length but stores in a guint, this patch will refuse if the length is larger than guint. bsc1182328 - CVE-2021-27219: gmemdup takes a guint as parameter and sometimes leads into an integer...