Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:14102-1

Опубликовано: 24 июн. 2019
Источник: suse-cvrf

Описание

Security update for glib2

This update for glib2 fixes the following issues:

Security issue fixed:

  • CVE-2019-12450: Fixed an improper file permission when copy operation takes place (bsc#1137001).

Список пакетов

SUSE Linux Enterprise Point of Sale 11 SP3
glib2-2.22.5-0.8.39.1
glib2-doc-2.22.5-0.8.39.1
glib2-lang-2.22.5-0.8.39.1
libgio-2_0-0-2.22.5-0.8.39.1
libglib-2_0-0-2.22.5-0.8.39.1
libgmodule-2_0-0-2.22.5-0.8.39.1
libgobject-2_0-0-2.22.5-0.8.39.1
libgthread-2_0-0-2.22.5-0.8.39.1
SUSE Linux Enterprise Server 11 SP4-LTSS
glib2-2.22.5-0.8.39.1
glib2-doc-2.22.5-0.8.39.1
glib2-lang-2.22.5-0.8.39.1
libgio-2_0-0-2.22.5-0.8.39.1
libgio-2_0-0-32bit-2.22.5-0.8.39.1
libglib-2_0-0-2.22.5-0.8.39.1
libglib-2_0-0-32bit-2.22.5-0.8.39.1
libgmodule-2_0-0-2.22.5-0.8.39.1
libgmodule-2_0-0-32bit-2.22.5-0.8.39.1
libgobject-2_0-0-2.22.5-0.8.39.1
libgobject-2_0-0-32bit-2.22.5-0.8.39.1
libgthread-2_0-0-2.22.5-0.8.39.1
libgthread-2_0-0-32bit-2.22.5-0.8.39.1

Описание

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.


Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:glib2-2.22.5-0.8.39.1
SUSE Linux Enterprise Point of Sale 11 SP3:glib2-doc-2.22.5-0.8.39.1
SUSE Linux Enterprise Point of Sale 11 SP3:glib2-lang-2.22.5-0.8.39.1
SUSE Linux Enterprise Point of Sale 11 SP3:libgio-2_0-0-2.22.5-0.8.39.1

Ссылки
Уязвимость SUSE-SU-2019:14102-1