SUSE-SU-2022:1758-2

Опубликовано: 30 нояб. 2022

Источник: suse-cvrf

Описание

Security update for glib2

This update for glib2 fixes the following issues:

CVE-2021-28153: Fixed a dangling symlink when g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION (bsc#1183533).

Список пакетов

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

libgthread-2_0-0-2.48.2-12.28.1

Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

libgthread-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-Azure-BYOS

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-Azure-Basic-On-Demand

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-Azure-HPC-BYOS

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-Azure-HPC-On-Demand

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-Azure-SAP-BYOS

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

libgthread-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-Azure-SAP-On-Demand

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

libgthread-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-Azure-Standard-On-Demand

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-EC2-BYOS

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-EC2-ECS-On-Demand

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-EC2-On-Demand

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-EC2-SAP-BYOS

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

libgthread-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-EC2-SAP-On-Demand

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

libgthread-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-GCE-BYOS

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-GCE-On-Demand

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-GCE-SAP-BYOS

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

libgthread-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-GCE-SAP-On-Demand

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

libgthread-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

libgthread-2_0-0-2.48.2-12.28.1

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

libgthread-2_0-0-2.48.2-12.28.1

SUSE Linux Enterprise Server 12 SP2-BCL

glib2-lang-2.48.2-12.28.1

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libgio-2_0-0-32bit-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libglib-2_0-0-32bit-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-32bit-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-32bit-2.48.2-12.28.1

libgthread-2_0-0-2.48.2-12.28.1

libgthread-2_0-0-32bit-2.48.2-12.28.1

SUSE Linux Enterprise Server 12 SP4-LTSS

glib2-lang-2.48.2-12.28.1

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libgio-2_0-0-32bit-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libglib-2_0-0-32bit-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-32bit-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-32bit-2.48.2-12.28.1

libgthread-2_0-0-2.48.2-12.28.1

libgthread-2_0-0-32bit-2.48.2-12.28.1

SUSE Linux Enterprise Server for SAP Applications 12 SP4

glib2-lang-2.48.2-12.28.1

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libgio-2_0-0-32bit-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libglib-2_0-0-32bit-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-32bit-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-32bit-2.48.2-12.28.1

libgthread-2_0-0-2.48.2-12.28.1

libgthread-2_0-0-32bit-2.48.2-12.28.1

SUSE OpenStack Cloud 9

glib2-lang-2.48.2-12.28.1

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libgio-2_0-0-32bit-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libglib-2_0-0-32bit-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-32bit-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-32bit-2.48.2-12.28.1

libgthread-2_0-0-2.48.2-12.28.1

libgthread-2_0-0-32bit-2.48.2-12.28.1

SUSE OpenStack Cloud Crowbar 9

glib2-lang-2.48.2-12.28.1

glib2-tools-2.48.2-12.28.1

libgio-2_0-0-2.48.2-12.28.1

libgio-2_0-0-32bit-2.48.2-12.28.1

libglib-2_0-0-2.48.2-12.28.1

libglib-2_0-0-32bit-2.48.2-12.28.1

libgmodule-2_0-0-2.48.2-12.28.1

libgmodule-2_0-0-32bit-2.48.2-12.28.1

libgobject-2_0-0-2.48.2-12.28.1

libgobject-2_0-0-32bit-2.48.2-12.28.1

libgthread-2_0-0-2.48.2-12.28.1

libgthread-2_0-0-32bit-2.48.2-12.28.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20221758-2/
Link for SUSE-SU-2022:1758-2
https://lists.suse.com/pipermail/sle-security-updates/2022-November/013174.html
E-Mail link for SUSE-SU-2022:1758-2
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1183533
SUSE Bug 1183533
https://www.suse.com/security/cve/CVE-2021-28153/
SUSE CVE CVE-2021-28153 page

Описание

An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)

Затронутые продукты

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:glib2-tools-2.48.2-12.28.1

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libgio-2_0-0-2.48.2-12.28.1

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libglib-2_0-0-2.48.2-12.28.1

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libgmodule-2_0-0-2.48.2-12.28.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-28153.html
CVE-2021-28153
https://bugzilla.suse.com/1183533
SUSE Bug 1183533

SUSE-SU-2022:1758-2

Описание

Список пакетов

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production

Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES12-SP5-Azure-BYOS

Image SLES12-SP5-Azure-Basic-On-Demand

Image SLES12-SP5-Azure-HPC-BYOS

Image SLES12-SP5-Azure-HPC-On-Demand

Image SLES12-SP5-Azure-SAP-BYOS

Image SLES12-SP5-Azure-SAP-On-Demand

Image SLES12-SP5-Azure-Standard-On-Demand

Image SLES12-SP5-EC2-BYOS

Image SLES12-SP5-EC2-ECS-On-Demand

Image SLES12-SP5-EC2-On-Demand

Image SLES12-SP5-EC2-SAP-BYOS

Image SLES12-SP5-EC2-SAP-On-Demand

Image SLES12-SP5-GCE-BYOS

Image SLES12-SP5-GCE-On-Demand

Image SLES12-SP5-GCE-SAP-BYOS

Image SLES12-SP5-GCE-SAP-On-Demand

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Linux Enterprise Server 12 SP2-BCL

SUSE Linux Enterprise Server 12 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 12 SP4

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud Crowbar 9

Ссылки

Уязвимость: CVE-2021-28153

Описание

Затронутые продукты

Ссылки