SUSE-SU-2024:4051-2

Опубликовано: 19 дек. 2024

Источник: suse-cvrf

Описание

Security update for glib2

This update for glib2 fixes the following issues:

CVE-2024-52533: Fixed a single byte buffer overflow (bsc#1233282).

Список пакетов

Image SLES12-SP5-Azure-BYOS

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-Azure-HPC-BYOS

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-Azure-HPC-On-Demand

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-Azure-SAP-BYOS

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

libgthread-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-Azure-SAP-On-Demand

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

libgthread-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-Azure-Standard-On-Demand

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-EC2-BYOS

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-EC2-ECS-On-Demand

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-EC2-On-Demand

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-EC2-SAP-BYOS

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

libgthread-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-EC2-SAP-On-Demand

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

libgthread-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-GCE-BYOS

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-GCE-On-Demand

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-GCE-SAP-BYOS

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

libgthread-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-GCE-SAP-On-Demand

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

libgthread-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

libgthread-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

libgthread-2_0-0-2.48.2-12.43.1

SUSE Linux Enterprise Server 12 SP5-LTSS

glib2-devel-2.48.2-12.43.1

glib2-lang-2.48.2-12.43.1

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libgio-2_0-0-32bit-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libglib-2_0-0-32bit-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-32bit-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-32bit-2.48.2-12.43.1

libgthread-2_0-0-2.48.2-12.43.1

libgthread-2_0-0-32bit-2.48.2-12.43.1

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

glib2-devel-2.48.2-12.43.1

glib2-lang-2.48.2-12.43.1

glib2-tools-2.48.2-12.43.1

libgio-2_0-0-2.48.2-12.43.1

libgio-2_0-0-32bit-2.48.2-12.43.1

libglib-2_0-0-2.48.2-12.43.1

libglib-2_0-0-32bit-2.48.2-12.43.1

libgmodule-2_0-0-2.48.2-12.43.1

libgmodule-2_0-0-32bit-2.48.2-12.43.1

libgobject-2_0-0-2.48.2-12.43.1

libgobject-2_0-0-32bit-2.48.2-12.43.1

libgthread-2_0-0-2.48.2-12.43.1

libgthread-2_0-0-32bit-2.48.2-12.43.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20244051-2/
Link for SUSE-SU-2024:4051-2
https://lists.suse.com/pipermail/sle-security-updates/2024-December/020030.html
E-Mail link for SUSE-SU-2024:4051-2
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1233282
SUSE Bug 1233282
https://www.suse.com/security/cve/CVE-2024-52533/
SUSE CVE CVE-2024-52533 page

Описание

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

Затронутые продукты

Image SLES12-SP5-Azure-BYOS:glib2-tools-2.48.2-12.43.1

Image SLES12-SP5-Azure-BYOS:libgio-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-Azure-BYOS:libglib-2_0-0-2.48.2-12.43.1

Image SLES12-SP5-Azure-BYOS:libgmodule-2_0-0-2.48.2-12.43.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-52533.html
CVE-2024-52533
https://bugzilla.suse.com/1233282
SUSE Bug 1233282

SUSE-SU-2024:4051-2

Описание

Список пакетов

Image SLES12-SP5-Azure-BYOS

Image SLES12-SP5-Azure-HPC-BYOS

Image SLES12-SP5-Azure-HPC-On-Demand

Image SLES12-SP5-Azure-SAP-BYOS

Image SLES12-SP5-Azure-SAP-On-Demand

Image SLES12-SP5-Azure-Standard-On-Demand

Image SLES12-SP5-EC2-BYOS

Image SLES12-SP5-EC2-ECS-On-Demand

Image SLES12-SP5-EC2-On-Demand

Image SLES12-SP5-EC2-SAP-BYOS

Image SLES12-SP5-EC2-SAP-On-Demand

Image SLES12-SP5-GCE-BYOS

Image SLES12-SP5-GCE-On-Demand

Image SLES12-SP5-GCE-SAP-BYOS

Image SLES12-SP5-GCE-SAP-On-Demand

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Linux Enterprise Server 12 SP5-LTSS

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Ссылки

Уязвимость: CVE-2024-52533

Описание

Затронутые продукты

Ссылки