Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02233-1

Опубликовано: 07 июл. 2025
Источник: suse-cvrf

Описание

Security update for glib2

This update for glib2 fixes the following issues:

  • CVE-2025-4373: integer overflow in the g_string_insert_unichar() function can lead to buffer underwrite and memory corruption (bsc#1242844).

Список пакетов

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
glib2-devel-2.48.2-12.46.1
glib2-devel-static-2.48.2-12.46.1
glib2-lang-2.48.2-12.46.1
glib2-tools-2.48.2-12.46.1
libgio-2_0-0-2.48.2-12.46.1
libgio-2_0-0-32bit-2.48.2-12.46.1
libglib-2_0-0-2.48.2-12.46.1
libglib-2_0-0-32bit-2.48.2-12.46.1
libgmodule-2_0-0-2.48.2-12.46.1
libgmodule-2_0-0-32bit-2.48.2-12.46.1
libgobject-2_0-0-2.48.2-12.46.1
libgobject-2_0-0-32bit-2.48.2-12.46.1
libgthread-2_0-0-2.48.2-12.46.1
libgthread-2_0-0-32bit-2.48.2-12.46.1

Ссылки

Описание

A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.

Затронутые продукты
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:glib2-devel-2.48.2-12.46.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:glib2-devel-static-2.48.2-12.46.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:glib2-lang-2.48.2-12.46.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:glib2-tools-2.48.2-12.46.1
Ссылки
Уязвимость SUSE-SU-2025:02233-1