SUSE-SU-2026:0373-1

Опубликовано: 04 фев. 2026

Источник: suse-cvrf

Описание

Security update for glib2

This update for glib2 fixes the following issues:

CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354).
CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalculated buffer boundaries in the Base64 encoding routine (bsc#1257355).
CVE-2026-1489: Fixed undersized heap allocation followed by out-of-bounds access due to integer overflow in Unicode case conversion (bsc#1257353).

Список пакетов

Image SLES15-SP6

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP6-Azure-3P

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP6-HPC

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP6-HPC-Azure

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP6-HPC-BYOS

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP6-HPC-BYOS-Azure

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-Azure-3P

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-BYOS-Azure

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-BYOS-GCE

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-CHOST-BYOS-Azure

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-CHOST-BYOS-GCE

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-CHOST-BYOS-GDC

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-GCE

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-Hardened-BYOS-Azure

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-Hardened-BYOS-EC2

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-Hardened-BYOS-GCE

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-SAP-Azure

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

libgthread-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-SAP-Azure-3P

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

libgthread-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-SAP-BYOS-Azure

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

libgthread-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-SAP-BYOS-EC2

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

libgthread-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-SAP-BYOS-GCE

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

libgthread-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-SAP-EC2

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

libgthread-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-SAP-GCE

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

libgthread-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-SAP-Hardened-Azure

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

libgthread-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

libgthread-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

libgthread-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP7-SAP-Hardened-GCE

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

libgthread-2_0-0-2.78.6-150600.4.35.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

glib2-devel-2.78.6-150600.4.35.1

glib2-lang-2.78.6-150600.4.35.1

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libgio-2_0-0-32bit-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-32bit-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-32bit-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-32bit-2.78.6-150600.4.35.1

libgthread-2_0-0-2.78.6-150600.4.35.1

SUSE Linux Enterprise Server 15 SP6-LTSS

glib2-devel-2.78.6-150600.4.35.1

glib2-lang-2.78.6-150600.4.35.1

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libgio-2_0-0-32bit-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-32bit-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-32bit-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-32bit-2.78.6-150600.4.35.1

libgthread-2_0-0-2.78.6-150600.4.35.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

glib2-devel-2.78.6-150600.4.35.1

glib2-lang-2.78.6-150600.4.35.1

glib2-tools-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libgio-2_0-0-32bit-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-32bit-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-32bit-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-32bit-2.78.6-150600.4.35.1

libgthread-2_0-0-2.78.6-150600.4.35.1

openSUSE Leap 15.6

gio-branding-upstream-2.78.6-150600.4.35.1

glib2-devel-2.78.6-150600.4.35.1

glib2-devel-32bit-2.78.6-150600.4.35.1

glib2-devel-static-2.78.6-150600.4.35.1

glib2-doc-2.78.6-150600.4.35.1

glib2-lang-2.78.6-150600.4.35.1

glib2-tests-devel-2.78.6-150600.4.35.1

glib2-tools-2.78.6-150600.4.35.1

glib2-tools-32bit-2.78.6-150600.4.35.1

libgio-2_0-0-2.78.6-150600.4.35.1

libgio-2_0-0-32bit-2.78.6-150600.4.35.1

libglib-2_0-0-2.78.6-150600.4.35.1

libglib-2_0-0-32bit-2.78.6-150600.4.35.1

libgmodule-2_0-0-2.78.6-150600.4.35.1

libgmodule-2_0-0-32bit-2.78.6-150600.4.35.1

libgobject-2_0-0-2.78.6-150600.4.35.1

libgobject-2_0-0-32bit-2.78.6-150600.4.35.1

libgthread-2_0-0-2.78.6-150600.4.35.1

libgthread-2_0-0-32bit-2.78.6-150600.4.35.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20260373-1/
Link for SUSE-SU-2026:0373-1
https://lists.suse.com/pipermail/sle-security-updates/2026-February/024047.html
E-Mail link for SUSE-SU-2026:0373-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1257353
SUSE Bug 1257353
https://bugzilla.suse.com/1257354
SUSE Bug 1257354
https://bugzilla.suse.com/1257355
SUSE Bug 1257355
https://www.suse.com/security/cve/CVE-2026-1484/
SUSE CVE CVE-2026-1484 page
https://www.suse.com/security/cve/CVE-2026-1485/
SUSE CVE CVE-2026-1485 page
https://www.suse.com/security/cve/CVE-2026-1489/
SUSE CVE CVE-2026-1489 page

Описание

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrusted or extremely large Base64 input using GLib may crash or behave unpredictably.

Затронутые продукты

Image SLES15-SP6-Azure-3P:glib2-tools-2.78.6-150600.4.35.1

Image SLES15-SP6-Azure-3P:libgio-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP6-Azure-3P:libglib-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP6-Azure-3P:libgmodule-2_0-0-2.78.6-150600.4.35.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-1484.html
CVE-2026-1484
https://bugzilla.suse.com/1257355
SUSE Bug 1257355

Описание

A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow and out-of-bounds memory access. Exploitation requires a local user to install or process a specially crafted treemagic file, which can lead to local denial of service or application instability.

Затронутые продукты

Image SLES15-SP6-Azure-3P:glib2-tools-2.78.6-150600.4.35.1

Image SLES15-SP6-Azure-3P:libgio-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP6-Azure-3P:libglib-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP6-Azure-3P:libgmodule-2_0-0-2.78.6-150600.4.35.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-1485.html
CVE-2026-1485
https://bugzilla.suse.com/1257354
SUSE Bug 1257354

Описание

A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory corruption. By processing specially crafted and extremely large Unicode strings, an attacker could trigger an undersized memory allocation, resulting in out-of-bounds writes. This could cause applications utilizing GLib for string conversion to crash or become unstable.

Затронутые продукты

Image SLES15-SP6-Azure-3P:glib2-tools-2.78.6-150600.4.35.1

Image SLES15-SP6-Azure-3P:libgio-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP6-Azure-3P:libglib-2_0-0-2.78.6-150600.4.35.1

Image SLES15-SP6-Azure-3P:libgmodule-2_0-0-2.78.6-150600.4.35.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-1489.html
CVE-2026-1489
https://bugzilla.suse.com/1257353
SUSE Bug 1257353

SUSE-SU-2026:0373-1

Описание

Список пакетов

Image SLES15-SP6

Image SLES15-SP6-Azure-3P

Image SLES15-SP6-HPC

Image SLES15-SP6-HPC-Azure

Image SLES15-SP6-HPC-BYOS

Image SLES15-SP6-HPC-BYOS-Azure

Image SLES15-SP7-Azure-3P

Image SLES15-SP7-BYOS-Azure

Image SLES15-SP7-BYOS-GCE

Image SLES15-SP7-CHOST-BYOS-Azure

Image SLES15-SP7-CHOST-BYOS-GCE

Image SLES15-SP7-CHOST-BYOS-GDC

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

Image SLES15-SP7-GCE

Image SLES15-SP7-Hardened-BYOS-Azure

Image SLES15-SP7-Hardened-BYOS-EC2

Image SLES15-SP7-Hardened-BYOS-GCE

Image SLES15-SP7-SAP-Azure

Image SLES15-SP7-SAP-Azure-3P

Image SLES15-SP7-SAP-BYOS-Azure

Image SLES15-SP7-SAP-BYOS-EC2

Image SLES15-SP7-SAP-BYOS-GCE

Image SLES15-SP7-SAP-EC2

Image SLES15-SP7-SAP-GCE

Image SLES15-SP7-SAP-Hardened-Azure

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

Image SLES15-SP7-SAP-Hardened-GCE

SUSE Linux Enterprise Module for Basesystem 15 SP7

SUSE Linux Enterprise Server 15 SP6-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP6

openSUSE Leap 15.6

Ссылки

Уязвимость: CVE-2026-1484

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-1485

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-1489

Описание

Затронутые продукты

Ссылки