This update for glycin-loaders fixes the following issues
- CVE-2025-55159: slab: incorrect bounds check in get_disjoint_mut function can lead to undefined behavior or potential
crash due to out-of-bounds access (bsc#1248035).
- CVE-2025-58160: tracing-subscriber: Tracing log pollution (bsc#1249010).
Patch instructions:
To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 16.0
zypper in -t patch openSUSE-Leap-16.0-999=1
- openSUSE Leap 16.0:
glycin-loaders-1.2.1-160000.3.1
glycin-loaders-devel-1.2.1-160000.3.1
libglycin-1-0-1.2.1-160000.3.1
libglycin-gtk4-1-0-1.2.1-160000.3.1
typelib-1_0-GlyGtk4_1-1.2.1-160000.3.1
typelib-1_0-Gly_1-1.2.1-160000.3.1
* bsc#1248035
* bsc#1249010
References:
* https://www.suse.com/security/cve/CVE-2025-55159.html
* https://www.suse.com/security/cve/CVE-2025-58160.html
Get the latest Linux and open source security news straight to your inbox.