Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
An update that solves two vulnerabilities can now be installed.. # Security update for glycin-loaders Announcement ID: SUSE-SU-2026:22302-1 Release Date: 2026-06-20T18:27:34Z Rating: moderate References: * bsc#1248035 * bsc#1249010 Cross-References: * CVE-2025-55159 * CVE-2025-58160 CVSS scores: * CVE-2025-55159 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-55159 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H * CVE-2025-55159 ( NVD ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-58160 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-58160 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2025-58160 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for glycin-loaders fixes the following issues * CVE-2025-55159: slab: incorrect bounds check in get_disjoint_mut function can lead to undefined behavior or potential crash due to out-of-bounds access (bsc#1248035). * CVE-2025-58160: tracing-subscriber: Tracing log pollution (bsc#1249010). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-999=1 * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-999=1 ## PackageList: * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le x86_64) * typelib-1_0-GlyGtk4_1-1.2.1-160000.3.1 * libglycin-1-0-1.2.1-160000.3.1 * typelib-1_0-Gly_1-1.2.1-160000.3.1 * glycin-loaders-1.2.1-160000.3.1 * libglycin-gtk4-1-0-1.2.1-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * typelib-1_0-GlyGtk4_1-1.2.1-160000.3.1 * libglycin-1-0-1.2.1-160000.3.1 * typelib-1_0-Gly_1-1.2.1-160000.3.1 * glycin-loaders-1.2.1-160000.3.1 * libglycin-gtk4-1-0-1.2.1-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-55159.html * https://www.suse.com/security/cve/CVE-2025-58160.html * https://bugzilla.suse.com/show_bug.cgi?id=1248035 * https://bugzilla.suse.com/show_bug.cgi?id=1249010 . This update addresses two issues in glycin-loaders affecting SUSE Linux Enterprise Server 16.0. Immediate installation is advised.. Glycin Loaders Patch, SUSE Update, Tracing Pollution Fix. . Severity: moderate. LinuxSecurity.com Team
An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.. openSUSE security update: security update for glycin-loaders ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21134-1 Rating: moderate References: * bsc#1248035 * bsc#1249010 Cross-References: * CVE-2025-55159 * CVE-2025-58160 CVSS scores: * CVE-2025-55159 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H * CVE-2025-55159 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-58160 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2025-58160 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed. Description: This update for glycin-loaders fixes the following issues - CVE-2025-55159: slab: incorrect bounds check in get_disjoint_mut function can lead to undefined behavior or potential crash due to out-of-bounds access (bsc#1248035). - CVE-2025-58160: tracing-subscriber: Tracing log pollution (bsc#1249010). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-999=1 Package List: - openSUSE Leap 16.0: glycin-loaders-1.2.1-160000.3.1 glycin-loaders-devel-1.2.1-160000.3.1 libglycin-1-0-1.2.1-160000.3.1 libglycin-gtk4-1-0-1.2.1-160000.3.1 typelib-1_0-GlyGtk4_1-1.2.1-160000.3.1 typelib-1_0-Gly_1-1.2.1-160000.3.1 References: * https://www.suse.com/security/cve/CVE-2025-55159.html * https://www.suse.com/security/cve/CVE-2025-58160.html . A security update for glycin-loaders addresses two vulnerabilities and includes bug fixes foropenSUSE Leap 16.0.. opensuse glycin-loaders bug fixes security update. . Severity: moderate. LinuxSecurity.com Team
This update contains builds from a mini-mass-rebuild for Rust applications (and some C-style libraries). Rebuilding with the Rust 1.78 toolchain should fix incomplete debug information for the Rust standard library (and the resulting low-quality stack traces). Additionally, builds will have picked up fixes for some minor low-priority. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-ce2936b568 2024-05-26 01:25:15.719720 -------------------------------------------------------------------------------- Name : glycin-loaders Product : Fedora 40 Version : 1.0.1 Release : 4.fc40 URL : Summary : Sandboxed image rendering Description : Sandboxed and extendable image decoding. -------------------------------------------------------------------------------- Update Information: This update contains builds from a mini-mass-rebuild for Rust applications (and some C-style libraries). Rebuilding with the Rust 1.78 toolchain should fix incomplete debug information for the Rust standard library (and the resulting low-quality stack traces). Additionally, builds will have picked up fixes for some minor low-priority security and / or safety fixes in crate dependencies that had not yet been handled via a separate (targeted) rebuild: h2 v0.3.26+ (denial-of-service): https://rustsec.org/advisories/RUSTSEC-2024-0332.html glib v0.19.4+ and backports (UB): core/pull/1343 hashbrown v0.14.5+ (UB): https://github.com/rust-lang/hashbrown/pull/511 rustls v0.22.4+, v0.21.11+ (denial-of-service): https://rustsec.org/advisories/RUSTSEC-2024-0336.html -------------------------------------------------------------------------------- ChangeLog: * Fri May 24 2024 Fabio Valentini - 1.0.1-4 - Rebuild with Rust 1.78 to fix incomplete debuginfo and backtraces * Tue Apr 9 2024 Yaakov Selkowitz - 1.0.1-3 - Disable jpegxl loader in RHEL builds * Thu Apr 4 2024 Yaakov Selkowitz - 1.0.1-2 - Add librarydependencies -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-ce2936b568' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.