Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 38 articles for you...
100
security advisoryupdatemoderate severitySUSE: 2024:2621-1 Moderate: Fix for Symlink Security Vulnerability
* bsc#861514 Cross-References: * CVE-2014-1833 . # Security update for devscripts Announcement ID: SUSE-SU-2024:2621-1 Rating: moderate References: * bsc#861514 Cross-References: * CVE-2014-1833 CVSS scores: * CVE-2014-1833 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Software Development Kit 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for devscripts fixes the following issues: * CVE-2014-1833: Fixed symlink directory traversal in uupdate (bsc#861514) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Software Development Kit 12 SP5 zypper in -t patch SUSE-SLE-SDK-12-SP5-2024-2621=1 ## Package List: * SUSE Linux Enterprise Software Development Kit 12 SP5 (noarch) * checkbashisms-2.12.6-5.3.1 ## References: * https://www.suse.com/security/cve/CVE-2014-1833.html * https://bugzilla.suse.com/show_bug.cgi?id=861514 . A security enhancement for devscripts resolves a moderate-risk concern involving symlink directory traversal.. Update For Devscripts,SUSE Security Advisory,Moderate Severity Fix,SUSE Linux Enterprise Advisory. . LinuxSecurity.com Team
Jul 30, 2024
SuSE
100
security advisorycriticalimportantSUSE: 2024:0820-1 Important: Python310 Symlink Issue Severity Critical
* bsc#1219666 Cross-References: * CVE-2023-6597 . # Security update for python310 Announcement ID: SUSE-SU-2024:0820-1 Rating: important References: * bsc#1219666 Cross-References: * CVE-2023-6597 CVSS scores: * CVE-2023-6597 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for python310 fixes the following issues: * CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-820=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-820=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-820=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-820=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-820=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-820=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-820=1 ## Package List: *openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python310-dbm-debuginfo-3.10.13-150400.4.42.1 * python310-curses-3.10.13-150400.4.42.1 * python310-debugsource-3.10.13-150400.4.42.1 * python310-testsuite-3.10.13-150400.4.42.1 * libpython3_10-1_0-3.10.13-150400.4.42.1 * libpython3_10-1_0-debuginfo-3.10.13-150400.4.42.1 * python310-core-debugsource-3.10.13-150400.4.42.1 * python310-debuginfo-3.10.13-150400.4.42.1 * python310-devel-3.10.13-150400.4.42.1 * python310-doc-devhelp-3.10.13-150400.4.42.1 * python310-base-3.10.13-150400.4.42.1 * python310-testsuite-debuginfo-3.10.13-150400.4.42.1 * python310-tools-3.10.13-150400.4.42.1 * python310-idle-3.10.13-150400.4.42.1 * python310-3.10.13-150400.4.42.1 * python310-curses-debuginfo-3.10.13-150400.4.42.1 * python310-dbm-3.10.13-150400.4.42.1 * python310-doc-3.10.13-150400.4.42.1 * python310-base-debuginfo-3.10.13-150400.4.42.1 * python310-tk-3.10.13-150400.4.42.1 * python310-tk-debuginfo-3.10.13-150400.4.42.1 * openSUSE Leap 15.4 (x86_64) * python310-base-32bit-debuginfo-3.10.13-150400.4.42.1 * libpython3_10-1_0-32bit-debuginfo-3.10.13-150400.4.42.1 * python310-base-32bit-3.10.13-150400.4.42.1 * python310-32bit-3.10.13-150400.4.42.1 * python310-32bit-debuginfo-3.10.13-150400.4.42.1 * libpython3_10-1_0-32bit-3.10.13-150400.4.42.1 * openSUSE Leap 15.4 (aarch64_ilp32) * python310-base-64bit-3.10.13-150400.4.42.1 * libpython3_10-1_0-64bit-debuginfo-3.10.13-150400.4.42.1 * python310-64bit-3.10.13-150400.4.42.1 * python310-base-64bit-debuginfo-3.10.13-150400.4.42.1 * python310-64bit-debuginfo-3.10.13-150400.4.42.1 * libpython3_10-1_0-64bit-3.10.13-150400.4.42.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python310-dbm-debuginfo-3.10.13-150400.4.42.1 * python310-curses-3.10.13-150400.4.42.1 * python310-debugsource-3.10.13-150400.4.42.1 * python310-testsuite-3.10.13-150400.4.42.1 *libpython3_10-1_0-3.10.13-150400.4.42.1 * libpython3_10-1_0-debuginfo-3.10.13-150400.4.42.1 * python310-core-debugsource-3.10.13-150400.4.42.1 * python310-debuginfo-3.10.13-150400.4.42.1 * python310-devel-3.10.13-150400.4.42.1 * python310-doc-devhelp-3.10.13-150400.4.42.1 * python310-base-3.10.13-150400.4.42.1 * python310-testsuite-debuginfo-3.10.13-150400.4.42.1 * python310-tools-3.10.13-150400.4.42.1 * python310-idle-3.10.13-150400.4.42.1 * python310-3.10.13-150400.4.42.1 * python310-curses-debuginfo-3.10.13-150400.4.42.1 * python310-doc-3.10.13-150400.4.42.1 * python310-dbm-3.10.13-150400.4.42.1 * python310-base-debuginfo-3.10.13-150400.4.42.1 * python310-tk-3.10.13-150400.4.42.1 * python310-tk-debuginfo-3.10.13-150400.4.42.1 * openSUSE Leap 15.5 (x86_64) * python310-base-32bit-debuginfo-3.10.13-150400.4.42.1 * libpython3_10-1_0-32bit-debuginfo-3.10.13-150400.4.42.1 * python310-base-32bit-3.10.13-150400.4.42.1 * python310-32bit-3.10.13-150400.4.42.1 * python310-32bit-debuginfo-3.10.13-150400.4.42.1 * libpython3_10-1_0-32bit-3.10.13-150400.4.42.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python310-dbm-debuginfo-3.10.13-150400.4.42.1 * python310-curses-3.10.13-150400.4.42.1 * python310-debuginfo-3.10.13-150400.4.42.1 * python310-debugsource-3.10.13-150400.4.42.1 * python310-devel-3.10.13-150400.4.42.1 * python310-tk-3.10.13-150400.4.42.1 * python310-tools-3.10.13-150400.4.42.1 * python310-idle-3.10.13-150400.4.42.1 * python310-tk-debuginfo-3.10.13-150400.4.42.1 * python310-3.10.13-150400.4.42.1 * libpython3_10-1_0-3.10.13-150400.4.42.1 * libpython3_10-1_0-debuginfo-3.10.13-150400.4.42.1 * python310-curses-debuginfo-3.10.13-150400.4.42.1 * python310-base-3.10.13-150400.4.42.1 * python310-core-debugsource-3.10.13-150400.4.42.1 * python310-dbm-3.10.13-150400.4.42.1 *python310-base-debuginfo-3.10.13-150400.4.42.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * python310-dbm-debuginfo-3.10.13-150400.4.42.1 * python310-curses-3.10.13-150400.4.42.1 * python310-debuginfo-3.10.13-150400.4.42.1 * python310-debugsource-3.10.13-150400.4.42.1 * python310-devel-3.10.13-150400.4.42.1 * python310-tk-3.10.13-150400.4.42.1 * python310-tools-3.10.13-150400.4.42.1 * python310-idle-3.10.13-150400.4.42.1 * python310-tk-debuginfo-3.10.13-150400.4.42.1 * python310-3.10.13-150400.4.42.1 * libpython3_10-1_0-3.10.13-150400.4.42.1 * libpython3_10-1_0-debuginfo-3.10.13-150400.4.42.1 * python310-curses-debuginfo-3.10.13-150400.4.42.1 * python310-base-3.10.13-150400.4.42.1 * python310-core-debugsource-3.10.13-150400.4.42.1 * python310-dbm-3.10.13-150400.4.42.1 * python310-base-debuginfo-3.10.13-150400.4.42.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * python310-dbm-debuginfo-3.10.13-150400.4.42.1 * python310-curses-3.10.13-150400.4.42.1 * python310-debuginfo-3.10.13-150400.4.42.1 * python310-debugsource-3.10.13-150400.4.42.1 * python310-devel-3.10.13-150400.4.42.1 * python310-tk-3.10.13-150400.4.42.1 * python310-tools-3.10.13-150400.4.42.1 * python310-idle-3.10.13-150400.4.42.1 * python310-tk-debuginfo-3.10.13-150400.4.42.1 * python310-3.10.13-150400.4.42.1 * libpython3_10-1_0-3.10.13-150400.4.42.1 * libpython3_10-1_0-debuginfo-3.10.13-150400.4.42.1 * python310-curses-debuginfo-3.10.13-150400.4.42.1 * python310-base-3.10.13-150400.4.42.1 * python310-core-debugsource-3.10.13-150400.4.42.1 * python310-dbm-3.10.13-150400.4.42.1 * python310-base-debuginfo-3.10.13-150400.4.42.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * python310-dbm-debuginfo-3.10.13-150400.4.42.1 * python310-curses-3.10.13-150400.4.42.1 * python310-debuginfo-3.10.13-150400.4.42.1 *python310-debugsource-3.10.13-150400.4.42.1 * python310-devel-3.10.13-150400.4.42.1 * python310-tk-3.10.13-150400.4.42.1 * python310-tools-3.10.13-150400.4.42.1 * python310-idle-3.10.13-150400.4.42.1 * python310-tk-debuginfo-3.10.13-150400.4.42.1 * python310-3.10.13-150400.4.42.1 * libpython3_10-1_0-3.10.13-150400.4.42.1 * libpython3_10-1_0-debuginfo-3.10.13-150400.4.42.1 * python310-curses-debuginfo-3.10.13-150400.4.42.1 * python310-base-3.10.13-150400.4.42.1 * python310-core-debugsource-3.10.13-150400.4.42.1 * python310-dbm-3.10.13-150400.4.42.1 * python310-base-debuginfo-3.10.13-150400.4.42.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * python310-dbm-debuginfo-3.10.13-150400.4.42.1 * python310-curses-3.10.13-150400.4.42.1 * python310-debuginfo-3.10.13-150400.4.42.1 * python310-debugsource-3.10.13-150400.4.42.1 * python310-devel-3.10.13-150400.4.42.1 * python310-tk-3.10.13-150400.4.42.1 * python310-tools-3.10.13-150400.4.42.1 * python310-idle-3.10.13-150400.4.42.1 * python310-tk-debuginfo-3.10.13-150400.4.42.1 * python310-3.10.13-150400.4.42.1 * libpython3_10-1_0-3.10.13-150400.4.42.1 * libpython3_10-1_0-debuginfo-3.10.13-150400.4.42.1 * python310-curses-debuginfo-3.10.13-150400.4.42.1 * python310-base-3.10.13-150400.4.42.1 * python310-core-debugsource-3.10.13-150400.4.42.1 * python310-dbm-3.10.13-150400.4.42.1 * python310-base-debuginfo-3.10.13-150400.4.42.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6597.html * https://bugzilla.suse.com/show_bug.cgi?id=1219666 . Critical patch released for python310 tackles significant symlink vulnerability on SUSE platforms, promoting reliability and protection.. python310 update, SUSE security, openSUSE patch, symlink issue, important patch. . Severity: Important. LinuxSecurity.com Team
Mar 08, 2024
•Important
SuSE
100
security advisorysoftware updateimportantSUSE: 2024:0785-1 Important: Python3 TLS Bypass And Symlink Flaw
* bsc#1214692 * bsc#1219666 Cross-References: * CVE-2023-40217 . # Security update for python3 Announcement ID: SUSE-SU-2024:0785-1 Rating: important References: * bsc#1214692 * bsc#1219666 Cross-References: * CVE-2023-40217 * CVE-2023-6597 CVSS scores: * CVE-2023-40217 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2023-40217 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2023-6597 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP2 * SUSE Linux Enterprise High Performance Computing 12 SP3 * SUSE Linux Enterprise High Performance Computing 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 * SUSE Linux Enterprise Server 12 SP1 * SUSE Linux Enterprise Server 12 SP2 * SUSE Linux Enterprise Server 12 SP3 * SUSE Linux Enterprise Server 12 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 * SUSE Linux Enterprise Server for SAP Applications 12 SP1 * SUSE Linux Enterprise Server for SAP Applications 12 SP2 * SUSE Linux Enterprise Server for SAP Applications 12 SP3 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Software Development Kit 12 SP5 * Web and Scripting Module 12 An update that solves two vulnerabilities can now be installed. ## Description: This update for python3 fixes the following issues: * CVE-2023-40217: Fixed bypass TLS handshake on closed sockets (bsc#1214692). * CVE-2023-6597: Fixed symlink bug in cleanup (bsc#1219666). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Web and Scripting Module 12 zypper in -t patchSUSE-SLE-Module-Web-Scripting-12-2024-785=1 * SUSE Linux Enterprise Software Development Kit 12 SP5 zypper in -t patch SUSE-SLE-SDK-12-SP5-2024-785=1 * SUSE Linux Enterprise High Performance Computing 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-785=1 * SUSE Linux Enterprise Server 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-785=1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-785=1 ## Package List: * Web and Scripting Module 12 (aarch64 ppc64le s390x x86_64) * libpython3_4m1_0-3.4.10-25.124.1 * python3-curses-3.4.10-25.124.1 * libpython3_4m1_0-debuginfo-3.4.10-25.124.1 * python3-base-3.4.10-25.124.1 * python3-base-debugsource-3.4.10-25.124.1 * python3-base-debuginfo-3.4.10-25.124.1 * python3-3.4.10-25.124.1 * python3-debugsource-3.4.10-25.124.1 * python3-debuginfo-3.4.10-25.124.1 * SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x x86_64) * python3-devel-3.4.10-25.124.1 * python3-base-debugsource-3.4.10-25.124.1 * python3-base-debuginfo-3.4.10-25.124.1 * python3-dbm-3.4.10-25.124.1 * python3-debugsource-3.4.10-25.124.1 * python3-debuginfo-3.4.10-25.124.1 * python3-dbm-debuginfo-3.4.10-25.124.1 * SUSE Linux Enterprise Software Development Kit 12 SP5 (ppc64le s390x x86_64) * python3-devel-debuginfo-3.4.10-25.124.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64) * libpython3_4m1_0-3.4.10-25.124.1 * python3-curses-3.4.10-25.124.1 * libpython3_4m1_0-debuginfo-3.4.10-25.124.1 * python3-curses-debuginfo-3.4.10-25.124.1 * python3-base-3.4.10-25.124.1 * python3-base-debugsource-3.4.10-25.124.1 * python3-devel-3.4.10-25.124.1 * python3-base-debuginfo-3.4.10-25.124.1 * python3-3.4.10-25.124.1 * python3-debugsource-3.4.10-25.124.1 * python3-debuginfo-3.4.10-25.124.1 * python3-tk-3.4.10-25.124.1 *python3-tk-debuginfo-3.4.10-25.124.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (x86_64) * python3-devel-debuginfo-3.4.10-25.124.1 * libpython3_4m1_0-debuginfo-32bit-3.4.10-25.124.1 * libpython3_4m1_0-32bit-3.4.10-25.124.1 * python3-base-debuginfo-32bit-3.4.10-25.124.1 * SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64) * libpython3_4m1_0-3.4.10-25.124.1 * python3-curses-3.4.10-25.124.1 * libpython3_4m1_0-debuginfo-3.4.10-25.124.1 * python3-curses-debuginfo-3.4.10-25.124.1 * python3-base-3.4.10-25.124.1 * python3-base-debugsource-3.4.10-25.124.1 * python3-devel-3.4.10-25.124.1 * python3-base-debuginfo-3.4.10-25.124.1 * python3-3.4.10-25.124.1 * python3-debugsource-3.4.10-25.124.1 * python3-debuginfo-3.4.10-25.124.1 * python3-tk-3.4.10-25.124.1 * python3-tk-debuginfo-3.4.10-25.124.1 * SUSE Linux Enterprise Server 12 SP5 (ppc64le s390x x86_64) * python3-devel-debuginfo-3.4.10-25.124.1 * SUSE Linux Enterprise Server 12 SP5 (s390x x86_64) * libpython3_4m1_0-debuginfo-32bit-3.4.10-25.124.1 * libpython3_4m1_0-32bit-3.4.10-25.124.1 * python3-base-debuginfo-32bit-3.4.10-25.124.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64) * libpython3_4m1_0-3.4.10-25.124.1 * python3-curses-3.4.10-25.124.1 * libpython3_4m1_0-debuginfo-3.4.10-25.124.1 * python3-curses-debuginfo-3.4.10-25.124.1 * python3-base-3.4.10-25.124.1 * python3-base-debugsource-3.4.10-25.124.1 * python3-devel-3.4.10-25.124.1 * python3-base-debuginfo-3.4.10-25.124.1 * python3-3.4.10-25.124.1 * python3-debugsource-3.4.10-25.124.1 * python3-debuginfo-3.4.10-25.124.1 * python3-devel-debuginfo-3.4.10-25.124.1 * python3-tk-debuginfo-3.4.10-25.124.1 * python3-tk-3.4.10-25.124.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (x86_64) * libpython3_4m1_0-debuginfo-32bit-3.4.10-25.124.1 * libpython3_4m1_0-32bit-3.4.10-25.124.1 *python3-base-debuginfo-32bit-3.4.10-25.124.1 ## References: * https://www.suse.com/security/cve/CVE-2023-40217.html * https://www.suse.com/security/cve/CVE-2023-6597.html * https://bugzilla.suse.com/show_bug.cgi?id=1214692 * https://bugzilla.suse.com/show_bug.cgi?id=1219666 . Important Python 3 security release for SUSE tackling vulnerabilities related to TLS handshake evasion and symlink attack flaws.. python3 update,SUSE patch,security advisory,cybersecurity update,SUSE vulnerabilities. . Severity: Important. LinuxSecurity.com Team
Mar 06, 2024
•Important
SuSE
202
security advisoryupdatesoftware patchopenSUSE 15.4: SUSE-SU-2023:0174-1 Low: glib2 Symlink Issue
This update for glib2 fixes the following issues: CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files (bsc#1183533).. # Security update for glib2 Announcement ID: SUSE-SU-2023:0174-1 Rating: low References: * bsc#1183533 Cross-References: * CVE-2021-28153 CVSS scores: * CVE-2021-28153 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2021-28153 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Enterprise Storage 7 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Real Time 15 SP3 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that solves one vulnerability can now be installed. ## Description: This update for glib2 fixes the following issues: * CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files (bsc#1183533). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-174=1 * SUSE Linux Enterprise High Performance Computing 15 SP2LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-174=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-174=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-174=1 * SUSE Linux Enterprise Real Time 15 SP3 zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-174=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-174=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-174=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-174=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-174=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-174=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-174=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-174=1 * SUSE Enterprise Storage 7 zypper in -t patch SUSE-Storage-7-2023-174=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-174=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-174=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-174=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * glib2-tests-debuginfo-2.62.6-150200.3.10.1 * glib2-tests-2.62.6-150200.3.10.1 * libgio-fam-debuginfo-2.62.6-150200.3.10.1 * libgio-fam-2.62.6-150200.3.10.1 * openSUSE Leap 15.4 (x86_64) * libgio-fam-32bit-2.62.6-150200.3.10.1 * libgio-fam-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE LinuxEnterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 *libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 *libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Real Time 15 SP3 (x86_64) * glib2-tools-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Real Time 15 SP3 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 *libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 *libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Manager Proxy 4.2 (x86_64) * glib2-tools-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 *libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * SUSE Manager Proxy 4.2 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * glib2-tools-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * SUSE Manager Retail Branch Server 4.2 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 *glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Manager Server 4.2 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Manager Server 4.2 (x86_64) * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Enterprise Storage 7.1 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Enterprise Storage 7.1 (x86_64) *libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Enterprise Storage 7 (aarch64 x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Enterprise Storage 7 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Enterprise Storage 7 (x86_64) * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 *libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 ## References: * https://www.suse.com/security/cve/CVE-2021-28153.html * https://bugzilla.suse.com/show_bug.cgi?id=1183533 . SUSE announced a low-severity security update for glib2, addressing an issue related to incorrect symlink target creation.. SUSE Update, glib2 Security, openSUSE Advisory, Symlink Issue. . LinuxSecurity.com Team
Feb 27, 2024
OpenSUSE
100
security advisorysoftware updatelow severitySUSE Linux: 2023:0174-1 Low Severity: glib2 Symlink Issue
* bsc#1183533 Cross-References: * CVE-2021-28153 . # Security update for glib2 Announcement ID: SUSE-SU-2023:0174-1 Rating: low References: * bsc#1183533 Cross-References: * CVE-2021-28153 CVSS scores: * CVE-2021-28153 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2021-28153 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Enterprise Storage 7 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Real Time 15 SP3 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that solves one vulnerability can now be installed. ## Description: This update for glib2 fixes the following issues: * CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files (bsc#1183533). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-174=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-174=1 * SUSE Linux Enterprise HighPerformance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-174=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-174=1 * SUSE Linux Enterprise Real Time 15 SP3 zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-174=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-174=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-174=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-174=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-174=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-174=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-174=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-174=1 * SUSE Enterprise Storage 7 zypper in -t patch SUSE-Storage-7-2023-174=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-174=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-174=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-174=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * glib2-tests-debuginfo-2.62.6-150200.3.10.1 * glib2-tests-2.62.6-150200.3.10.1 * libgio-fam-debuginfo-2.62.6-150200.3.10.1 * libgio-fam-2.62.6-150200.3.10.1 * openSUSE Leap 15.4 (x86_64) * libgio-fam-32bit-2.62.6-150200.3.10.1 * libgio-fam-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) *libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 *glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 *libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Real Time 15 SP3 (x86_64) * glib2-tools-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Real Time 15 SP3 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 *glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 *libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Manager Proxy 4.2 (x86_64) * glib2-tools-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 *libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * SUSE Manager Proxy 4.2 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * glib2-tools-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * SUSE Manager Retail Branch Server 4.2 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 *glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Manager Server 4.2 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Manager Server 4.2 (x86_64) * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Enterprise Storage 7.1 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Enterprise Storage 7.1 (x86_64) *libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Enterprise Storage 7 (aarch64 x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgthread-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * glib2-devel-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * glib2-devel-debuginfo-2.62.6-150200.3.10.1 * SUSE Enterprise Storage 7 (noarch) * glib2-lang-2.62.6-150200.3.10.1 * SUSE Enterprise Storage 7 (x86_64) * libglib-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-2.62.6-150200.3.10.1 * libglib-2_0-0-32bit-2.62.6-150200.3.10.1 * libgmodule-2_0-0-32bit-2.62.6-150200.3.10.1 * libgio-2_0-0-32bit-2.62.6-150200.3.10.1 * libgobject-2_0-0-32bit-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 *libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libgobject-2_0-0-debuginfo-2.62.6-150200.3.10.1 * glib2-tools-2.62.6-150200.3.10.1 * libgmodule-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-2.62.6-150200.3.10.1 * glib2-debugsource-2.62.6-150200.3.10.1 * libgmodule-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libglib-2_0-0-debuginfo-2.62.6-150200.3.10.1 * libgobject-2_0-0-2.62.6-150200.3.10.1 * libgio-2_0-0-2.62.6-150200.3.10.1 * glib2-tools-debuginfo-2.62.6-150200.3.10.1 ## References: * https://www.suse.com/security/cve/CVE-2021-28153.html * https://bugzilla.suse.com/show_bug.cgi?id=1183533 . Discover the latest low-impact security patch for glib2 in SUSE, which resolves a vulnerability related to symbolic link destinations.. SUSE Security Update, glib2 Symlink Issue, Glib2 Software Update. . Severity: Low. LinuxSecurity.com Team
Feb 27, 2024
•Low
SuSE
217
security advisorysecurity patchsymlink issueOracle Linux 9 ELSA-2024-0463 Moderate: RPM Symlink Concerns
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2024-0463 https://linux.oracle.com/errata/ELSA-2024-0463.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: python3-rpm-4.16.1.3-27.el9_3.x86_64.rpm rpm-4.16.1.3-27.el9_3.x86_64.rpm rpm-apidocs-4.16.1.3-27.el9_3.noarch.rpm rpm-build-4.16.1.3-27.el9_3.x86_64.rpm rpm-build-libs-4.16.1.3-27.el9_3.i686.rpm rpm-build-libs-4.16.1.3-27.el9_3.x86_64.rpm rpm-cron-4.16.1.3-27.el9_3.noarch.rpm rpm-devel-4.16.1.3-27.el9_3.i686.rpm rpm-devel-4.16.1.3-27.el9_3.x86_64.rpm rpm-libs-4.16.1.3-27.el9_3.i686.rpm rpm-libs-4.16.1.3-27.el9_3.x86_64.rpm rpm-plugin-audit-4.16.1.3-27.el9_3.x86_64.rpm rpm-plugin-fapolicyd-4.16.1.3-27.el9_3.x86_64.rpm rpm-plugin-ima-4.16.1.3-27.el9_3.x86_64.rpm rpm-plugin-selinux-4.16.1.3-27.el9_3.x86_64.rpm rpm-plugin-syslog-4.16.1.3-27.el9_3.x86_64.rpm rpm-plugin-systemd-inhibit-4.16.1.3-27.el9_3.x86_64.rpm rpm-sign-4.16.1.3-27.el9_3.x86_64.rpm rpm-sign-libs-4.16.1.3-27.el9_3.i686.rpm rpm-sign-libs-4.16.1.3-27.el9_3.x86_64.rpm aarch64: python3-rpm-4.16.1.3-27.el9_3.aarch64.rpm rpm-4.16.1.3-27.el9_3.aarch64.rpm rpm-apidocs-4.16.1.3-27.el9_3.noarch.rpm rpm-build-4.16.1.3-27.el9_3.aarch64.rpm rpm-build-libs-4.16.1.3-27.el9_3.aarch64.rpm rpm-cron-4.16.1.3-27.el9_3.noarch.rpm rpm-devel-4.16.1.3-27.el9_3.aarch64.rpm rpm-libs-4.16.1.3-27.el9_3.aarch64.rpm rpm-plugin-audit-4.16.1.3-27.el9_3.aarch64.rpm rpm-plugin-fapolicyd-4.16.1.3-27.el9_3.aarch64.rpm rpm-plugin-ima-4.16.1.3-27.el9_3.aarch64.rpm rpm-plugin-selinux-4.16.1.3-27.el9_3.aarch64.rpm rpm-plugin-syslog-4.16.1.3-27.el9_3.aarch64.rpm rpm-plugin-systemd-inhibit-4.16.1.3-27.el9_3.aarch64.rpm rpm-sign-4.16.1.3-27.el9_3.aarch64.rpm rpm-sign-libs-4.16.1.3-27.el9_3.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol9/SRPMS-updates//rpm-4.16.1.3-27.el9_3.src.rpm Related CVEs: CVE-2021-35937 CVE-2021-35938 CVE-2021-35939 Description ofchanges: [4.16.1.3-27] - TOCTOU race in checks for unsafe symlinks (CVE-2021-35937) - races with chown/chmod/capabilities calls during installation (CVE-2021-35938) - checks for unsafe symlinks are not performed for intermediary directories (CVE-2021-35939) _______________________________________________ El-errata mailing list
Jan 26, 2024
Oracle
89
security advisoryFedoradirectory traversalFedora 37: FEDORA-2022-a36ba48049 Moderate: Binwalk Symlink Issue
Security fix for CVE-2021-4287. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-a36ba48049 2023-01-05 01:16:36.900007 --------------------------------------------------------------------------------Name : binwalk Product : Fedora 37 Version : 2.3.3 Release : 1.fc37 URL : https://github.com/ReFirmLabs/binwalk Summary : Firmware analysis tool Description : Binwalk is a tool for searching a given binary image for embedded files and executable code. Specifically, it is designed for identifying files and code embedded inside of firmware images. Binwalk uses the python-magic library, so it is compatible with magic signatures created for the Unix file utility. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2021-4287 --------------------------------------------------------------------------------ChangeLog: * Tue Dec 27 2022 Scott Talbert - 2.3.3-1 - Update to new upstream release 2.3.3 (#2003337 #2156566) --------------------------------------------------------------------------------References: [ 1 ] Bug #2156565 - CVE-2021-4287 binwalk: symlink directory traversal vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=2156565 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-a36ba48049' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 05, 2023
Fedora
89
security advisoryFedorasambaFedora 37: 2022-8a9a568dbe Critical Samba Symlink Fix for 4.17.2
Update to version 4.17.2 to address CVE-2022-3592. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-8a9a568dbe 2022-11-10 22:04:44.634036 --------------------------------------------------------------------------------Name : samba Product : Fedora 37 Version : 4.17.2 Release : 2.fc37 URL : Summary : Server and Client software to interoperate with Windows machines Description : Samba is the standard Windows interoperability suite of programs for Linux and Unix. --------------------------------------------------------------------------------Update Information: Update to version 4.17.2 to address CVE-2022-3592 --------------------------------------------------------------------------------ChangeLog: * Tue Oct 25 2022 Andreas Schneider - 4.17.2-1 - Update to version 4.17.2 - Fix CVE-2022-3592: A malicious client can use a symlink to escape the exported * Mon Oct 24 2022 Andreas Schneider - 4.17.1-2 - Add missing dependency for wbinfo used by ctdb scripts --------------------------------------------------------------------------------References: [ 1 ] Bug #2137777 - CVE-2022-3437 samba: heap buffer overflow in GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2137777 [ 2 ] Bug #2137778 - CVE-2022-3592 samba: wide links protection broken [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2137778 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-8a9a568dbe' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Nov 10, 2022
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!