VYPR

rpm package

suse/glib2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1

pkg:rpm/suse/glib2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Vulnerabilities (2)

  • CVE-2019-13012Jun 28, 2019
    affected < 2.54.3-4.18.1fixed 2.54.3-4.18.1

    The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL,

  • CVE-2019-12450May 29, 2019
    affected < 2.54.3-4.15.1fixed 2.54.3-4.15.1

    file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.