VYPR

rpm package

suse/glib2&distro=SUSE Linux Enterprise Server 12 SP3-LTSS

pkg:rpm/suse/glib2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS

Vulnerabilities (3)

  • CVE-2021-27219Feb 15, 2021
    affected < 2.48.2-12.22.1fixed 2.48.2-12.22.1

    An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.

  • CVE-2021-27218Feb 15, 2021
    affected < 2.48.2-12.22.1fixed 2.48.2-12.22.1

    An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.

  • CVE-2019-13012Jun 28, 2019
    affected < 2.48.2-12.15.1fixed 2.48.2-12.15.1

    The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, length, NULL, FALSE, G_FILE_CREATE_REPLACE_DESTINATION, NULL,