CVE-2018-16429

GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str().

GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str().

The updated glib2.0 packages fix security vulnerabilities:

In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference (CVE-2018-16428).

GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str() (CVE-2018-16429).

These are all security issues fixed in the gio-branding-upstream-2.68.4-2.2 package on the GA media of openSUSE Tumbleweed.

This update for glib2 fixes the following issues:

Security issues fixed:

• CVE-2018-16428: Do not do a NULL pointer dereference (crash). Avoid that, at the cost of introducing a new translatable error message (bsc#1107121).
• CVE-2018-16429: Fixed out-of-bounds read vulnerability ing_markup_parse_context_parse() (bsc#1107116).

Non-security issue fixed:

• various GVariant parsing issues have been resolved (bsc#1111499)

This update for glib2 fixes the following issues:

Security issues fixed:

• CVE-2018-16429: Fixed out-of-bounds read vulnerability ing_markup_parse_context_parse() (bsc#1107116).
• Fixing potentially exploitable bugs in UTF-8 validation in Variant and DBUS message parsing (bsc#1111499).

This update for glib2 fixes the following issues:

Security issues fixed:

• CVE-2019-12450: Fixed an improper file permission when copy operation takes place (bsc#1137001).
• CVE-2018-16428: Avoid a NULL pointer dereference (bsc#1107121).
• CVE-2018-16429: Fixed out-of-bounds read vulnerability ing_markup_parse_context_parse() (bsc#1107116).
• Some exploitable parser bugs in GVariant and GDBus subsystems were fixed (bsc#1111499).

This update for glib2 provides the following fix:

Security issues fixed:

• CVE-2019-12450: Fixed an improper file permission when copy operation takes place (bsc#1137001).
• CVE-2018-16428: Avoid a null pointer dereference that could crash glib2 users in markup processing (bnc#1107121).
• CVE-2018-16429: Fixed out-of-bounds read vulnerability ing_markup_parse_context_parse() (bsc#1107116).

Non-security issues fixed:

• Install dummy *-mimeapps.list files to prevent dead symlinks. (bsc#1061599)

It was discovered that GLib incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2018-16428)

It was discovered that GLib incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information. (CVE-2018-16429)