Adding patchinfo patchinfo.20240821152649764580.269002615871826

This commit is contained in:
Adrian Schröter 2024-09-03 14:04:07 +02:00
parent fd130a863c
commit b42933619f
3 changed files with 18 additions and 2 deletions

2
.gitmodules vendored
View File

@ -672,7 +672,7 @@
url = ../../pool/glib-networking
[submodule "glib2"]
path = glib2
url = ../../pool/glib2
url = ../../ALP-pool/glib2
[submodule "glibc"]
path = glibc
url = ../../ALP-pool/glibc

2
glib2

@ -1 +1 @@
Subproject commit d1f8aeca547afa3dd031f3ef214784a285ff6ed6
Subproject commit 90313a7f8bda746907b5fc2f468c8e118d6c429f

View File

@ -0,0 +1,16 @@
<patchinfo>
<!-- generated from request(s) 341779 -->
<issue tracker="bnc" id="1224044">VUL-0: CVE-2024-34397: glib2: signal subscriptions are vulnerable to unicast spoofing</issue>
<issue tracker="cve" id="2024-34397"/>
<packager>mgorse</packager>
<rating>low</rating>
<category>security</category>
<summary>Security update for glib2</summary>
<description>This update for glib2 fixes the following issues:
- Fixed a possible use after free regression introduced by CVE-2024-34397 patch (bsc#1224044).
</description>
<package>glib2</package>
<package>glib2:doc</package>
<seperate_build_arch/>
</patchinfo>