Mageia alert MGASA-2018-0405 (glib2.0)

From:
             
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
             
 
updates-announce@ml.mageia.org 
Subject:
             
 
[updates-announce] MGASA-2018-0405: Updated glib2.0 packages fix security vulnerabilities 
Date:
             
 
Fri, 19 Oct 2018 20:01:38 +0200
Message-ID:
             
 
<20181019180138.1D025A0017@duvel.mageia.org>
MGASA-2018-0405 - Updated glib2.0 packages fix security vulnerabilities

Publication date: 19 Oct 2018
URL: https://advisories.mageia.org/MGASA-2018-0405.html
Type: security
Affected Mageia releases: 6
CVE: CVE-2018-16428,
     CVE-2018-16429

Description:
The updated glib2.0 packages fix security vulnerabilities:

In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c
has a NULL pointer dereference (CVE-2018-16428).

GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in
g_markup_parse_context_parse() in gmarkup.c, related to utf8_str()
(CVE-2018-16429).

References:
- https://bugs.mageia.org/show_bug.cgi?id=23665
- https://usn.ubuntu.com/3767-1/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1...

SRPMS:
- 6/core/glib2.0-2.54.3-1.2.mga6