vulnerability

SUSE: CVE-2021-3800: SUSE Linux Security Advisory

Severity
5
CVSS
(AV:L/AC:M/Au:N/C:C/I:N/A:N)
Published
Nov 16, 2021
Added
Mar 17, 2022
Modified
Jan 28, 2025

Description

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.

Solution(s)

suse-upgrade-glib2-develsuse-upgrade-glib2-devel-staticsuse-upgrade-glib2-langsuse-upgrade-glib2-toolssuse-upgrade-libgio-2_0-0suse-upgrade-libgio-2_0-0-32bitsuse-upgrade-libgio-famsuse-upgrade-libglib-2_0-0suse-upgrade-libglib-2_0-0-32bitsuse-upgrade-libgmodule-2_0-0suse-upgrade-libgmodule-2_0-0-32bitsuse-upgrade-libgobject-2_0-0suse-upgrade-libgobject-2_0-0-32bitsuse-upgrade-libgthread-2_0-0suse-upgrade-libgthread-2_0-0-32bit
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.