Security update for glib2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:4308-1 Final 1 1 2025-11-28T15:38:47Z current 2025-11-28T15:38:47Z 2025-11-28T15:38:47Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for glib2 This update for glib2 fixes the following issues: - CVE-2025-7039: Fixed buffer under-read on glib through glib/gfileutils.c via get_tmp_file() (bsc#1249055) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container containers/ollama:0-2025-4308,Container containers/open-webui:0-2025-4308,Container containers/pytorch:2-nvidia-2025-4308,Container suse/kiosk/firefox-esr:latest-2025-4308,Container suse/kiosk/pulseaudio:latest-2025-4308,Container suse/kiosk/xorg:latest-2025-4308,SUSE-2025-4308,SUSE-SLE-Module-Basesystem-15-SP6-2025-4308,SUSE-SLE-Module-Basesystem-15-SP7-2025-4308,openSUSE-SLE-15.6-2025-4308 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-20254308-1/ Link for SUSE-SU-2025:4308-1 https://lists.suse.com/pipermail/sle-security-updates/2025-November/023438.html E-Mail link for SUSE-SU-2025:4308-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1249055 SUSE Bug 1249055 https://www.suse.com/security/cve/CVE-2025-7039/ SUSE CVE CVE-2025-7039 page Container containers/ollama:0 Container containers/open-webui:0 Container containers/pytorch:2-nvidia Container suse/kiosk/firefox-esr:latest Container suse/kiosk/pulseaudio:latest Container suse/kiosk/xorg:latest SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 openSUSE Leap 15.6 libglib-2_0-0-2.78.6-150600.4.22.1 glib2-tools-2.78.6-150600.4.22.1 libgio-2_0-0-2.78.6-150600.4.22.1 libgmodule-2_0-0-2.78.6-150600.4.22.1 libgobject-2_0-0-2.78.6-150600.4.22.1 libgthread-2_0-0-2.78.6-150600.4.22.1 gio-branding-upstream-2.78.6-150600.4.22.1 glib2-devel-2.78.6-150600.4.22.1 glib2-devel-32bit-2.78.6-150600.4.22.1 glib2-devel-64bit-2.78.6-150600.4.22.1 glib2-devel-static-2.78.6-150600.4.22.1 glib2-doc-2.78.6-150600.4.22.1 glib2-lang-2.78.6-150600.4.22.1 glib2-tests-devel-2.78.6-150600.4.22.1 glib2-tools-32bit-2.78.6-150600.4.22.1 glib2-tools-64bit-2.78.6-150600.4.22.1 libgio-2_0-0-32bit-2.78.6-150600.4.22.1 libgio-2_0-0-64bit-2.78.6-150600.4.22.1 libglib-2_0-0-32bit-2.78.6-150600.4.22.1 libglib-2_0-0-64bit-2.78.6-150600.4.22.1 libgmodule-2_0-0-32bit-2.78.6-150600.4.22.1 libgmodule-2_0-0-64bit-2.78.6-150600.4.22.1 libgobject-2_0-0-32bit-2.78.6-150600.4.22.1 libgobject-2_0-0-64bit-2.78.6-150600.4.22.1 libgthread-2_0-0-32bit-2.78.6-150600.4.22.1 libgthread-2_0-0-64bit-2.78.6-150600.4.22.1 libglib-2_0-0-2.78.6-150600.4.22.1 as a component of Container containers/ollama:0 glib2-tools-2.78.6-150600.4.22.1 as a component of Container containers/open-webui:0 libgio-2_0-0-2.78.6-150600.4.22.1 as a component of Container containers/open-webui:0 libglib-2_0-0-2.78.6-150600.4.22.1 as a component of Container containers/open-webui:0 libgmodule-2_0-0-2.78.6-150600.4.22.1 as a component of Container containers/open-webui:0 libgobject-2_0-0-2.78.6-150600.4.22.1 as a component of Container containers/open-webui:0 glib2-tools-2.78.6-150600.4.22.1 as a component of Container containers/pytorch:2-nvidia libgio-2_0-0-2.78.6-150600.4.22.1 as a component of Container containers/pytorch:2-nvidia libglib-2_0-0-2.78.6-150600.4.22.1 as a component of Container containers/pytorch:2-nvidia libgmodule-2_0-0-2.78.6-150600.4.22.1 as a component of Container containers/pytorch:2-nvidia libgobject-2_0-0-2.78.6-150600.4.22.1 as a component of Container containers/pytorch:2-nvidia glib2-tools-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/firefox-esr:latest libgio-2_0-0-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/firefox-esr:latest libglib-2_0-0-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/firefox-esr:latest libgmodule-2_0-0-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/firefox-esr:latest libgobject-2_0-0-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/firefox-esr:latest libgthread-2_0-0-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/firefox-esr:latest glib2-tools-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/pulseaudio:latest libgio-2_0-0-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/pulseaudio:latest libglib-2_0-0-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/pulseaudio:latest libgmodule-2_0-0-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/pulseaudio:latest libgobject-2_0-0-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/pulseaudio:latest glib2-tools-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/xorg:latest libgio-2_0-0-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/xorg:latest libglib-2_0-0-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/xorg:latest libgmodule-2_0-0-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/xorg:latest libgobject-2_0-0-2.78.6-150600.4.22.1 as a component of Container suse/kiosk/xorg:latest glib2-devel-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 glib2-lang-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 glib2-tools-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libgio-2_0-0-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libgio-2_0-0-32bit-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libglib-2_0-0-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libglib-2_0-0-32bit-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libgmodule-2_0-0-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libgmodule-2_0-0-32bit-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libgobject-2_0-0-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libgobject-2_0-0-32bit-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libgthread-2_0-0-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 glib2-devel-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 glib2-lang-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 glib2-tools-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libgio-2_0-0-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libgio-2_0-0-32bit-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libglib-2_0-0-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libglib-2_0-0-32bit-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libgmodule-2_0-0-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libgmodule-2_0-0-32bit-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libgobject-2_0-0-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libgobject-2_0-0-32bit-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libgthread-2_0-0-2.78.6-150600.4.22.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 gio-branding-upstream-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 glib2-devel-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 glib2-devel-32bit-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 glib2-devel-static-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 glib2-doc-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 glib2-lang-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 glib2-tests-devel-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 glib2-tools-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 glib2-tools-32bit-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 libgio-2_0-0-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 libgio-2_0-0-32bit-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 libglib-2_0-0-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 libglib-2_0-0-32bit-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 libgmodule-2_0-0-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 libgmodule-2_0-0-32bit-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 libgobject-2_0-0-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 libgobject-2_0-0-32bit-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 libgthread-2_0-0-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 libgthread-2_0-0-32bit-2.78.6-150600.4.22.1 as a component of openSUSE Leap 15.6 A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations. CVE-2025-7039 Container containers/ollama:0:libglib-2_0-0-2.78.6-150600.4.22.1 Container containers/open-webui:0:glib2-tools-2.78.6-150600.4.22.1 Container containers/open-webui:0:libgio-2_0-0-2.78.6-150600.4.22.1 Container containers/open-webui:0:libglib-2_0-0-2.78.6-150600.4.22.1 Container containers/open-webui:0:libgmodule-2_0-0-2.78.6-150600.4.22.1 Container containers/open-webui:0:libgobject-2_0-0-2.78.6-150600.4.22.1 Container containers/pytorch:2-nvidia:glib2-tools-2.78.6-150600.4.22.1 Container containers/pytorch:2-nvidia:libgio-2_0-0-2.78.6-150600.4.22.1 Container containers/pytorch:2-nvidia:libglib-2_0-0-2.78.6-150600.4.22.1 Container containers/pytorch:2-nvidia:libgmodule-2_0-0-2.78.6-150600.4.22.1 Container containers/pytorch:2-nvidia:libgobject-2_0-0-2.78.6-150600.4.22.1 Container suse/kiosk/firefox-esr:latest:glib2-tools-2.78.6-150600.4.22.1 Container suse/kiosk/firefox-esr:latest:libgio-2_0-0-2.78.6-150600.4.22.1 Container suse/kiosk/firefox-esr:latest:libglib-2_0-0-2.78.6-150600.4.22.1 Container suse/kiosk/firefox-esr:latest:libgmodule-2_0-0-2.78.6-150600.4.22.1 Container suse/kiosk/firefox-esr:latest:libgobject-2_0-0-2.78.6-150600.4.22.1 Container suse/kiosk/firefox-esr:latest:libgthread-2_0-0-2.78.6-150600.4.22.1 Container suse/kiosk/pulseaudio:latest:glib2-tools-2.78.6-150600.4.22.1 Container suse/kiosk/pulseaudio:latest:libgio-2_0-0-2.78.6-150600.4.22.1 Container suse/kiosk/pulseaudio:latest:libglib-2_0-0-2.78.6-150600.4.22.1 Container suse/kiosk/pulseaudio:latest:libgmodule-2_0-0-2.78.6-150600.4.22.1 Container suse/kiosk/pulseaudio:latest:libgobject-2_0-0-2.78.6-150600.4.22.1 Container suse/kiosk/xorg:latest:glib2-tools-2.78.6-150600.4.22.1 Container suse/kiosk/xorg:latest:libgio-2_0-0-2.78.6-150600.4.22.1 Container suse/kiosk/xorg:latest:libglib-2_0-0-2.78.6-150600.4.22.1 Container suse/kiosk/xorg:latest:libgmodule-2_0-0-2.78.6-150600.4.22.1 Container suse/kiosk/xorg:latest:libgobject-2_0-0-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:glib2-devel-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:glib2-lang-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:glib2-tools-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libgio-2_0-0-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libgio-2_0-0-32bit-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libglib-2_0-0-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libglib-2_0-0-32bit-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libgmodule-2_0-0-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libgmodule-2_0-0-32bit-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libgobject-2_0-0-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libgobject-2_0-0-32bit-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libgthread-2_0-0-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:glib2-devel-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:glib2-lang-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:glib2-tools-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libgio-2_0-0-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libgio-2_0-0-32bit-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libglib-2_0-0-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libglib-2_0-0-32bit-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libgmodule-2_0-0-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libgmodule-2_0-0-32bit-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libgobject-2_0-0-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libgobject-2_0-0-32bit-2.78.6-150600.4.22.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libgthread-2_0-0-2.78.6-150600.4.22.1 openSUSE Leap 15.6:gio-branding-upstream-2.78.6-150600.4.22.1 openSUSE Leap 15.6:glib2-devel-2.78.6-150600.4.22.1 openSUSE Leap 15.6:glib2-devel-32bit-2.78.6-150600.4.22.1 openSUSE Leap 15.6:glib2-devel-static-2.78.6-150600.4.22.1 openSUSE Leap 15.6:glib2-doc-2.78.6-150600.4.22.1 openSUSE Leap 15.6:glib2-lang-2.78.6-150600.4.22.1 openSUSE Leap 15.6:glib2-tests-devel-2.78.6-150600.4.22.1 openSUSE Leap 15.6:glib2-tools-2.78.6-150600.4.22.1 openSUSE Leap 15.6:glib2-tools-32bit-2.78.6-150600.4.22.1 openSUSE Leap 15.6:libgio-2_0-0-2.78.6-150600.4.22.1 openSUSE Leap 15.6:libgio-2_0-0-32bit-2.78.6-150600.4.22.1 openSUSE Leap 15.6:libglib-2_0-0-2.78.6-150600.4.22.1 openSUSE Leap 15.6:libglib-2_0-0-32bit-2.78.6-150600.4.22.1 openSUSE Leap 15.6:libgmodule-2_0-0-2.78.6-150600.4.22.1 openSUSE Leap 15.6:libgmodule-2_0-0-32bit-2.78.6-150600.4.22.1 openSUSE Leap 15.6:libgobject-2_0-0-2.78.6-150600.4.22.1 openSUSE Leap 15.6:libgobject-2_0-0-32bit-2.78.6-150600.4.22.1 openSUSE Leap 15.6:libgthread-2_0-0-2.78.6-150600.4.22.1 openSUSE Leap 15.6:libgthread-2_0-0-32bit-2.78.6-150600.4.22.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254308-1/ https://www.suse.com/security/cve/CVE-2025-7039.html CVE-2025-7039 https://bugzilla.suse.com/1249055 SUSE Bug 1249055