<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for glib2</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2023:3535-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2023-09-05T12:47:12Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2023-09-05T12:47:12Z</InitialReleaseDate>
    <CurrentReleaseDate>2023-09-05T12:47:12Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for glib2</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for glib2 fixes the following issues:

- CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files. (bsc#1183533)
- CVE-2023-32665: Fixed GVariant deserialisation which does not match spec for non-normal data. (bsc#1211945)
- CVE-2023-32643: Fixed a heap-buffer-overflow in g_variant_serialised_get_child(). (bsc#1211946)
- CVE-2023-29499: Fixed GVariant offset table entry size which is not checked in is_normal(). (bsc#1211947)
- CVE-2023-32636: Fixed a wrong timeout in fuzz_variant_text(). (bsc#1211948)
- CVE-2023-32611: Fixed an issue where g_variant_byteswap() can take a long time with some non-normal inputs. (bsc#1211951)
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">Container suse/sle15:15.1-2023-3535,SUSE-2023-3535,SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-3535,SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-3535,SUSE-SLE-Product-SLES_SAP-15-SP1-2023-3535,SUSE-Storage-6-2023-3535</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20233535-1/</URL>
      <Description>Link for SUSE-SU-2023:3535-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2023-September/016101.html</URL>
      <Description>E-Mail link for SUSE-SU-2023:3535-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1183533</URL>
      <Description>SUSE Bug 1183533</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1211945</URL>
      <Description>SUSE Bug 1211945</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1211946</URL>
      <Description>SUSE Bug 1211946</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1211947</URL>
      <Description>SUSE Bug 1211947</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1211948</URL>
      <Description>SUSE Bug 1211948</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1211951</URL>
      <Description>SUSE Bug 1211951</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-28153/</URL>
      <Description>SUSE CVE CVE-2021-28153 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-29499/</URL>
      <Description>SUSE CVE CVE-2023-29499 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-32611/</URL>
      <Description>SUSE CVE CVE-2023-32611 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-32636/</URL>
      <Description>SUSE CVE CVE-2023-32636 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-32643/</URL>
      <Description>SUSE CVE CVE-2023-32643 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-32665/</URL>
      <Description>SUSE CVE CVE-2023-32665 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="Container suse/sle15:15.1">
      <Branch Type="Product Name" Name="Container suse/sle15:15.1">
        <FullProductName ProductID="Container suse/sle15:15.1">Container suse/sle15:15.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Enterprise Storage 6">
      <Branch Type="Product Name" Name="SUSE Enterprise Storage 6">
        <FullProductName ProductID="SUSE Enterprise Storage 6" CPE="cpe:/o:suse:ses:6">SUSE Enterprise Storage 6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS" CPE="cpe:/o:suse:sle_hpc-ltss:15:sp1">SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15 SP1-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS" CPE="cpe:/o:suse:sles-ltss:15:sp1">SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1" CPE="cpe:/o:suse:sles_sap:15:sp1">SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="libglib-2_0-0-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libglib-2_0-0-2.54.3-150000.4.29.1">libglib-2_0-0-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gio-branding-upstream-2.54.3-150000.4.29.1">
      <FullProductName ProductID="gio-branding-upstream-2.54.3-150000.4.29.1">gio-branding-upstream-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="glib2-devel-2.54.3-150000.4.29.1">
      <FullProductName ProductID="glib2-devel-2.54.3-150000.4.29.1">glib2-devel-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="glib2-devel-32bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="glib2-devel-32bit-2.54.3-150000.4.29.1">glib2-devel-32bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="glib2-devel-64bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="glib2-devel-64bit-2.54.3-150000.4.29.1">glib2-devel-64bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="glib2-devel-static-2.54.3-150000.4.29.1">
      <FullProductName ProductID="glib2-devel-static-2.54.3-150000.4.29.1">glib2-devel-static-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="glib2-lang-2.54.3-150000.4.29.1">
      <FullProductName ProductID="glib2-lang-2.54.3-150000.4.29.1">glib2-lang-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="glib2-tools-2.54.3-150000.4.29.1">
      <FullProductName ProductID="glib2-tools-2.54.3-150000.4.29.1">glib2-tools-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="glib2-tools-32bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="glib2-tools-32bit-2.54.3-150000.4.29.1">glib2-tools-32bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="glib2-tools-64bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="glib2-tools-64bit-2.54.3-150000.4.29.1">glib2-tools-64bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgio-2_0-0-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libgio-2_0-0-2.54.3-150000.4.29.1">libgio-2_0-0-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgio-2_0-0-32bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libgio-2_0-0-32bit-2.54.3-150000.4.29.1">libgio-2_0-0-32bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgio-2_0-0-64bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libgio-2_0-0-64bit-2.54.3-150000.4.29.1">libgio-2_0-0-64bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgio-fam-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libgio-fam-2.54.3-150000.4.29.1">libgio-fam-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgio-fam-32bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libgio-fam-32bit-2.54.3-150000.4.29.1">libgio-fam-32bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgio-fam-64bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libgio-fam-64bit-2.54.3-150000.4.29.1">libgio-fam-64bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libglib-2_0-0-32bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libglib-2_0-0-32bit-2.54.3-150000.4.29.1">libglib-2_0-0-32bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libglib-2_0-0-64bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libglib-2_0-0-64bit-2.54.3-150000.4.29.1">libglib-2_0-0-64bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgmodule-2_0-0-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libgmodule-2_0-0-2.54.3-150000.4.29.1">libgmodule-2_0-0-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1">libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgmodule-2_0-0-64bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libgmodule-2_0-0-64bit-2.54.3-150000.4.29.1">libgmodule-2_0-0-64bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgobject-2_0-0-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libgobject-2_0-0-2.54.3-150000.4.29.1">libgobject-2_0-0-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgobject-2_0-0-32bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libgobject-2_0-0-32bit-2.54.3-150000.4.29.1">libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgobject-2_0-0-64bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libgobject-2_0-0-64bit-2.54.3-150000.4.29.1">libgobject-2_0-0-64bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgthread-2_0-0-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libgthread-2_0-0-2.54.3-150000.4.29.1">libgthread-2_0-0-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgthread-2_0-0-32bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libgthread-2_0-0-32bit-2.54.3-150000.4.29.1">libgthread-2_0-0-32bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libgthread-2_0-0-64bit-2.54.3-150000.4.29.1">
      <FullProductName ProductID="libgthread-2_0-0-64bit-2.54.3-150000.4.29.1">libgthread-2_0-0-64bit-2.54.3-150000.4.29.1</FullProductName>
    </Branch>
    <Relationship ProductReference="libglib-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle15:15.1">
      <FullProductName ProductID="Container suse/sle15:15.1:libglib-2_0-0-2.54.3-150000.4.29.1">libglib-2_0-0-2.54.3-150000.4.29.1 as a component of Container suse/sle15:15.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="glib2-devel-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:glib2-devel-2.54.3-150000.4.29.1">glib2-devel-2.54.3-150000.4.29.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="glib2-lang-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:glib2-lang-2.54.3-150000.4.29.1">glib2-lang-2.54.3-150000.4.29.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="glib2-tools-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:glib2-tools-2.54.3-150000.4.29.1">glib2-tools-2.54.3-150000.4.29.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgio-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:libgio-2_0-0-2.54.3-150000.4.29.1">libgio-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgio-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:libgio-2_0-0-32bit-2.54.3-150000.4.29.1">libgio-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="libglib-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:libglib-2_0-0-2.54.3-150000.4.29.1">libglib-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="libglib-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:libglib-2_0-0-32bit-2.54.3-150000.4.29.1">libglib-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgmodule-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:libgmodule-2_0-0-2.54.3-150000.4.29.1">libgmodule-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1">libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgobject-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:libgobject-2_0-0-2.54.3-150000.4.29.1">libgobject-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgobject-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1">libgobject-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgthread-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 6">
      <FullProductName ProductID="SUSE Enterprise Storage 6:libgthread-2_0-0-2.54.3-150000.4.29.1">libgthread-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Enterprise Storage 6</FullProductName>
    </Relationship>
    <Relationship ProductReference="glib2-devel-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-devel-2.54.3-150000.4.29.1">glib2-devel-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="glib2-lang-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-lang-2.54.3-150000.4.29.1">glib2-lang-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="glib2-tools-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-tools-2.54.3-150000.4.29.1">glib2-tools-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgio-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgio-2_0-0-2.54.3-150000.4.29.1">libgio-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgio-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgio-2_0-0-32bit-2.54.3-150000.4.29.1">libgio-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libglib-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libglib-2_0-0-2.54.3-150000.4.29.1">libglib-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libglib-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libglib-2_0-0-32bit-2.54.3-150000.4.29.1">libglib-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgmodule-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgmodule-2_0-0-2.54.3-150000.4.29.1">libgmodule-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1">libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgobject-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgobject-2_0-0-2.54.3-150000.4.29.1">libgobject-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgobject-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1">libgobject-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgthread-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgthread-2_0-0-2.54.3-150000.4.29.1">libgthread-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="glib2-devel-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-devel-2.54.3-150000.4.29.1">glib2-devel-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="glib2-lang-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-lang-2.54.3-150000.4.29.1">glib2-lang-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="glib2-tools-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-tools-2.54.3-150000.4.29.1">glib2-tools-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgio-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:libgio-2_0-0-2.54.3-150000.4.29.1">libgio-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgio-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:libgio-2_0-0-32bit-2.54.3-150000.4.29.1">libgio-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libglib-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:libglib-2_0-0-2.54.3-150000.4.29.1">libglib-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libglib-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:libglib-2_0-0-32bit-2.54.3-150000.4.29.1">libglib-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgmodule-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:libgmodule-2_0-0-2.54.3-150000.4.29.1">libgmodule-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1">libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgobject-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:libgobject-2_0-0-2.54.3-150000.4.29.1">libgobject-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgobject-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1">libgobject-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgthread-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP1-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP1-LTSS:libgthread-2_0-0-2.54.3-150000.4.29.1">libgthread-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="glib2-devel-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-devel-2.54.3-150000.4.29.1">glib2-devel-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="glib2-lang-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-lang-2.54.3-150000.4.29.1">glib2-lang-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="glib2-tools-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-tools-2.54.3-150000.4.29.1">glib2-tools-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgio-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgio-2_0-0-2.54.3-150000.4.29.1">libgio-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgio-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgio-2_0-0-32bit-2.54.3-150000.4.29.1">libgio-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libglib-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:libglib-2_0-0-2.54.3-150000.4.29.1">libglib-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libglib-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:libglib-2_0-0-32bit-2.54.3-150000.4.29.1">libglib-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgmodule-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgmodule-2_0-0-2.54.3-150000.4.29.1">libgmodule-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1">libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgobject-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgobject-2_0-0-2.54.3-150000.4.29.1">libgobject-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgobject-2_0-0-32bit-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1">libgobject-2_0-0-32bit-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libgthread-2_0-0-2.54.3-150000.4.29.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgthread-2_0-0-2.54.3-150000.4.29.1">libgthread-2_0-0-2.54.3-150000.4.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)</Note>
    </Notes>
    <CVE>CVE-2021-28153</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Container suse/sle15:15.1:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20233535-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-28153.html</URL>
        <Description>CVE-2021-28153</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1183533</URL>
        <Description>SUSE Bug 1183533</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.</Note>
    </Notes>
    <CVE>CVE-2023-29499</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Container suse/sle15:15.1:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20233535-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-29499.html</URL>
        <Description>CVE-2023-29499</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1211947</URL>
        <Description>SUSE Bug 1211947</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1211948</URL>
        <Description>SUSE Bug 1211948</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.</Note>
    </Notes>
    <CVE>CVE-2023-32611</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Container suse/sle15:15.1:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20233535-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-32611.html</URL>
        <Description>CVE-2023-32611</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1211951</URL>
        <Description>SUSE Bug 1211951</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.</Note>
    </Notes>
    <CVE>CVE-2023-32636</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Container suse/sle15:15.1:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20233535-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-32636.html</URL>
        <Description>CVE-2023-32636</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1211948</URL>
        <Description>SUSE Bug 1211948</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665.</Note>
    </Notes>
    <CVE>CVE-2023-32643</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Container suse/sle15:15.1:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20233535-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-32643.html</URL>
        <Description>CVE-2023-32643</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1211946</URL>
        <Description>SUSE Bug 1211946</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.</Note>
    </Notes>
    <CVE>CVE-2023-32665</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Container suse/sle15:15.1:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Enterprise Storage 6:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP1-LTSS:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-devel-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-lang-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:glib2-tools-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgio-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgio-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libglib-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libglib-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgmodule-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgobject-2_0-0-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgobject-2_0-0-32bit-2.54.3-150000.4.29.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP1:libgthread-2_0-0-2.54.3-150000.4.29.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2023/suse-su-20233535-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-32665.html</URL>
        <Description>CVE-2023-32665</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1211945</URL>
        <Description>SUSE Bug 1211945</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1211946</URL>
        <Description>SUSE Bug 1211946</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
