SUSE-CU-2021:78-1: Security update of suse/sle-micro/5.0/toolbox

[sle-security-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sle-micro/5.0/toolbox
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2021:78-1
Container Tags        : suse/sle-micro/5.0/toolbox:10.1 , suse/sle-micro/5.0/toolbox:10.1-4.12 , suse/sle-micro/5.0/toolbox:latest
Container Release     : 4.12
Severity              : important
Type                  : security
References            : 1182328 1182362 CVE-2021-27218 CVE-2021-27219 
-----------------------------------------------------------------

The container suse/sle-micro/5.0/toolbox was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2021:778-1
Released:    Fri Mar 12 17:42:25 2021
Summary:     Security update for glib2
Type:        security
Severity:    important
References:  1182328,1182362,CVE-2021-27218,CVE-2021-27219
This update for glib2 fixes the following issues:

- CVE-2021-27218: g_byte_array_new_take takes a gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328)
- CVE-2021-27219: g_memdup takes a guint as parameter and sometimes leads into an integer overflow, so add a g_memdup2 function which uses gsize to replace it. (bsc#1182362)