Security update for libgpg-error

The libgpg-error library contained an out-of-bounds read vulnerability in the _gpgrt_vfnameconcat function of stringutils.c triggered when the GPGRT_FCONCAT_SYSCONF flag is used. This flaw could cause the program to read memory outside the intended buffer bounds, potentially leading to undefined behavior or crashes. The update fixes this issue as noted by SUSE Product Security Team (bsc#1263078). No further technical details or exploitation information is provided.

The vulnerability allows out-of-bounds memory reads which may cause application instability or crashes. There is no indication of active exploitation or direct compromise impact. The severity is assessed as medium based on the potential for memory safety issues.

A security update has been issued to fix this vulnerability. Users should apply the update provided by their vendor or distribution to remediate the issue. Since no patch links or affected versions are specified, users should consult their vendor advisory for the exact update details.