Red Hat Security Advisory

RHSA-2026:0936

glib2 security update

Released 2026-01-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) glib2-devel-2.68.4-18.el9_7.1, glib2-doc-2.68.4-18.el9_7.1, glib2-tests-2.68.4-18.el9_7.1
Red Hat Enterprise Linux BaseOS (v. 9) glib2-2.68.4-18.el9_7.1
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) glib2-static-2.68.4-18.el9_7.1

TI-2025-12426 CVE-2025-13601 · GHSA-v6c5-9mp4-mwq4

LOW 34

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00346 Published 2025-11-26 Partial fix · 2.86.3, 2.80.4-10.el10_1.12 +31 CWE-190