Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
Priority MEDIUM 42CWE-126Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · None · High
- Fix status
- Partial Red Hat: 39 fixed, 3 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.
Summary
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00491 42nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial GLib (GNOME): 2.86.5, 2.88.1Red Hat: 75 advisoriesRed Hat: 39 fixed, 3 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| GNOME | GLib | before 2.86.5; before 2.88.1 | 2.86.5, 2.88.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | 2.80.4-12.el10_2.21 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | — | 2.80.4-4.el10_0.17 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | — | 2.56.1-13.el7_9.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 2.70.1-9.el8_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 2.56.4-177.el8_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — | 2.56.4-10.el8_4.7 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | — | 2.56.4-10.el8_4.7 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | — | 2.56.4-158.el8_6.7 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | — | 2.56.4-158.el8_6.7 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | — | 2.56.4-165.el8_8.2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | — | 2.56.4-165.el8_8.2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 2.68.4-19.el9_8.9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 2.68.4-19.el9_8.9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — | 2.68.4-7.el9_2.7 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | — | 2.68.4-14.el9_4.8 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — | 2.68.4-16.el9_6.7 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791371080 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791371069 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791788287 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791378395 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791970484 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459707 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459711 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459759 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1789029076 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791966259 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 | — | 1788348522 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 | — | 1788348571 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 | — | 1788348571 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 | — | 1788348594 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790223279 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790223719 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790272426 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589998 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589912 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589914 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589855 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790598593 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.2 | — | 1790621714 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.2 | — | 1790621718 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.2 | — | 1790621713 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.5 | — | 1791425869 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.5 | — | 1791427182 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.5 | — | 1791803821 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.5 | — | 1791473631 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.5 | — | 1791818357 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.5 | — | 1791473614 | Patch available | CNA |
| Red Hat | Red Hat Discovery 2 | — | 1788205779 | Patch available | CNA |
| Red Hat | Red Hat Discovery 2 | — | 1788206196 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — | 1793206758 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — | 1793194817 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — | 1793194815 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — | 1793194834 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — | 1793135861 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — | 1793194815 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — | 1793135863 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276886 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276884 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790277045 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276889 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276974 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703497 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703506 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703590 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703568 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703586 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703494 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703542 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703539 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703553 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703631 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703597 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703641 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703630 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703541 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703545 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1791231926 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1791232048 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703552 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703656 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703557 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703707 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703645 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703554 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703554 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703630 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703706 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1787241211 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1787135742 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1787241260 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1788880445 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1788880464 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1788880456 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1788765051 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1788880581 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Hardened Images | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
- GLib VendorGNOME Affected before 2.86.5; before 2.88.1 Fixed in 2.86.5, 2.88.1 Patch available CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 2.80.4-12.el10_2.21 Patch available CNA
- Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 2.80.4-4.el10_0.17 Patch available CNA
- Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 2.56.1-13.el7_9.1 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 2.70.1-9.el8_10 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 2.56.4-177.el8_10 Patch available CNA
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 2.56.4-10.el8_4.7 Patch available CNA
- Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 2.56.4-10.el8_4.7 Patch available CNA
- Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 2.56.4-158.el8_6.7 Patch available CNA
- Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 2.56.4-158.el8_6.7 Patch available CNA
- Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 2.56.4-165.el8_8.2 Patch available CNA
- Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.56.4-165.el8_8.2 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.68.4-19.el9_8.9 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.68.4-19.el9_8.9 Patch available CNA
- Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.68.4-7.el9_2.7 Patch available CNA
- Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.68.4-14.el9_4.8 Patch available CNA
- Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 2.68.4-16.el9_6.7 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791371080 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791371069 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791788287 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791378395 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791970484 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459707 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459711 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459759 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1789029076 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791966259 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.19 VendorRed Hat Affected — Fixed in 1788348522 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.19 VendorRed Hat Affected — Fixed in 1788348571 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.19 VendorRed Hat Affected — Fixed in 1788348571 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.19 VendorRed Hat Affected — Fixed in 1788348594 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790223279 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790223719 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790272426 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589998 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589912 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589914 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589855 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790598593 Patch available CNA
- Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1790621714 Patch available CNA
- Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1790621718 Patch available CNA
- Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1790621713 Patch available CNA
- Red Hat AI Inference Server 3.5 VendorRed Hat Affected — Fixed in 1791425869 Patch available CNA
- Red Hat AI Inference Server 3.5 VendorRed Hat Affected — Fixed in 1791427182 Patch available CNA
- Red Hat AI Inference Server 3.5 VendorRed Hat Affected — Fixed in 1791803821 Patch available CNA
- Red Hat AI Inference Server 3.5 VendorRed Hat Affected — Fixed in 1791473631 Patch available CNA
- Red Hat AI Inference Server 3.5 VendorRed Hat Affected — Fixed in 1791818357 Patch available CNA
- Red Hat AI Inference Server 3.5 VendorRed Hat Affected — Fixed in 1791473614 Patch available CNA
- Red Hat Discovery 2 VendorRed Hat Affected — Fixed in 1788205779 Patch available CNA
- Red Hat Discovery 2 VendorRed Hat Affected — Fixed in 1788206196 Patch available CNA
- Red Hat Enterprise Linux AI 3.5 VendorRed Hat Affected — Fixed in 1793206758 Patch available CNA
- Red Hat Enterprise Linux AI 3.5 VendorRed Hat Affected — Fixed in 1793194817 Patch available CNA
- Red Hat Enterprise Linux AI 3.5 VendorRed Hat Affected — Fixed in 1793194815 Patch available CNA
- Red Hat Enterprise Linux AI 3.5 VendorRed Hat Affected — Fixed in 1793194834 Patch available CNA
- Red Hat Enterprise Linux AI 3.5 VendorRed Hat Affected — Fixed in 1793135861 Patch available CNA
- Red Hat Enterprise Linux AI 3.5 VendorRed Hat Affected — Fixed in 1793194815 Patch available CNA
- Red Hat Enterprise Linux AI 3.5 VendorRed Hat Affected — Fixed in 1793135863 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276886 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276884 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790277045 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276889 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276974 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703497 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703506 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703590 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703568 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703586 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703494 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703542 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703539 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703553 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703631 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703597 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703641 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703630 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703541 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703545 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1791231926 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1791232048 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703552 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703656 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703557 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703707 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703645 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703554 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703554 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703630 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703706 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1787241211 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1787135742 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1787241260 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1788880445 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1788880464 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1788880456 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1788765051 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1788880581 Patch available CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Hardened Images VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
CPE configurations NVD · 7
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:* | before 2.86.5 | Vulnerable | GNOME |
| cpe:2.3:a:gnome:glib:2.88.0:*:*:*:*:*:*:* | 2.88.0 | Vulnerable | GNOME |
| cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Red Hat |
- cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:* Versions before 2.86.5 Vulnerable ·GNOME
- cpe:2.3:a:gnome:glib:2.88.0:*:*:*:*:*:*:* Versions 2.88.0 Vulnerable ·GNOME
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Red Hat
Remediation
- Fix · CNA GLib (GNOME) Fixed in 2.86.5, 2.88.1
Red Hat 75 advisories
- RHSA-2026:92452 Released 2026-10-29 · Red Hat rating CriticalRed Hat Enterprise Linux AI 3.5.2 enhancement update
- Red Hat Enterprise Linux AI 3.5 registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9 +3
- RHSA-2026:92449 Released 2026-10-29 · Red Hat rating CriticalRed Hat Enterprise Linux AI 3.5.2 enhancement update
- Red Hat Enterprise Linux AI 3.5 registry.redhat.io/rhelai3/disk-image-cuda-rhel9
- RHSA-2026:82888 Released 2026-10-14 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-bundle
Show 72 more Red Hat advisories
- RHSA-2026:82857 Released 2026-10-14 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-bundle
- RHSA-2026:82415 Released 2026-10-13 · Red Hat rating CriticalRed Hat AI Inference 3.5.2 (cpu)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-cpu-rhel9
- RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:82371 Released 2026-10-13 · Red Hat rating CriticalRed Hat AI Inference 3.5.2 (spyre)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-spyre-rhel9
- RHSA-2026:82368 Released 2026-10-13 · Red Hat rating CriticalRed Hat AI Inference 3.5.2 (cuda)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-cuda-rhel9
- RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:82336 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.1
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:82322 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:82304 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:82066 Released 2026-10-13 · Red Hat rating ImportantRed Hat AI Inference Model Optimization Tools 3.5.2 (CUDA)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/model-opt-cuda-rhel9
- RHSA-2026:82061 Released 2026-10-13 · Red Hat rating CriticalRed Hat AI Inference Tech Preview 3.5.2 (Gaudi)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-gaudi-rhel9
- RHSA-2026:82059 Released 2026-10-13 · Red Hat rating CriticalRed Hat AI Inference 3.5.2 (ROCm)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-rocm-rhel9
- RHSA-2026:80771 Released 2026-10-12 · Red Hat rating ImportantRed Hat AI Base Images 3.4.4 (CUDA 13.0)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
- RHSA-2026:80769 Released 2026-10-12 · Red Hat rating ImportantRed Hat AI Base Images 3.4.4 (CUDA 12.9)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
- RHSA-2026:76042 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (CUDA)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
- RHSA-2026:75660 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (Spyre)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:75659 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (ROCm 7.14)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rocm-7.14-rhel9
- RHSA-2026:75658 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (TPU)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:75657 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (CUDA 13.0)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
- RHSA-2026:75655 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (Rubin)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rubin-rhel9
- RHSA-2026:75654 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (Neuron)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:75652 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (CPU)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:74771 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (Gaudi)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-gaudi-rhel9
- RHSA-2026:74688 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (ROCm 6.4)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
- RHSA-2026:74687 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (ROCm 7.1)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-7.1-rhel9
- RHSA-2026:74685 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (CUDA 12.9)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
- RHSA-2026:74683 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (CUDA 13.0)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
- RHSA-2026:74681 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (Spyre)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:74679 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (CPU)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:74678 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (Gaudi)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-gaudi-rhel9
- RHSA-2026:74677 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (TPU)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:74674 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (Neuron)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:74463 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (ROCm 7.0)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
- RHSA-2026:74462 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (CUDA 12.9)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cuda-rhel9
- RHSA-2026:74461 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (Spyre)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:74460 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (CPU)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:74459 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (ROCm 6.4)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
- RHSA-2026:74458 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (TPU)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:73962 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (cuda)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
- RHSA-2026:73961 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (spyre)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:73960 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (cpu)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:73959 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (tpu)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:73930 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Inference Server 3.2.2 (rocm)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
- RHSA-2026:73929 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Inference Server 3.2.2 (cuda)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
- RHSA-2026:73909 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (rocm)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-rocm-rhel9
- RHSA-2026:73859 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
- RHSA-2026:72502 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9
- RHSA-2026:72476 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:72475 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:72470 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:72399 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:72395 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:72394 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:66018 Released 2026-09-09 · Red Hat rating ImportantRed Hat Update Infrastructure 5.3 security update
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-rhel9, registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9 +2
- RHSA-2026:65763 Released 2026-09-09 · Red Hat rating Moderateglib2 security update
- Red Hat CodeReady Linux Builder EUS (v.9.6) glib2-static-2.68.4-16.el9_6.7
- Red Hat Enterprise Linux AppStream EUS (v.9.6) glib2-devel-2.68.4-16.el9_6.7, glib2-doc-2.68.4-16.el9_6.7, glib2-tests-2.68.4-16.el9_6.7
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) glib2-2.68.4-16.el9_6.7
- RHSA-2026:65770 Released 2026-09-09 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) glib2-devel-2.68.4-14.el9_4.8, glib2-doc-2.68.4-14.el9_4.8, glib2-tests-2.68.4-14.el9_4.8
- Red Hat Enterprise Linux BaseOS E4S (v.9.4) glib2-2.68.4-14.el9_4.8
- RHSA-2026:65768 Released 2026-09-09 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) glib2-devel-2.68.4-7.el9_2.7, glib2-doc-2.68.4-7.el9_2.7, glib2-tests-2.68.4-7.el9_2.7
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) glib2-2.68.4-7.el9_2.7
- RHSA-2026:65773 Released 2026-09-09 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux Server (v. 7 ELS) glib2-2.56.1-13.el7_9.1, glib2-2.56.1-13.el7_9.1.ppc, glib2-devel-2.56.1-13.el7_9.1 +1
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) glib2-doc-2.56.1-13.el7_9.1, glib2-fam-2.56.1-13.el7_9.1, glib2-static-2.56.1-13.el7_9.1 +2
- RHSA-2026:65769 Released 2026-09-09 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) glib2-2.56.4-158.el8_6.7, glib2-devel-2.56.4-158.el8_6.7, glib2-fam-2.56.4-158.el8_6.7 +1
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) glib2-2.56.4-158.el8_6.7, glib2-devel-2.56.4-158.el8_6.7, glib2-fam-2.56.4-158.el8_6.7 +1
- RHSA-2026:65767 Released 2026-09-09 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) glib2-devel-2.80.4-4.el10_0.17, glib2-tests-2.80.4-4.el10_0.17
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) glib2-2.80.4-4.el10_0.17
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) glib2-doc-2.80.4-4.el10_0.17, glib2-static-2.80.4-4.el10_0.17
- RHSA-2026:65771 Released 2026-09-09 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) glib2-2.56.4-165.el8_8.2, glib2-devel-2.56.4-165.el8_8.2, glib2-fam-2.56.4-165.el8_8.2 +1
- Red Hat Enterprise Linux BaseOS TUS (v.8.8) glib2-2.56.4-165.el8_8.2, glib2-devel-2.56.4-165.el8_8.2, glib2-fam-2.56.4-165.el8_8.2 +1
- RHSA-2026:65762 Released 2026-09-09 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) glib2-2.56.4-10.el8_4.7, glib2-devel-2.56.4-10.el8_4.7, glib2-fam-2.56.4-10.el8_4.7 +1
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) glib2-2.56.4-10.el8_4.7, glib2-devel-2.56.4-10.el8_4.7, glib2-fam-2.56.4-10.el8_4.7 +1
- RHSA-2026:63140 Released 2026-09-03 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.19.2
- Cert Manager support for Red Hat OpenShift release 1.19 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:63138 Released 2026-09-03 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.19.2
- Cert Manager support for Red Hat OpenShift release 1.19 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:63135 Released 2026-09-03 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.19.2
- Cert Manager support for Red Hat OpenShift release 1.19 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:61783 Released 2026-08-31 · Red Hat rating ImportantA Subscription Management tool for finding and reporting Red Hat product usage
- Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
- RHSA-2026:61766 Released 2026-08-31 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux BaseOS (v. 8) glib2-2.56.4-177.el8_10, glib2-devel-2.56.4-177.el8_10, glib2-fam-2.56.4-177.el8_10 +1
- Red Hat Enterprise Linux CRB (v. 8) glib2-doc-2.56.4-177.el8_10, glib2-static-2.56.4-177.el8_10
- RHSA-2026:58981 Released 2026-08-24 · Red Hat rating CriticalRed Hat Update Infrastructure 5.3 Technology Preview security update
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-tp-rhel9, registry.redhat.io/rhui5/installer-tp-rhel9, registry.redhat.io/rhui5/rhua-tp-rhel9
- RHSA-2026:57015 Released 2026-08-19 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux AppStream (v. 10) glib2-devel-2.80.4-12.el10_2.21, glib2-tests-2.80.4-12.el10_2.21
- Red Hat Enterprise Linux BaseOS (v. 10) glib2-2.80.4-12.el10_2.21
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) glib2-doc-2.80.4-12.el10_2.21, glib2-static-2.80.4-12.el10_2.21
- RHSA-2026:55440 Released 2026-08-17 · Red Hat rating Moderateglib2 security update
- Red Hat Enterprise Linux AppStream (v. 9) glib2-devel-2.68.4-19.el9_8.9, glib2-doc-2.68.4-19.el9_8.9, glib2-tests-2.68.4-19.el9_8.9
- Red Hat Enterprise Linux BaseOS (v. 9) glib2-2.68.4-19.el9_8.9
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) glib2-static-2.68.4-19.el9_8.9
- RHSA-2026:49512 Released 2026-08-03 · Red Hat rating Importantmingw-glib2 security update
- Red Hat Enterprise Linux CRB (v. 8) mingw-glib2-2.70.1-9.el8_10, mingw32-glib2-2.70.1-9.el8_10, mingw32-glib2-static-2.70.1-9.el8_10 +2
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:55440
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:57015
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
Show 14 more groups
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:61766
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:63135
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:63138
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:63140
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:65762
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:65763
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:65767
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:65768
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:65769
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:65770
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:65771
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:65773
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:80769
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
- Advisory ·
GNOME Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 29 more products — RHSA-2026:80771
6 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Priority HIGH 76
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimePriority HIGH 72
- TI-2026-41773 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Priority MEDIUM 42
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 10 | Affected | No fix yet |
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 9 | Affected | No fix planned: Will not fix |
| Cert Manager support for Red Hat OpenShift release 1.17 | Fixed | RHSA-2026:82304, RHSA-2026:82322, RHSA-2026:82336, RHSA-2026:82888 |
| Cert Manager support for Red Hat OpenShift release 1.18 | Fixed | RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372, RHSA-2026:82857 |
| Cert Manager support for Red Hat OpenShift release 1.19 | Fixed | RHSA-2026:63135, RHSA-2026:63138, RHSA-2026:63140 |
| Cert Manager support for Red Hat OpenShift release 1.20 | Fixed | RHSA-2026:72394, RHSA-2026:72395, RHSA-2026:72399, RHSA-2026:72470, RHSA-2026:72475, RHSA-2026:72476, RHSA-2026:72502 |
| Red Hat AI Inference Server 3.2 | Fixed | RHSA-2026:73859, RHSA-2026:73929, RHSA-2026:73930 |
| Red Hat AI Inference Server 3.5 | Fixed | RHSA-2026:82059, RHSA-2026:82061, RHSA-2026:82066, RHSA-2026:82368, RHSA-2026:82371, RHSA-2026:82415 |
| Red Hat CodeReady Linux Builder EUS (v.9.6) | Fixed | RHSA-2026:65763 |
| Red Hat Discovery 2 | Fixed | RHSA-2026:61783 |
| Red Hat Enterprise Linux AI 3.5 | Fixed | RHSA-2026:92449, RHSA-2026:92452 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:57015 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:55440 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:65768 |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Fixed | RHSA-2026:65770 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:65767 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:65763 |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | RHSA-2026:57015 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2026:61766 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2026:55440 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.4) | Fixed | RHSA-2026:65762 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.6) | Fixed | RHSA-2026:65769 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.8) | Fixed | RHSA-2026:65771 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.2) | Fixed | RHSA-2026:65768 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.4) | Fixed | RHSA-2026:65770 |
| Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | Fixed | RHSA-2026:65767 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.6) | Fixed | RHSA-2026:65763 |
| Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:65762 |
| Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) | Fixed | RHSA-2026:65769 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.8) | Fixed | RHSA-2026:65771 |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2026:49512, RHSA-2026:61766 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2026:57015 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Fixed | RHSA-2026:55440 |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Fixed | RHSA-2026:65767 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2026:65773 |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Fixed | RHSA-2026:65773 |
| Red Hat OpenShift AI 3.0 | Fixed | RHSA-2026:73909, RHSA-2026:73959, RHSA-2026:73960, RHSA-2026:73961, RHSA-2026:73962 |
| Red Hat OpenShift AI 3.2 | Fixed | RHSA-2026:74458, RHSA-2026:74459, RHSA-2026:74460, RHSA-2026:74461, RHSA-2026:74462, RHSA-2026:74463 |
| Red Hat OpenShift AI 3.4 | Fixed | RHSA-2026:74674, RHSA-2026:74677, RHSA-2026:74678, RHSA-2026:74679, RHSA-2026:74681, RHSA-2026:74683, RHSA-2026:74685, RHSA-2026:74687, RHSA-2026:74688, RHSA-2026:80769, RHSA-2026:80771 |
| Red Hat OpenShift AI 3.5 | Fixed | RHSA-2026:74771, RHSA-2026:75652, RHSA-2026:75654, RHSA-2026:75655, RHSA-2026:75657, RHSA-2026:75658, RHSA-2026:75659, RHSA-2026:75660, RHSA-2026:76042 |
| Red Hat Update Infrastructure 5 | Fixed | RHSA-2026:58981, RHSA-2026:66018 |
Not affected: 4 products
- Cert Manager support for Red Hat OpenShift release 1.20
- Red Hat Hardened Images
- Red Hat OpenShift AI (RHOAI)
- Red Hat Update Infrastructure 5
Timeline
- 2026-10-02 Threatist record created from CVE-2026-58010
- 2026-10-03 Alias added: GHSA-m7rp-473c-296x
- 2026-10-05 Fix available: rhai/base-image-cpu-rhel9@1790703656, rhai/base-image-cuda-13.0-rhel9@1790703645, rhai/base-image-neuron-rhel9@1790703557 +4 · CNA
- 2026-10-05 7 new references · CNA
- 2026-10-05 Fix available: RHSA-2026:75659 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75660 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75655 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75657 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75654 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75652 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75658 · Red Hat
- 2026-10-05 Affected versions changed · Red Hat
- 2026-10-06 Fix available: rhai/base-image-cuda-12.9-rhel9@1790703706 · CNA
- 2026-10-06 1 new reference · CNA
- 2026-10-06 Fix available: RHSA-2026:76042 · Red Hat
- 2026-10-06 Affected versions changed · Red Hat
- 2026-10-09 EPSS moved to the below the 50th percentile
- 2026-10-12 Fix available: rhai/base-image-cuda-12.9-rhel9@1791231926, rhai/base-image-cuda-13.0-rhel9@1791232048 · CNA
- 2026-10-12 2 new references · CNA
- 2026-10-13 Fix available: rhaii/model-opt-cuda-rhel9@1791803821, rhaii/vllm-gaudi-rhel9@1791427182, rhaii/vllm-rocm-rhel9@1791425869 · CNA
- 2026-10-13 3 new references · CNA
- 2026-10-13 Fix available: RHSA-2026:82066 · Red Hat
- 2026-10-13 Fix available: RHSA-2026:80769 · Red Hat
- 2026-10-13 Fix available: RHSA-2026:80771 · Red Hat
- 2026-10-13 Fix available: RHSA-2026:82061 · Red Hat
- 2026-10-13 Fix available: RHSA-2026:82059 · Red Hat
- 2026-10-13 Fix available: Red Hat AI Inference Server 3.5 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82368 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82415 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82371 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82304 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82322 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82336 · Red Hat
- 2026-10-14 Fix available: cert-manager/cert-manager-istio-csr-rhel9@1791378395, cert-manager/cert-manager-istio-csr-rhel9@1791459759, cert-manager/cert-manager-operator-rhel9@1789029076 +8 · CNA
- 2026-10-14 9 new references · CNA
- 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
- 2026-10-15 Fix available: RHSA-2026:82857 · Red Hat
- 2026-10-15 Fix available: RHSA-2026:82888 · Red Hat
- 2026-10-15 Fix available: cert-manager/cert-manager-operator-bundle@1791966259, cert-manager/cert-manager-operator-bundle@1791970484 · CNA
- 2026-10-15 2 new references · CNA
- 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 · Red Hat
- 2026-10-29 Fix available: rhelai3/bootc-aws-cuda-rhel9@1793194817, rhelai3/bootc-azure-cuda-rhel9@1793194815, rhelai3/bootc-azure-rocm-rhel9@1793194834 +4 · CNA
- 2026-10-29 2 new references · CNA
- 2026-10-30 Fix available: RHSA-2026:92452 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:92449 · Red Hat
- 2026-10-30 Fix available: Red Hat Enterprise Linux AI 3.5 · Red Hat
- 2026-11-06 Affected versions changed · CNA
- 2026-11-06 Affected versions changed · Red Hat
References
Advisory 77
- RHSA-2026:49512
- RHSA-2026:55440
- RHSA-2026:57015
- RHSA-2026:58981
- RHSA-2026:61766
- RHSA-2026:61783
- RHSA-2026:63135
- RHSA-2026:63138
- RHSA-2026:63140
- RHSA-2026:65762
- RHSA-2026:65763
- RHSA-2026:65767
- RHSA-2026:65768
- RHSA-2026:65769
- RHSA-2026:65770
- RHSA-2026:65771
- RHSA-2026:65773
- RHSA-2026:66018
- RHSA-2026:72394
- RHSA-2026:72395
- RHSA-2026:72399
- RHSA-2026:72470
- RHSA-2026:72475
- RHSA-2026:72476
- RHSA-2026:72502
- RHSA-2026:73859
- RHSA-2026:73909
- RHSA-2026:73929
- RHSA-2026:73930
- RHSA-2026:73959
- RHSA-2026:73960
- RHSA-2026:73961
- RHSA-2026:73962
- RHSA-2026:74458
- RHSA-2026:74459
- RHSA-2026:74460
- RHSA-2026:74461
- RHSA-2026:74462
- RHSA-2026:74463
- RHSA-2026:74674
- RHSA-2026:74677
- RHSA-2026:74678
- RHSA-2026:74679
- RHSA-2026:74681
- RHSA-2026:74683
- RHSA-2026:74685
- RHSA-2026:74687
- RHSA-2026:74688
- RHSA-2026:74771
- RHSA-2026:75652
- RHSA-2026:75654
- RHSA-2026:75655
- RHSA-2026:75657
- RHSA-2026:75658
- RHSA-2026:75659
- RHSA-2026:75660
- RHSA-2026:76042
- RHSA-2026:80769
- RHSA-2026:80771
- RHSA-2026:82059
- RHSA-2026:82061
- RHSA-2026:82066
- RHSA-2026:82304
- RHSA-2026:82322
- RHSA-2026:82336
- RHSA-2026:82347
- RHSA-2026:82354
- RHSA-2026:82368
- RHSA-2026:82371
- RHSA-2026:82372
- RHSA-2026:82415
- RHSA-2026:82857
- RHSA-2026:82888
- RHSA-2026:92449
- RHSA-2026:92452
- https://access.redhat.com/security/cve/CVE-2026-58010
- RHBZ#2492243
More GNOME Glib vulnerabilities
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" CVSS 3.1HIGH 8.6
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime CVSS 3.1HIGH 7.5
- TI-2025-03596 Glib: glib crash after long command line CVSS 3.1HIGH 7.5
- TI-2023-15942 Gvariant deserialisation does not match spec for non-normal data CVSS 3.1MEDIUM 5.5
- TI-2024-35203 gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant… CVSS 3.1CRITICAL 9.8
- TI-2018-11777 In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference. CVSS 3.0CRITICAL 9.8
Sources
- CVE-2026-58010 · CVE Program
- CVE-2026-58010 · NVD
- FIRST EPSS
- GHSA-m7rp-473c-296x · GitHub Advisory Database · CC BY 4.0
- CVE-2026-58010 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences