Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
Priority MEDIUM 46CWE-191Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · High
- Fix status
- Partial Red Hat: 35 fixed, 3 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.
Summary
A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0056 46th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial GLib (GNOME): 2.89.0Red Hat: 43 advisoriesRed Hat: 35 fixed, 3 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| GNOME | GLib | before 2.89.0 | 2.89.0 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | 2.80.4-12.el10_2.14 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | — | 2.80.4-4.el10_0.10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | — | 2.56.1-13.el7_9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 2.70.1-9.el8_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 2.56.4-170.el8_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — | 2.56.4-10.el8_4.6 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | — | 2.56.4-10.el8_4.6 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | — | 2.56.4-158.el8_6.6 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | — | 2.56.4-158.el8_6.6 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | — | 2.56.4-165.el8_8.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | — | 2.56.4-165.el8_8.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 2.68.4-19.el9_8.2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 2.68.4-19.el9_8.2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — | 2.68.4-7.el9_2.6 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | — | 2.68.4-14.el9_4.7 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — | 2.68.4-16.el9_6.6 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791371080 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791371069 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791788287 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791378395 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791970484 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459707 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459711 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459759 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1789029076 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791966259 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790223279 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790223719 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790272426 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589998 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589912 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589914 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589855 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790598593 | Patch available | CNA |
| Red Hat | Red Hat Discovery 2 | — | 1784821670 | Patch available | CNA |
| Red Hat | Red Hat Discovery 2 | — | 1784821750 | Patch available | CNA |
| Red Hat | Red Hat Insights proxy 1.5 | — | 1786433656 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276886 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276884 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790277045 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276889 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276974 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703497 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703506 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703590 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703568 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703586 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703494 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703542 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1784794818 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1784794778 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1784795112 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1784794289 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1784795076 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1787241211 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1787135742 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1787241260 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Hardened Images | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
- GLib VendorGNOME Affected before 2.89.0 Fixed in 2.89.0 Patch available CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 2.80.4-12.el10_2.14 Patch available CNA
- Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 2.80.4-4.el10_0.10 Patch available CNA
- Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 2.56.1-13.el7_9 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 2.70.1-9.el8_10 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 2.56.4-170.el8_10 Patch available CNA
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 2.56.4-10.el8_4.6 Patch available CNA
- Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 2.56.4-10.el8_4.6 Patch available CNA
- Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 2.56.4-158.el8_6.6 Patch available CNA
- Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 2.56.4-158.el8_6.6 Patch available CNA
- Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 2.56.4-165.el8_8.1 Patch available CNA
- Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.56.4-165.el8_8.1 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.68.4-19.el9_8.2 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.68.4-19.el9_8.2 Patch available CNA
- Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.68.4-7.el9_2.6 Patch available CNA
- Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.68.4-14.el9_4.7 Patch available CNA
- Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 2.68.4-16.el9_6.6 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791371080 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791371069 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791788287 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791378395 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791970484 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459707 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459711 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459759 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1789029076 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791966259 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790223279 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790223719 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790272426 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589998 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589912 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589914 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589855 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790598593 Patch available CNA
- Red Hat Discovery 2 VendorRed Hat Affected — Fixed in 1784821670 Patch available CNA
- Red Hat Discovery 2 VendorRed Hat Affected — Fixed in 1784821750 Patch available CNA
- Red Hat Insights proxy 1.5 VendorRed Hat Affected — Fixed in 1786433656 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276886 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276884 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790277045 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276889 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276974 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703497 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703506 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703590 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703568 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703586 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703494 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703542 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1784794818 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1784794778 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1784795112 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1784794289 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1784795076 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1787241211 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1787135742 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1787241260 Patch available CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Hardened Images VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
CPE configurations NVD · 28
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:* | before 2.89.0 | Vulnerable | GNOME |
| cpe:2.3:a:redhat:cert-manager_operator:*:*:*:*:*:openshift:*:* | 1.18.0 to before 1.18.2 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:cert-manager_operator:1.17.0:*:*:*:*:openshift:*:* | 1.17.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:cert-manager_operator:1.20.0:*:*:*:*:openshift:*:* | 1.20.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_eus:9.6:*:*:*:*:*:*:* | 9.6 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_eus:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:discovery:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Red Hat |
- cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:* Versions before 2.89.0 Vulnerable ·GNOME
- cpe:2.3:a:redhat:cert-manager_operator:*:*:*:*:*:openshift:*:* Versions 1.18.0 to before 1.18.2 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:cert-manager_operator:1.17.0:*:*:*:*:openshift:*:* Versions 1.17.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:cert-manager_operator:1.20.0:*:*:*:*:openshift:*:* Versions 1.20.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_eus:9.6:*:*:*:*:*:*:* Versions 9.6 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_eus:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:discovery:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Red Hat
Show 18 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:redhat:insights-proxy:1.5.0:*:*:*:*:*:*:* | 1.5.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:* | 3.0 to before 3.0.3; 3.2 to before 3.2.3; 3.4 to before 3.4.3 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:update_infrastructure:*:*:*:*:*:*:*:* | 5.0 to before 5.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:* | 8.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:* | 8.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_els:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* | 8.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* | 8.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:* | 9.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* | 8.8 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:* | 8.8 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:*:*:*:*:*:*:* | 9.4 | Vulnerable | Red Hat |
- cpe:2.3:a:redhat:insights-proxy:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:* Versions 3.0 to before 3.0.3; 3.2 to before 3.2.3; 3.4 to before 3.4.3 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:update_infrastructure:*:*:*:*:*:*:*:* Versions 5.0 to before 5.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_els:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:* Versions 9.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:*:*:*:*:*:*:* Versions 9.4 Vulnerable ·Red Hat
Remediation
- Fix · CNA GLib (GNOME) Fixed in 2.89.0
Red Hat 43 advisories
- RHSA-2026:82888 Released 2026-10-14 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-bundle
- RHSA-2026:82857 Released 2026-10-14 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-bundle
- RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
Show 40 more Red Hat advisories
- RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:82336 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.1
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:82322 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:82304 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:74674 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (Neuron)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:74463 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (ROCm 7.0)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
- RHSA-2026:74462 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (CUDA 12.9)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cuda-rhel9
- RHSA-2026:74461 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (Spyre)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:74460 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (CPU)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:74459 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (ROCm 6.4)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
- RHSA-2026:74458 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (TPU)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:73962 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (cuda)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
- RHSA-2026:73961 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (spyre)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:73960 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (cpu)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:73959 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (tpu)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:73909 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (rocm)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-rocm-rhel9
- RHSA-2026:72502 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9
- RHSA-2026:72476 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:72475 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:72470 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:72399 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:72395 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:72394 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:58981 Released 2026-08-24 · Red Hat rating CriticalRed Hat Update Infrastructure 5.3 Technology Preview security update
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-tp-rhel9, registry.redhat.io/rhui5/installer-tp-rhel9, registry.redhat.io/rhui5/rhua-tp-rhel9
- RHSA-2026:53371 Released 2026-08-11 · Red Hat rating ImportantInsights proxy Container Image
- Red Hat Insights proxy 1.5 registry.redhat.io/insights-proxy/insights-proxy-container-rhel9
- RHSA-2026:51175 Released 2026-08-06 · Red Hat rating Importantglib2 security update
- Red Hat CodeReady Linux Builder EUS (v.9.6) glib2-static-2.68.4-16.el9_6.6
- Red Hat Enterprise Linux AppStream EUS (v.9.6) glib2-devel-2.68.4-16.el9_6.6, glib2-doc-2.68.4-16.el9_6.6, glib2-tests-2.68.4-16.el9_6.6
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) glib2-2.68.4-16.el9_6.6
- RHSA-2026:51177 Released 2026-08-06 · Red Hat rating Importantglib2 security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) glib2-devel-2.68.4-14.el9_4.7, glib2-doc-2.68.4-14.el9_4.7, glib2-tests-2.68.4-14.el9_4.7
- Red Hat Enterprise Linux BaseOS E4S (v.9.4) glib2-2.68.4-14.el9_4.7
- RHSA-2026:51182 Released 2026-08-06 · Red Hat rating Importantglib2 security update
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) glib2-2.56.4-165.el8_8.1, glib2-devel-2.56.4-165.el8_8.1, glib2-fam-2.56.4-165.el8_8.1 +1
- Red Hat Enterprise Linux BaseOS TUS (v.8.8) glib2-2.56.4-165.el8_8.1, glib2-devel-2.56.4-165.el8_8.1, glib2-fam-2.56.4-165.el8_8.1 +1
- RHSA-2026:51185 Released 2026-08-06 · Red Hat rating Importantglib2 security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) glib2-devel-2.80.4-4.el10_0.10, glib2-tests-2.80.4-4.el10_0.10
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) glib2-2.80.4-4.el10_0.10
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) glib2-doc-2.80.4-4.el10_0.10, glib2-static-2.80.4-4.el10_0.10
- RHSA-2026:51183 Released 2026-08-06 · Red Hat rating Importantglib2 security update
- Red Hat Enterprise Linux Server (v. 7 ELS) glib2-2.56.1-13.el7_9, glib2-2.56.1-13.el7_9.ppc, glib2-devel-2.56.1-13.el7_9 +1
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) glib2-doc-2.56.1-13.el7_9, glib2-fam-2.56.1-13.el7_9, glib2-static-2.56.1-13.el7_9 +2
- RHSA-2026:51176 Released 2026-08-06 · Red Hat rating Importantglib2 security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) glib2-devel-2.68.4-7.el9_2.6, glib2-doc-2.68.4-7.el9_2.6, glib2-tests-2.68.4-7.el9_2.6
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) glib2-2.68.4-7.el9_2.6
- RHSA-2026:51181 Released 2026-08-06 · Red Hat rating Importantglib2 security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) glib2-2.56.4-158.el8_6.6, glib2-devel-2.56.4-158.el8_6.6, glib2-fam-2.56.4-158.el8_6.6 +1
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) glib2-2.56.4-158.el8_6.6, glib2-devel-2.56.4-158.el8_6.6, glib2-fam-2.56.4-158.el8_6.6 +1
- RHSA-2026:51184 Released 2026-08-06 · Red Hat rating Importantglib2 security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) glib2-2.56.4-10.el8_4.6, glib2-devel-2.56.4-10.el8_4.6, glib2-fam-2.56.4-10.el8_4.6 +1
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) glib2-2.56.4-10.el8_4.6, glib2-devel-2.56.4-10.el8_4.6, glib2-fam-2.56.4-10.el8_4.6 +1
- RHSA-2026:49512 Released 2026-08-03 · Red Hat rating Importantmingw-glib2 security update
- Red Hat Enterprise Linux CRB (v. 8) mingw-glib2-2.70.1-9.el8_10, mingw32-glib2-2.70.1-9.el8_10, mingw32-glib2-static-2.70.1-9.el8_10 +2
- RHSA-2026:46836 Released 2026-07-27 · Red Hat rating ImportantA Subscription Management tool for finding and reporting Red Hat product usage
- Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
- RHSA-2026:44481 Released 2026-07-23 · Red Hat rating ImportantRed Hat Update Infrastructure 5.2 security update
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-rhel9, registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9 +2
- RHSA-2026:42089 Released 2026-07-20 · Red Hat rating Importantglib2 security update
- Red Hat Enterprise Linux AppStream (v. 9) glib2-devel-2.68.4-19.el9_8.2, glib2-doc-2.68.4-19.el9_8.2, glib2-tests-2.68.4-19.el9_8.2
- Red Hat Enterprise Linux BaseOS (v. 9) glib2-2.68.4-19.el9_8.2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) glib2-static-2.68.4-19.el9_8.2
- RHSA-2026:42090 Released 2026-07-20 · Red Hat rating Importantglib2 security update
- Red Hat Enterprise Linux BaseOS (v. 8) glib2-2.56.4-170.el8_10, glib2-devel-2.56.4-170.el8_10, glib2-fam-2.56.4-170.el8_10 +1
- Red Hat Enterprise Linux CRB (v. 8) glib2-doc-2.56.4-170.el8_10, glib2-static-2.56.4-170.el8_10
- RHSA-2026:42063 Released 2026-07-20 · Red Hat rating Importantglib2 security update
- Red Hat Enterprise Linux AppStream (v. 10) glib2-devel-2.80.4-12.el10_2.14, glib2-tests-2.80.4-12.el10_2.14
- Red Hat Enterprise Linux BaseOS (v. 10) glib2-2.80.4-12.el10_2.14
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) glib2-doc-2.80.4-12.el10_2.14, glib2-static-2.80.4-12.el10_2.14
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 10 | Affected | No fix yet |
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 9 | Affected | No fix planned: Will not fix |
| Cert Manager support for Red Hat OpenShift release 1.17 | Fixed | RHSA-2026:82304, RHSA-2026:82322, RHSA-2026:82336, RHSA-2026:82888 |
| Cert Manager support for Red Hat OpenShift release 1.18 | Fixed | RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372, RHSA-2026:82857 |
| Cert Manager support for Red Hat OpenShift release 1.20 | Fixed | RHSA-2026:72394, RHSA-2026:72395, RHSA-2026:72399, RHSA-2026:72470, RHSA-2026:72475, RHSA-2026:72476, RHSA-2026:72502 |
| Red Hat CodeReady Linux Builder EUS (v.9.6) | Fixed | RHSA-2026:51175 |
| Red Hat Discovery 2 | Fixed | RHSA-2026:46836 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:42063 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:42089 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:51176 |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Fixed | RHSA-2026:51177 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:51185 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:51175 |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | RHSA-2026:42063 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2026:42090 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2026:42089 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.4) | Fixed | RHSA-2026:51184 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.6) | Fixed | RHSA-2026:51181 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.8) | Fixed | RHSA-2026:51182 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.2) | Fixed | RHSA-2026:51176 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.4) | Fixed | RHSA-2026:51177 |
| Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | Fixed | RHSA-2026:51185 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.6) | Fixed | RHSA-2026:51175 |
| Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:51184 |
| Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) | Fixed | RHSA-2026:51181 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.8) | Fixed | RHSA-2026:51182 |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2026:42090, RHSA-2026:49512 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2026:42063 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Fixed | RHSA-2026:42089 |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Fixed | RHSA-2026:51185 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2026:51183 |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Fixed | RHSA-2026:51183 |
| Red Hat Insights proxy 1.5 | Fixed | RHSA-2026:53371 |
| Red Hat OpenShift AI 3.0 | Fixed | RHSA-2026:73909, RHSA-2026:73959, RHSA-2026:73960, RHSA-2026:73961, RHSA-2026:73962 |
| Red Hat OpenShift AI 3.2 | Fixed | RHSA-2026:74458, RHSA-2026:74459, RHSA-2026:74460, RHSA-2026:74461, RHSA-2026:74462, RHSA-2026:74463 |
| Red Hat OpenShift AI 3.4 | Fixed | RHSA-2026:74674 |
| Red Hat Update Infrastructure 5 | Fixed | RHSA-2026:44481, RHSA-2026:58981 |
Not affected: 4 products
- Cert Manager support for Red Hat OpenShift release 1.20
- Red Hat Hardened Images
- Red Hat OpenShift AI (RHOAI)
- Red Hat Update Infrastructure 5
Timeline
- 2026-10-02 Threatist record created from CVE-2026-58016
- 2026-10-03 Alias added: GHSA-8rpw-4xx7-27w7
- 2026-10-09 EPSS moved to the below the 50th percentile
- 2026-10-14 Fix available: RHSA-2026:82304 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82322 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82336 · Red Hat
- 2026-10-14 Fix available: cert-manager/cert-manager-istio-csr-rhel9@1791378395, cert-manager/cert-manager-istio-csr-rhel9@1791459759, cert-manager/cert-manager-operator-rhel9@1789029076 +5 · CNA
- 2026-10-14 6 new references · CNA
- 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
- 2026-10-15 Fix available: RHSA-2026:82857 · Red Hat
- 2026-10-15 Fix available: RHSA-2026:82888 · Red Hat
- 2026-10-15 Fix available: cert-manager/cert-manager-operator-bundle@1791966259, cert-manager/cert-manager-operator-bundle@1791970484 · CNA
- 2026-10-15 2 new references · CNA
- 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 · Red Hat
- 2026-11-06 Affected versions changed · CNA
- 2026-11-06 Affected versions changed · CNA
- 2026-11-06 Affected versions changed · Red Hat
References
Advisory 45
- RHSA-2026:42063
- RHSA-2026:42089
- RHSA-2026:42090
- RHSA-2026:44481
- RHSA-2026:46836
- RHSA-2026:49512
- RHSA-2026:51175
- RHSA-2026:51176
- RHSA-2026:51177
- RHSA-2026:51181
- RHSA-2026:51182
- RHSA-2026:51183
- RHSA-2026:51184
- RHSA-2026:51185
- RHSA-2026:53371
- RHSA-2026:58981
- RHSA-2026:72394
- RHSA-2026:72395
- RHSA-2026:72399
- RHSA-2026:72470
- RHSA-2026:72475
- RHSA-2026:72476
- RHSA-2026:72502
- RHSA-2026:73909
- RHSA-2026:73959
- RHSA-2026:73960
- RHSA-2026:73961
- RHSA-2026:73962
- RHSA-2026:74458
- RHSA-2026:74459
- RHSA-2026:74460
- RHSA-2026:74461
- RHSA-2026:74462
- RHSA-2026:74463
- RHSA-2026:74674
- RHSA-2026:82304
- RHSA-2026:82322
- RHSA-2026:82336
- RHSA-2026:82347
- RHSA-2026:82354
- RHSA-2026:82372
- RHSA-2026:82857
- RHSA-2026:82888
- https://access.redhat.com/security/cve/CVE-2026-58016
- RHBZ#2492257
More GNOME Glib vulnerabilities
- TI-2026-41775 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" CVSS 3.1HIGH 8.6
- TI-2026-41772 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime CVSS 3.1HIGH 7.5
- TI-2025-03596 Glib: glib crash after long command line CVSS 3.1HIGH 7.5
- TI-2023-15942 Gvariant deserialisation does not match spec for non-normal data CVSS 3.1MEDIUM 5.5
- TI-2024-35203 gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant… CVSS 3.1CRITICAL 9.8
- TI-2018-11777 In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference. CVSS 3.0CRITICAL 9.8
Sources
- CVE-2026-58016 · CVE Program
- CVE-2026-58016 · NVD
- FIRST EPSS
- GHSA-8rpw-4xx7-27w7 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-58016 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences