[ALSA-2026:55440] Moderate: glib2 security update
Type:
security
Severity:
moderate
Release date:
2026-08-18
Description:
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010) * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011) * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012) * glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013) * glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014) * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015) * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 glib2-devel-2.68.4-19.el9_8.9.aarch64.rpm 37a8b45e6e6290410252804a60d9fc1aba7570c931a888f4591d5033b9c20ccd
aarch64 glib2-tests-2.68.4-19.el9_8.9.aarch64.rpm b19c8d5bf27d7bb9a62fd1d18a11c2bef67e7658a127bb77e10c4bc1990db5a5
aarch64 glib2-2.68.4-19.el9_8.9.aarch64.rpm d909ddea0f17eb0245183711934b992dba858c85afd1665cbe9cda0374d9a1b3
aarch64 glib2-static-2.68.4-19.el9_8.9.aarch64.rpm dc3f203f883156a3bbcd8939b5e8ea795649eb73b862a0bdd748df6e032143c3
i686 glib2-devel-2.68.4-19.el9_8.9.i686.rpm 6c98f4ec4a4d93cdc9a837306c9607156e105ccb087e739681f9267b819013f0
i686 glib2-static-2.68.4-19.el9_8.9.i686.rpm 8ec0804d8c5628ca8455115f7c7bfc12cf6793e2a222e14fc9ae5b176ac44525
i686 glib2-2.68.4-19.el9_8.9.i686.rpm a62662291b7bae595f2315194d429aaa9a31d9d90b4c0c3e96060fa4b1743be2
noarch glib2-doc-2.68.4-19.el9_8.9.noarch.rpm 3be03920c4cc51ab48f65ffa0c62f9afb51c928c3c6caa8ec0f2a86ccfc1214f
ppc64le glib2-tests-2.68.4-19.el9_8.9.ppc64le.rpm 80430707c94fbd916b9f19371edc487f7a0c0c3bc33c9129a50c4fedc4c46fd5
ppc64le glib2-2.68.4-19.el9_8.9.ppc64le.rpm 822b9987e71ee9de1456ae1ffff417740fc5b960704ad3d71516a847a19b7c04
ppc64le glib2-static-2.68.4-19.el9_8.9.ppc64le.rpm a0647fda7281f304fd56055533f1f71e9f542dd12af6a828eb43abcf6a7e3dd7
ppc64le glib2-devel-2.68.4-19.el9_8.9.ppc64le.rpm dc3d1c6fbb03570eeecece6a823dbca81ba062e5f2a38babf6ca02e073f7c347
s390x glib2-static-2.68.4-19.el9_8.9.s390x.rpm 23f0583775fea0d41ef5204a41dae5b9bfb47778b832feb6fb07b62d61b9340e
s390x glib2-2.68.4-19.el9_8.9.s390x.rpm 25bf3060b8d0810a8c78691ba9ca45064d1e68046df1c6be1d2cc3953eb7ac5d
s390x glib2-devel-2.68.4-19.el9_8.9.s390x.rpm 490a626fff5235458e8cf68730a82e161ee077bcc1ca6d04ea20063f8032172c
s390x glib2-tests-2.68.4-19.el9_8.9.s390x.rpm 584c682e7c8d9ee2b790175ec112fd9915ac92da7c39e71dbb9462aff17add78
x86_64 glib2-static-2.68.4-19.el9_8.9.x86_64.rpm 145136e859db145c56f1a7d579ba8d22f0dac4dcf9cd11261c360d1a85cc2834
x86_64 glib2-tests-2.68.4-19.el9_8.9.x86_64.rpm 62b31a9c3bf600e606e2d679b8050a8a8a7e744cec5a19709c6f6932732929ef
x86_64 glib2-2.68.4-19.el9_8.9.x86_64.rpm bd8cea4da3de121b653e44640b10d4c83883e039ef28ca76cd16c79e6ac25c62
x86_64 glib2-devel-2.68.4-19.el9_8.9.x86_64.rpm ef8482a9dcbe1121d98a2c630dbb1f5624699f84bba017c7b57a90c575a964d0
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.