CLEANSTART-2026-SB14639 file_copy_fallback in gio/gfile

Security vulnerability affects the glib package. filecopyfallback in gio/gfile...

CLSA-2026-1791535751 Fix CVE(s): CVE-2026-16118

SECURITY UPDATE: heap buffer overflow when byte-swapping MIME magic values - debian/patches/CVE-2026-16118.patch: apply the byte offset before the cast on the write side of the byte swap in xdgmimemagicparsemagicline in gio/xdgmime/xdgmimemagic.c - CVE-2026-16118...

[SECURITY] Fedora 45 Update: gvfs-1.62.0-2.fc45

The gvfs package provides backend implementations for the gio framework in GLib. It includes ftp, sftp, cifs...

Rocky Linux 8 [CIQ] Security Update: glib2 / glib2-debuginfo / glib2-debugsource / glib2-devel / etc (crlsa-2026_42090)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202642090 advisory. glib: integer underflow in gio/gdbusintrospection.c via gdbusnodeinfonewforxml CVE-2026-58016 Tenable has extracted the preceding description block directly from t...

Rocky Linux 10.2 [CIQ] Security Update: glib2 / glib2-debuginfo / glib2-debugsource / glib2-devel / etc (crlsa-2026_42063)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202642063 advisory. glib: integer underflow in gio/gdbusintrospection.c via gdbusnodeinfonewforxml CVE-2026-58016 Tenable has extracted the preceding description block directly fro...

Rocky Linux 9 [CIQ] Security Update: glib2 / glib2-debuginfo / glib2-debugsource / glib2-devel / etc (crlsa-2026_42089)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202642089 advisory. glib: integer underflow in gio/gdbusintrospection.c via gdbusnodeinfonewforxml CVE-2026-58016 Tenable has extracted the preceding description block directly from t...

ROS-20261001-73-0001

The vulnerability of the myginputstreamreadlinesafe function in the gio/gdbusauth.c file from the Glib library is related to unlimited resource distribution. Exploiting this vulnerability could allow an attacker to cause a service failure...

Rocky Linux 10.1 [CIQ] Security Update: glib2 / glib2-debuginfo / glib2-debugsource / glib2-devel / etc Multiple Vulnerabilities (crlsa-2026_15969)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202615969 advisory. glib: GLib: Buffer underflow in GVariant parser leads to heap corruption CVE-2025-14087 glib: Integer Overflow in GLib GIO Attribute Escaping Causes He...

Rocky Linux 9 [CIQ] Security Update: glib2 / glib2-debuginfo / glib2-debugsource / glib2-devel / etc Multiple Vulnerabilities (crlsa-2026_15971)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202615971 advisory. glib: GLib: Buffer underflow in GVariant parser leads to heap corruption CVE-2025-14087 glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap...

Rocky Linux 9 [CIQ] Security Update: glib2 / glib2-debuginfo / glib2-debugsource / glib2-devel / etc Multiple Vulnerabilities (crlsa-2026_19361)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619361 advisory. glib: GLib: Buffer underflow in GVariant parser leads to heap corruption CVE-2025-14087 glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap...

[SECURITY] Fedora 45 Update: glib-networking-2.90.0-1.fc45

This package contains modules that extend the networking support in GIO. In particular, it contains libproxy- and GSettings-based GProxyResolver implementations and a gnutls-based GTlsConnection implementation...

CentOS Linux 6 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-static Multiple Vulnerabilities (CENTOS6:CLSA-2026:1776346717)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1776346717 advisory. - filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation...

CentOS Linux 7 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-fam / glib2-static / etc (CENTOS7:CLSA-2026:1783440677)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1783440677 advisory. - A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file when processing malform...

CLSA-2026-1789985854 glib2: Fix of CVE-2026-16118

CVE-2026-16118: fix a heap out-of-bounds write in the little-endian byte-swap of MIME magic values in xdgmimemagicparsemagicline gio/xdgmime/xdgmimemagic.c by parenthesizing ptr + i before the cast so the write side uses byte offsets instead of scaling by the word size...

CLSA-2026-1789748257 Fix CVE(s): CVE-2026-16118

SECURITY UPDATE: Heap buffer overflow in the little-endian byte-swap of MIME magic values - debian/patches/CVE-2026-16118.patch: parenthesize ptr + i before the cast so the write side of the byte-swap uses byte offsets instead of scaling by the word size in xdgmimemagicparsemagicline in...

CLSA-2026-1789602006 glib2: Fix of CVE-2026-16118

CVE-2026-16118: fix a heap out-of-bounds write in the little-endian byte-swap of MIME magic values in xdgmimemagicparsemagicline gio/xdgmime/xdgmimemagic.c by parenthesizing ptr + i before the cast so the write side uses byte offsets instead of scaling by the word size...

Unity Linux 20.1060a / 20.1070a Security Update: glib2 (UTSA-2026-039481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-039481 advisory. A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output...

[SECURITY] Fedora 43 Update: gvfs-1.58.4-4.fc43

The gvfs package provides backend implementations for the gio framework in GLib. It includes ftp, sftp, cifs...

CLSA-2026-1787062977 Fix of 6 CVEs

SECURITY UPDATE: Single-byte buffer overflow in SOCKSv4a connect messages SOCKS4CONNMSGLEN did not account for the trailing NUL in gio/gsocks4aproxy.c - debian/patches/CVE-2024-52533.patch: Single-byte buffer overflow in SOCKSv4a connect messages SOCKS4CONNMSGLEN did not account for the trailing...

PT-2026-80491

A flaw was found in GLib. A state confusion issue exists in g dbus node info new for xml in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a node element nested within other elements like method, signal, property or arg. This issue can cause...