ALSA-2026:42090 Important: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: integer underflow in...

[SECURITY] Fedora 44 Update: mingw-glib2-2.88.2-2.fc44

MinGW Windows Glib2 library...

SUSE SLED15 / SLES15 Security Update : glib-networking (SUSE-SU-2026:3032-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3032-1 advisory. This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by t...

Fedora 44 : mingw-glib2 (2026-7bf2937528)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7bf2937528 advisory. Backport fix for CVE-2026-58016. ---- Update to glib-2.88.2. Tenable has extracted the preceding description block directly from the Fedora security...

GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input...

GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input...

SUSE-SU-2026:3032-1 Security update for glib-networking

This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop bsc1267979...

CVE-2026-58014 affecting package glib for versions less than 2.78.6-10

CVE-2026-58014 affecting package glib for versions less than 2.78.6-10. A patched version of the package is available...

CVE-2026-58012 affecting package glib for versions less than 2.78.6-10

CVE-2026-58012 affecting package glib for versions less than 2.78.6-10. A patched version of the package is available...

CVE-2026-58011 affecting package glib for versions less than 2.78.6-10

CVE-2026-58011 affecting package glib for versions less than 2.78.6-10. A patched version of the package is available...

CVE-2026-58013 affecting package glib for versions less than 2.78.6-10

CVE-2026-58013 affecting package glib for versions less than 2.78.6-10. A patched version of the package is available...

CVE-2026-58016 affecting package glib for versions less than 2.78.6-10

CVE-2026-58016 affecting package glib for versions less than 2.78.6-10. A patched version of the package is available...

CVE-2026-58010 affecting package glib for versions less than 2.78.6-10

CVE-2026-58010 affecting package glib for versions less than 2.78.6-10. A patched version of the package is available...

SUSE-SU-2026:2810-1 Security update for glib-networking

This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop bsc1267979...

MiracleLinux 9 : glib2-2.68.4-19.el9_8.1 (AXSA:2026-1221:09)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1221:09 advisory. glib: GLib: Buffer underflow in GVariant parser leads to heap corruption CVE-2025-14087 glib: Integer Overflow in GLib GIO Attribute Escaping Causes...

The vulnerability of the gvs_tuple_is_normal() function in the glib/gvariant-serialiser.c file of the Glib library allows a attacker to disclose protected information.

The vulnerability of the gvstupleisnormal function in the glib/gvariant-serialiser.c library in the Glib library is related to the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that ...

MiracleLinux 9 : glib2-2.68.4-19.el9 (AXSA:2026-1211:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1211:08 advisory. glib: GLib: Buffer underflow in GVariant parser leads to heap corruption CVE-2025-14087 glib: Integer Overflow in GLib GIO Attribute Escaping Causes...

SUSE CVE-2026-58010

A flaw was found in GLib. An off-by-one error can occur in the gvstupleisnormal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses instead of =, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information...

SUSE CVE-2026-58011

A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the gdatetimegetymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the gdatetimeaddfull function is processed. This flaw can corrupt the date output and potentially cause logic errors...

SUSE CVE-2026-58012

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...