Summary
[2.68.4-19.2]
- Fix CVE-2026-58016: broken node element nesting validation in
D-Bus introspection XML parsing
- Resolves: RHEL-190632
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | glib2 | 0:2.68.4-19.el9_8.2 |
| Oracle Linux · 9 | glib2-devel | 0:2.68.4-19.el9_8.2 |
| Oracle Linux · 9 | glib2-doc | 0:2.68.4-19.el9_8.2 |
| Oracle Linux · 9 | glib2-static | 0:2.68.4-19.el9_8.2 |
| Oracle Linux · 9 | glib2-tests | 0:2.68.4-19.el9_8.2 |
Vulnerabilities 1
-
High 7.5
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `…