Summary
[2.56.4-170]
- Add patch for CVE-2026-58016
- Resolves: RHEL-190622
[2.68.4-169]
- Add patch for CVE-2025-14087 and CVE-2025-14512
[2.56.4-168]
- Add patch for CVE-2025-13601
- Fix GUnixMount issues
- Enable testsuite during RPM check phase
[2.56.4-167]
- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114086
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | glib2 | 0:2.56.4-170.el8_10 |
| Oracle Linux · 8 | glib2-devel | 0:2.56.4-170.el8_10 |
| Oracle Linux · 8 | glib2-doc | 0:2.56.4-170.el8_10 |
| Oracle Linux · 8 | glib2-fam | 0:2.56.4-170.el8_10 |
| Oracle Linux · 8 | glib2-static | 0:2.56.4-170.el8_10 |
| Oracle Linux · 8 | glib2-tests | 0:2.56.4-170.el8_10 |
Vulnerabilities 1
-
High 7.5
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `…