Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2 | 0:2.56.4-169.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-debuginfo | 0:2.56.4-169.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-debugsource | 0:2.56.4-169.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-devel | 0:2.56.4-169.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-devel-debuginfo | 0:2.56.4-169.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-fam | 0:2.56.4-169.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-fam-debuginfo | 0:2.56.4-169.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-tests | 0:2.56.4-169.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | glib2-tests-debuginfo | 0:2.56.4-169.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | glib2-debuginfo | 0:2.56.4-169.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | glib2-debugsource | 0:2.56.4-169.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | glib2-devel-debuginfo | 0:2.56.4-169.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | glib2-doc | 0:2.56.4-169.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | glib2-fam-debuginfo | 0:2.56.4-169.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | glib2-static | 0:2.56.4-169.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | glib2-tests-debuginfo | 0:2.56.4-169.el8_10 |
Vulnerabilities 2
-
Medium 6.5
Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.
-
Medium 5.6
Glib: glib: buffer underflow in gvariant parser leads to heap corruption
A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input stri…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2419093
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2421339
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_15953.json
-
report
https://access.redhat.com/security/cve/CVE-2025-14087
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-14087
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14087
-
article
https://gitlab.gnome.org/GNOME/glib/-/issues/3834
-
report
https://access.redhat.com/security/cve/CVE-2025-14512
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-14512
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14512
-
article
https://gitlab.gnome.org/GNOME/glib/-/issues/3845