Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 5

Vulnerabilities 5

• High 7.7
  CVE-2025-13601

  Glib: integer overflow in in g_escape_uri_string()

  A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calc…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Nov 26, 2025
• Medium 6.5
  CVE-2025-14512

  Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

  A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.

  Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Dec 11, 2025
• Medium 5.6
  CVE-2025-14087

  Glib: glib: buffer underflow in gvariant parser leads to heap corruption

  A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input stri…

  Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Dec 10, 2025
• Low 3.7
  CVE-2025-7039

  Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()

  A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerab…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Sep 3, 2025
• Low 3.7
  CVE-2026-0988

  Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()

  A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incor…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jan 21, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2025-13601
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2025-14512
• report
  https://access.redhat.com/security/cve/CVE-2025-14087
• report
  https://access.redhat.com/security/cve/CVE-2025-7039
• report
  https://access.redhat.com/security/cve/CVE-2026-0988
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7461.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2392423
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-7039
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-7039
• article
  https://gitlab.gnome.org/GNOME/glib/-/issues/3716
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2416741
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-13601
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-13601
• article
  https://gitlab.gnome.org/GNOME/glib/-/issues/3827
• article
  https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4914
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2419093
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-14087
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-14087
• article
  https://gitlab.gnome.org/GNOME/glib/-/issues/3834
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2421339
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-14512
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-14512
• article
  https://gitlab.gnome.org/GNOME/glib/-/issues/3845
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2429886
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-0988
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-0988
• article
  https://gitlab.gnome.org/GNOME/glib/-/issues/3851