Skip to content
OpenAdvisories
Medium RLSA-2026:98452 1 CVE

Moderate: glib2 security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Summary

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c (CVE-2026-16118)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 39

ReleasePackageFixed in
Rocky Linux · 9 glib2 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-debuginfo 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-debuginfo 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-debuginfo 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-debuginfo 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-debuginfo 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-debugsource 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-debugsource 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-debugsource 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-debugsource 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-debugsource 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-devel 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-devel 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-devel 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-devel 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-devel 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-devel-debuginfo 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-devel-debuginfo 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-devel-debuginfo 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-devel-debuginfo 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-devel-debuginfo 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-doc 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-static 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-static 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-static 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-static 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-static 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-tests 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-tests 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-tests 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-tests 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-tests-debuginfo 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-tests-debuginfo 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-tests-debuginfo 0:2.68.4-29.el9_9.1
Rocky Linux · 9 glib2-tests-debuginfo 0:2.68.4-29.el9_9.1

Vulnerabilities 1

  • High 7.1

    Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

    A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the…

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2501732
  • advisory
    https://access.redhat.com/errata/RHSA-2026:98452