[CLSA-2026:1783341999] glib2: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-07-06 12:46:57 UTC
Description:
- CVE-2026-58016: fix inverted nesting guard in the GDBus introspection XML parser (gio/gdbusintrospection.c) - CVE-2026-58015: validate the DBUS_COOKIE_SHA1 cookie_context to avoid keyring path traversal (gio/gdbusauthmechanismsha1.c) - CVE-2026-58014: guard the empty-value case in g_key_file_get_locale_string_list() to avoid a one-byte heap underread
CVEs fixed:
Updated packages:
  • glib2-2.68.4-6.el9.tuxcare.els8.i686.rpm
    sha:0cc0568f11ca901737bb0bffa649386173ac38cbac158e74caf776aab68e93a8
  • glib2-2.68.4-6.el9.tuxcare.els8.x86_64.rpm
    sha:2304528cb2e1a0864aea285afa28cd9d3615ac6455d527a85aae00790e36cb9f
  • glib2-devel-2.68.4-6.el9.tuxcare.els8.i686.rpm
    sha:a8a872000054fd26a113cc1177c20dd7c057c4107564ff806cece0c782217fc7
  • glib2-devel-2.68.4-6.el9.tuxcare.els8.x86_64.rpm
    sha:0b553a2ff2ef36158718f27ac475b7be061113e4e73a207517ade408bc39f443
  • glib2-doc-2.68.4-6.el9.tuxcare.els8.noarch.rpm
    sha:d95b9f81f2aa011fb7f8123a664edfbe3f468fbec184829f1bf7dfbaf860c65b
  • glib2-static-2.68.4-6.el9.tuxcare.els8.i686.rpm
    sha:8733b8448693137f5d0f02c7e7cd0a824d503a056fbb46a9451dfcdef663906b
  • glib2-static-2.68.4-6.el9.tuxcare.els8.x86_64.rpm
    sha:0bf1cbb44918079ca970f2011240c94c9f7287a1753960d4a504f7bfc8eb40b1
  • glib2-tests-2.68.4-6.el9.tuxcare.els8.x86_64.rpm
    sha:de2b0d432d36256f7593d5562b3f52294afcd2f67a3c0a622ba98c03ab915c60
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.