An integer underflow vulnerability (CVE-2026-58016, CVSS 7.5 High) exists in GLib's `g_dbus_node_info_new_for_xml` function, which could be exploited via malicious D-Bus introspection XML. The vulnerability affects GNOME GLib versions prior to 2.88.1 and multiple Red Hat Enterprise Linux versions. The fix requires upgrading GLib to version 2.88.1 or applying the relevant Red Hat security update.
Red Hat Product Errata RHSA-2026:51176 - Security Advisory Issued: 2026-08-06 Updated: 2026-08-06 RHSA-2026:51176 - Security Advisory Overview Updated Packages Synopsis Important: glib2 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for glib2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2492257 - CVE-2026-58016 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" CVEs CVE-2026-58016 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM glib2-2.68.4-7.el9_2.6.src.rpm SHA-256: 70e1112fbdd47fa2452682d070d344c32151ae7357ffb9f2a8d07b41114e54fb x86_64 glib2-2.68.4-7.el9_2.6.i686.rpm SHA-256: 6255ad2ff2549ec1c7c8b38ec8f35012ed165157951b0218d962918867cc8576 glib2-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 0d1fa0ab6ca2df49b102098b556ee962b5f36a714eb91ee36eab65eb32c99e07 glib2-debuginfo-2.68.4-7.el9_2.6.i686.rpm SHA-256: 415c153708906b64656284c06fab2bb94c3e58fdb8a685036e4d7e26d00918fc glib2-debuginfo-2.68.4-7.el9_2.6.i686.rpm SHA-256: 415c153708906b64656284c06fab2bb94c3e58fdb8a685036e4d7e26d00918fc glib2-debuginfo-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 1a6d25b68d93cb30890ac6e6a66f9868853274e32d0c4645b022cf9f69bf7c1c glib2-debuginfo-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 1a6d25b68d93cb30890ac6e6a66f9868853274e32d0c4645b022cf9f69bf7c1c glib2-debugsource-2.68.4-7.el9_2.6.i686.rpm SHA-256: b9b9058dd3555fa6cacc6ede4d502d4482c204dda0e3fe0fb9a72b6e9205ccc8 glib2-debugsource-2.68.4-7.el9_2.6.i686.rpm SHA-256: b9b9058dd3555fa6cacc6ede4d502d4482c204dda0e3fe0fb9a72b6e9205ccc8 glib2-debugsource-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 36de985fdc3599eb79a33b770df9c46bd233f0f823ada7f87620063fe3306452 glib2-debugsource-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 36de985fdc3599eb79a33b770df9c46bd233f0f823ada7f87620063fe3306452 glib2-devel-2.68.4-7.el9_2.6.i686.rpm SHA-256: 8e8818f4225b54ac18b9ed1d1b9573b929578f3a72b71f6550fac93845676c54 glib2-devel-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 04c535df4c2242b388bd825060c7c25e0d1f95cce465330474184c1c69aac0ce glib2-devel-debuginfo-2.68.4-7.el9_2.6.i686.rpm SHA-256: 9369cca2358a8b0f36ef4f7b0e9fd8093349abda7019b6830a8f4c071e1c472a glib2-devel-debuginfo-2.68.4-7.el9_2.6.i686.rpm SHA-256: 9369cca2358a8b0f36ef4f7b0e9fd8093349abda7019b6830a8f4c071e1c472a glib2-devel-debuginfo-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 4ade3daedbe4dea4574bbb0274fbca6727ee951f33a8a05e71b3670763688a74 glib2-devel-debuginfo-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 4ade3daedbe4dea4574bbb0274fbca6727ee951f33a8a05e71b3670763688a74 glib2-doc-2.68.4-7.el9_2.6.noarch.rpm SHA-256: 7ecfdae6fc273fd4dadf0180bb2b0c4b3c7251e9852e69c63e2f0b33ef4d2cb6 glib2-tests-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: ffadf4e17a2524512446c2809c4ddff0e6ea801ef7e694297a10b947348af74a glib2-tests-debuginfo-2.68.4-7.el9_2.6.i686.rpm SHA-256: b641419791866d2802e8123f0ddfb8898216424274f0a0d18b70497a2b1e14cc glib2-tests-debuginfo-2.68.4-7.el9_2.6.i686.rpm SHA-256: b641419791866d2802e8123f0ddfb8898216424274f0a0d18b70497a2b1e14cc glib2-tests-debuginfo-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 98aa01710741342b52e135abbd441d318ba809b7e63cb5a135f0ed7c07ee0ab9 glib2-tests-debuginfo-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 98aa01710741342b52e135abbd441d318ba809b7e63cb5a135f0ed7c07ee0ab9 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM glib2-2.68.4-7.el9_2.6.src.rpm SHA-256: 70e1112fbdd47fa2452682d070d344c32151ae7357ffb9f2a8d07b41114e54fb ppc64le glib2-2.68.4-7.el9_2.6.ppc64le.rpm SHA-256: f861f0cb95d8ad8f0147634c2e09cde83d01cf9d2e7326d6d779597263b99cef glib2-debuginfo-2.68.4-7.el9_2.6.ppc64le.rpm SHA-256: 5ce2d7372776a1540ba3adf443ef58400ebfefe296a121eeb8b3667d5f407ea5 glib2-debuginfo-2.68.4-7.el9_2.6.ppc64le.rpm SHA-256: 5ce2d7372776a1540ba3adf443ef58400ebfefe296a121eeb8b3667d5f407ea5 glib2-debugsource-2.68.4-7.el9_2.6.ppc64le.rpm SHA-256: 6cd233e0c922d4b117ddf4cac0fb2b8e97c782c389d7462c160f4791d9440761 glib2-debugsource-2.68.4-7.el9_2.6.ppc64le.rpm SHA-256: 6cd233e0c922d4b117ddf4cac0fb2b8e97c782c389d7462c160f4791d9440761 glib2-devel-2.68.4-7.el9_2.6.ppc64le.rpm SHA-256: 20a00918c6d2c4db2216be635965677908478dd38959246393de751fe3d171f8 glib2-devel-debuginfo-2.68.4-7.el9_2.6.ppc64le.rpm SHA-256: 1b79b8a1633930bfae56ea1c5b5fec910d7a2f19baab46789ea236843dfb69ec glib2-devel-debuginfo-2.68.4-7.el9_2.6.ppc64le.rpm SHA-256: 1b79b8a1633930bfae56ea1c5b5fec910d7a2f19baab46789ea236843dfb69ec glib2-doc-2.68.4-7.el9_2.6.noarch.rpm SHA-256: 7ecfdae6fc273fd4dadf0180bb2b0c4b3c7251e9852e69c63e2f0b33ef4d2cb6 glib2-tests-2.68.4-7.el9_2.6.ppc64le.rpm SHA-256: ab405b66ddaa6220ba44c041a316adb1b12a4db841aa94661ee236c36b3f83f1 glib2-tests-debuginfo-2.68.4-7.el9_2.6.ppc64le.rpm SHA-256: b9aa7d0ba5dafab232f5a43ddf3ee6a7c76eed847074463392206e94b35a624a glib2-tests-debuginfo-2.68.4-7.el9_2.6.ppc64le.rpm SHA-256: b9aa7d0ba5dafab232f5a43ddf3ee6a7c76eed847074463392206e94b35a624a Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM glib2-2.68.4-7.el9_2.6.src.rpm SHA-256: 70e1112fbdd47fa2452682d070d344c32151ae7357ffb9f2a8d07b41114e54fb x86_64 glib2-2.68.4-7.el9_2.6.i686.rpm SHA-256: 6255ad2ff2549ec1c7c8b38ec8f35012ed165157951b0218d962918867cc8576 glib2-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 0d1fa0ab6ca2df49b102098b556ee962b5f36a714eb91ee36eab65eb32c99e07 glib2-debuginfo-2.68.4-7.el9_2.6.i686.rpm SHA-256: 415c153708906b64656284c06fab2bb94c3e58fdb8a685036e4d7e26d00918fc glib2-debuginfo-2.68.4-7.el9_2.6.i686.rpm SHA-256: 415c153708906b64656284c06fab2bb94c3e58fdb8a685036e4d7e26d00918fc glib2-debuginfo-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 1a6d25b68d93cb30890ac6e6a66f9868853274e32d0c4645b022cf9f69bf7c1c glib2-debuginfo-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 1a6d25b68d93cb30890ac6e6a66f9868853274e32d0c4645b022cf9f69bf7c1c glib2-debugsource-2.68.4-7.el9_2.6.i686.rpm SHA-256: b9b9058dd3555fa6cacc6ede4d502d4482c204dda0e3fe0fb9a72b6e9205ccc8 glib2-debugsource-2.68.4-7.el9_2.6.i686.rpm SHA-256: b9b9058dd3555fa6cacc6ede4d502d4482c204dda0e3fe0fb9a72b6e9205ccc8 glib2-debugsource-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 36de985fdc3599eb79a33b770df9c46bd233f0f823ada7f87620063fe3306452 glib2-debugsource-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 36de985fdc3599eb79a33b770df9c46bd233f0f823ada7f87620063fe3306452 glib2-devel-2.68.4-7.el9_2.6.i686.rpm SHA-256: 8e8818f4225b54ac18b9ed1d1b9573b929578f3a72b71f6550fac93845676c54 glib2-devel-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 04c535df4c2242b388bd825060c7c25e0d1f95cce465330474184c1c69aac0ce glib2-devel-debuginfo-2.68.4-7.el9_2.6.i686.rpm SHA-256: 9369cca2358a8b0f36ef4f7b0e9fd8093349abda7019b6830a8f4c071e1c472a glib2-devel-debuginfo-2.68.4-7.el9_2.6.i686.rpm SHA-256: 9369cca2358a8b0f36ef4f7b0e9fd8093349abda7019b6830a8f4c071e1c472a glib2-devel-debuginfo-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 4ade3daedbe4dea4574bbb0274fbca6727ee951f33a8a05e71b3670763688a74 glib2-devel-debuginfo-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 4ade3daedbe4dea4574bbb0274fbca6727ee951f33a8a05e71b3670763688a74 glib2-doc-2.68.4-7.el9_2.6.noarch.rpm SHA-256: 7ecfdae6fc273fd4dadf0180bb2b0c4b3c7251e9852e69c63e2f0b33ef4d2cb6 glib2-tests-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: ffadf4e17a2524512446c2809c4ddff0e6ea801ef7e694297a10b947348af74a glib2-tests-debuginfo-2.68.4-7.el9_2.6.i686.rpm SHA-256: b641419791866d2802e8123f0ddfb8898216424274f0a0d18b70497a2b1e14cc glib2-tests-debuginfo-2.68.4-7.el9_2.6.i686.rpm SHA-256: b641419791866d2802e8123f0ddfb8898216424274f0a0d18b70497a2b1e14cc glib2-tests-debuginfo-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 98aa01710741342b52e135abbd441d318ba809b7e63cb5a135f0ed7c07ee0ab9 glib2-tests-debuginfo-2.68.4-7.el9_2.6.x86_64.rpm SHA-256: 98aa01710741342b52e135abbd441d318ba809b7e63cb5a135f0ed7c07ee0ab9 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 SRPM glib2-2.68.4-7.el9_2.6.src.rpm SHA-256: 70e1112fbdd47fa2452682d070d344c32151ae7357ffb9f2a8d07b41114e54fb aarch64 glib2-2.68.4-7.el9_2.6.aarch64.rpm SHA-256: 6be29bdedcd456d4bda34ad0a47bec736cc573edced46b57d26a443012ab01c7 glib2-debuginfo-2.68.4-7.el9_2.6.aarch64.rpm SHA-256: ab4