An integer underflow vulnerability (CVE-2026-58016, CVSS 7.5 HIGH) exists in glib2's `g_dbus_node_info_new_for_xml` function, which could be exploited via crafted D-Bus introspection XML. The vulnerability affects glib2 versions prior to 2.88.1, including Red Hat Enterprise Linux versions 6.0, 7.0, 8.0, and 9.0. The fix requires updating the glib2 package to a patched version, such as the one provided in Red Hat's RHSA-2026:51177 advisory for RHEL 9.4.
Red Hat Product Errata RHSA-2026:51177 - Security Advisory Issued: 2026-08-06 Updated: 2026-08-06 RHSA-2026:51177 - Security Advisory Overview Updated Packages Synopsis Important: glib2 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for glib2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2492257 - CVE-2026-58016 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" CVEs CVE-2026-58016 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM glib2-2.68.4-14.el9_4.7.src.rpm SHA-256: 8b7b5a08064824b7350b159459e4d932dd6fc0d3221301aac39cab6a32f34d49 x86_64 glib2-2.68.4-14.el9_4.7.i686.rpm SHA-256: 34fd41a1f115a2a2e1fb6ddbacbba22dfe7dbe8d916ca6eba0d8121981799dd8 glib2-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: eb3cf94ae32464ca075e7535d5dc8ecd0200870187ce1ecf30631476975b06d3 glib2-debuginfo-2.68.4-14.el9_4.7.i686.rpm SHA-256: 9f63418e47441b1cc70b3caa5c217876796e9787d2ac6db1650873e611b65572 glib2-debuginfo-2.68.4-14.el9_4.7.i686.rpm SHA-256: 9f63418e47441b1cc70b3caa5c217876796e9787d2ac6db1650873e611b65572 glib2-debuginfo-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: 2935529b3cf39b56c1e640763e37af8bfa7d6fc945c29248a6e043e959a311d5 glib2-debuginfo-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: 2935529b3cf39b56c1e640763e37af8bfa7d6fc945c29248a6e043e959a311d5 glib2-debugsource-2.68.4-14.el9_4.7.i686.rpm SHA-256: 585c11206038fdc39eb32e234d5a3b64232a19a221c9272d3281b116b84eafa1 glib2-debugsource-2.68.4-14.el9_4.7.i686.rpm SHA-256: 585c11206038fdc39eb32e234d5a3b64232a19a221c9272d3281b116b84eafa1 glib2-debugsource-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: ea8552916d6ba96427d454b0e0ca4547fe0a0b62768515b1c46d57a6c6db6569 glib2-debugsource-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: ea8552916d6ba96427d454b0e0ca4547fe0a0b62768515b1c46d57a6c6db6569 glib2-devel-2.68.4-14.el9_4.7.i686.rpm SHA-256: db099604b82d69126b072f55a627f892e2144d681a9c90aea2226d5dbe373072 glib2-devel-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: 79dc4bd1da611a4122a3d75b9ae8ab9ee007ca42bcb9b4839e57567f52b6f68c glib2-devel-debuginfo-2.68.4-14.el9_4.7.i686.rpm SHA-256: 8d48b09d063d35afce7d10e782724e4252aaff77ec4739292f121aa5961d6d7d glib2-devel-debuginfo-2.68.4-14.el9_4.7.i686.rpm SHA-256: 8d48b09d063d35afce7d10e782724e4252aaff77ec4739292f121aa5961d6d7d glib2-devel-debuginfo-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: b430f9e7080b74a1bd4e9c89fc86d0d3c5bf05398c4df7dc7e1b3bfc2d63bca4 glib2-devel-debuginfo-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: b430f9e7080b74a1bd4e9c89fc86d0d3c5bf05398c4df7dc7e1b3bfc2d63bca4 glib2-doc-2.68.4-14.el9_4.7.noarch.rpm SHA-256: 016fa1c1f89c9809ba55939f04797e337ec829508977426ae0da1f7f8d1ddfea glib2-tests-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: 4c4ec1e2aa4f60c7b4a48e95caf292f21b02c5c59d5249acf42fa2ad8b4c9f69 glib2-tests-debuginfo-2.68.4-14.el9_4.7.i686.rpm SHA-256: e32d4f2fe4784699567d1faf6d61c7bf0b1ca5153b093f38955513eb61b771c5 glib2-tests-debuginfo-2.68.4-14.el9_4.7.i686.rpm SHA-256: e32d4f2fe4784699567d1faf6d61c7bf0b1ca5153b093f38955513eb61b771c5 glib2-tests-debuginfo-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: fec558c7befd72a310cd53494aec7bcffa1fae147246bbd1a13dec05c7cf7a62 glib2-tests-debuginfo-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: fec558c7befd72a310cd53494aec7bcffa1fae147246bbd1a13dec05c7cf7a62 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM glib2-2.68.4-14.el9_4.7.src.rpm SHA-256: 8b7b5a08064824b7350b159459e4d932dd6fc0d3221301aac39cab6a32f34d49 ppc64le glib2-2.68.4-14.el9_4.7.ppc64le.rpm SHA-256: 67d5c55f1ef0ad0ba1c16bce2115f3c1f018d48dc4ed95adce42622832f34bd2 glib2-debuginfo-2.68.4-14.el9_4.7.ppc64le.rpm SHA-256: 2d2c6062b8c7f39ae8deb542baf6289d52ff95a8e96cfac12a8edca593b4aa23 glib2-debuginfo-2.68.4-14.el9_4.7.ppc64le.rpm SHA-256: 2d2c6062b8c7f39ae8deb542baf6289d52ff95a8e96cfac12a8edca593b4aa23 glib2-debugsource-2.68.4-14.el9_4.7.ppc64le.rpm SHA-256: 9421d6d08210991e987ac13ca9876ae1d13452e9c1884a266443772743051300 glib2-debugsource-2.68.4-14.el9_4.7.ppc64le.rpm SHA-256: 9421d6d08210991e987ac13ca9876ae1d13452e9c1884a266443772743051300 glib2-devel-2.68.4-14.el9_4.7.ppc64le.rpm SHA-256: e3039ded6744ae1ec9be7d4b515d56502c5ef1b01cc7b40fe734adeff72ccb2e glib2-devel-debuginfo-2.68.4-14.el9_4.7.ppc64le.rpm SHA-256: 9f2d1be7a1bd08ef4e1ac217567ef34ca04e414fe3fe3f524b3158851f9c4c72 glib2-devel-debuginfo-2.68.4-14.el9_4.7.ppc64le.rpm SHA-256: 9f2d1be7a1bd08ef4e1ac217567ef34ca04e414fe3fe3f524b3158851f9c4c72 glib2-doc-2.68.4-14.el9_4.7.noarch.rpm SHA-256: 016fa1c1f89c9809ba55939f04797e337ec829508977426ae0da1f7f8d1ddfea glib2-tests-2.68.4-14.el9_4.7.ppc64le.rpm SHA-256: 2d01d657b40b82b7a240660f17f9161f6327e5d632d08339b1e5f74fb00a58d1 glib2-tests-debuginfo-2.68.4-14.el9_4.7.ppc64le.rpm SHA-256: 246ffa38d6fbc6d6ec17220eef4d0d4f21218cdda318705bd6ede01bb78e60dd glib2-tests-debuginfo-2.68.4-14.el9_4.7.ppc64le.rpm SHA-256: 246ffa38d6fbc6d6ec17220eef4d0d4f21218cdda318705bd6ede01bb78e60dd Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM glib2-2.68.4-14.el9_4.7.src.rpm SHA-256: 8b7b5a08064824b7350b159459e4d932dd6fc0d3221301aac39cab6a32f34d49 x86_64 glib2-2.68.4-14.el9_4.7.i686.rpm SHA-256: 34fd41a1f115a2a2e1fb6ddbacbba22dfe7dbe8d916ca6eba0d8121981799dd8 glib2-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: eb3cf94ae32464ca075e7535d5dc8ecd0200870187ce1ecf30631476975b06d3 glib2-debuginfo-2.68.4-14.el9_4.7.i686.rpm SHA-256: 9f63418e47441b1cc70b3caa5c217876796e9787d2ac6db1650873e611b65572 glib2-debuginfo-2.68.4-14.el9_4.7.i686.rpm SHA-256: 9f63418e47441b1cc70b3caa5c217876796e9787d2ac6db1650873e611b65572 glib2-debuginfo-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: 2935529b3cf39b56c1e640763e37af8bfa7d6fc945c29248a6e043e959a311d5 glib2-debuginfo-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: 2935529b3cf39b56c1e640763e37af8bfa7d6fc945c29248a6e043e959a311d5 glib2-debugsource-2.68.4-14.el9_4.7.i686.rpm SHA-256: 585c11206038fdc39eb32e234d5a3b64232a19a221c9272d3281b116b84eafa1 glib2-debugsource-2.68.4-14.el9_4.7.i686.rpm SHA-256: 585c11206038fdc39eb32e234d5a3b64232a19a221c9272d3281b116b84eafa1 glib2-debugsource-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: ea8552916d6ba96427d454b0e0ca4547fe0a0b62768515b1c46d57a6c6db6569 glib2-debugsource-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: ea8552916d6ba96427d454b0e0ca4547fe0a0b62768515b1c46d57a6c6db6569 glib2-devel-2.68.4-14.el9_4.7.i686.rpm SHA-256: db099604b82d69126b072f55a627f892e2144d681a9c90aea2226d5dbe373072 glib2-devel-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: 79dc4bd1da611a4122a3d75b9ae8ab9ee007ca42bcb9b4839e57567f52b6f68c glib2-devel-debuginfo-2.68.4-14.el9_4.7.i686.rpm SHA-256: 8d48b09d063d35afce7d10e782724e4252aaff77ec4739292f121aa5961d6d7d glib2-devel-debuginfo-2.68.4-14.el9_4.7.i686.rpm SHA-256: 8d48b09d063d35afce7d10e782724e4252aaff77ec4739292f121aa5961d6d7d glib2-devel-debuginfo-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: b430f9e7080b74a1bd4e9c89fc86d0d3c5bf05398c4df7dc7e1b3bfc2d63bca4 glib2-devel-debuginfo-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: b430f9e7080b74a1bd4e9c89fc86d0d3c5bf05398c4df7dc7e1b3bfc2d63bca4 glib2-doc-2.68.4-14.el9_4.7.noarch.rpm SHA-256: 016fa1c1f89c9809ba55939f04797e337ec829508977426ae0da1f7f8d1ddfea glib2-tests-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: 4c4ec1e2aa4f60c7b4a48e95caf292f21b02c5c59d5249acf42fa2ad8b4c9f69 glib2-tests-debuginfo-2.68.4-14.el9_4.7.i686.rpm SHA-256: e32d4f2fe4784699567d1faf6d61c7bf0b1ca5153b093f38955513eb61b771c5 glib2-tests-debuginfo-2.68.4-14.el9_4.7.i686.rpm SHA-256: e32d4f2fe4784699567d1faf6d61c7bf0b1ca5153b093f38955513eb61b771c5 glib2-tests-debuginfo-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: fec558c7befd72a310cd53494aec7bcffa1fae147246bbd1a13dec05c7cf7a62 glib2-tests-debuginfo-2.68.4-14.el9_4.7.x86_64.rpm SHA-256: fec558c7befd72a310cd53494aec7bcffa1fae147246bbd1a13dec05c7cf7a62 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 SRPM glib2-2.68.4-14.el9_4.7.src.rpm SHA-256: 8b7b5a08064824b7350b159459e4d932dd6fc0d3221301aac39cab6a32f34d49 aarch64 glib2-2.68.4-14.el9_4.7.aarch64.rpm SHA-256: d2252e2bdd9351f465766524484fb0b0aaf58778297f6bc4588426db68b38