An integer underflow vulnerability (CVE-2026-58016, CVSS 7.5 High) exists in glib2's `g_dbus_node_info_new_for_xml` function, which could be exploited via crafted D-Bus introspection XML. The vulnerability affects glib2 versions prior to 2.88.1, including Red Hat Enterprise Linux versions 6.0, 7.0, 8.0, and 9.0. Red Hat has released patched packages for RHEL 8; administrators should apply the update referenced in the advisory.
Red Hat Product Errata RHSA-2026:42090 - Security Advisory Issued: 2026-07-20 Updated: 2026-07-20 RHSA-2026:42090 - Security Advisory Overview Updated Packages Synopsis Important: glib2 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for glib2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2492257 - CVE-2026-58016 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" CVEs CVE-2026-58016 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM glib2-2.56.4-170.el8_10.src.rpm SHA-256: 702bab67efedbfd47f350a19936a40c4fd53d3137c8d37b7a7790e3d1954247e x86_64 glib2-2.56.4-170.el8_10.i686.rpm SHA-256: 916b5cd999ec90a4b6c62242c7ca0baf34fabda904019e5bf2809c2a8b9e7467 glib2-2.56.4-170.el8_10.x86_64.rpm SHA-256: 155b8baace57f41461b6c58868a174b8a0d69f7972cbe88bb009074e6f64dde7 glib2-debuginfo-2.56.4-170.el8_10.i686.rpm SHA-256: d257e4e6992a48e68747db223259ed45807a7d5a671c75f4f3d047ee164f80bd glib2-debuginfo-2.56.4-170.el8_10.x86_64.rpm SHA-256: a51bef92d39b451e5ed084510937fbd9671b97981387385f8f13d120270714f6 glib2-debugsource-2.56.4-170.el8_10.i686.rpm SHA-256: 4f3bed781f8d64ec9f470c3ed164e269877646d2935943bfe931fdbd6085faf0 glib2-debugsource-2.56.4-170.el8_10.x86_64.rpm SHA-256: d6c805c91866b77f70156a22a7baa202692ab258d008699613d9e5b601b6a662 glib2-devel-2.56.4-170.el8_10.i686.rpm SHA-256: 3385c2ef6ab20afd857d0a498e937930f07454cc354a432c883f65555a26c714 glib2-devel-2.56.4-170.el8_10.x86_64.rpm SHA-256: e51b6551d69c8c7f24d2b850dbf1d9d3aa9816c71a77b7c2efe36ef4f1b8c268 glib2-devel-debuginfo-2.56.4-170.el8_10.i686.rpm SHA-256: 92e8cfd01833d5c6ec6a4ee4804c03becc1c1f06bd69a9f4484bb640787a9b8a glib2-devel-debuginfo-2.56.4-170.el8_10.x86_64.rpm SHA-256: 51f9e89afacabb4caba1787eb885fba9f76b0056d9c65b0d5799678dcf391e66 glib2-fam-2.56.4-170.el8_10.x86_64.rpm SHA-256: 8f85677c0eb77f6b9527af4f0a969474b6dbbb5239345b35c233c33ef6a67877 glib2-fam-debuginfo-2.56.4-170.el8_10.i686.rpm SHA-256: 475ee4bdf531e5872c4347f697324042772f8994f313ffa7ff5048a89444d052 glib2-fam-debuginfo-2.56.4-170.el8_10.x86_64.rpm SHA-256: 897577fcb8367e8cf09976c56331340332e45220855d856d0a5ebdb3a6a1ce51 glib2-tests-2.56.4-170.el8_10.x86_64.rpm SHA-256: c696ced85649da5e050028e6f4813c07887e7d96c26e0375dd66fc2ed87108bd glib2-tests-debuginfo-2.56.4-170.el8_10.i686.rpm SHA-256: d938e1c7e3db9cf32079e9f8729ffb4639b9d14d806162c00481a320c5cfe4a7 glib2-tests-debuginfo-2.56.4-170.el8_10.x86_64.rpm SHA-256: 069f62ffa0fbe865a389bbb172ca7408e24d2362c7dcdb7ca729cc3d1ee51b99 Red Hat Enterprise Linux for IBM z Systems 8 SRPM glib2-2.56.4-170.el8_10.src.rpm SHA-256: 702bab67efedbfd47f350a19936a40c4fd53d3137c8d37b7a7790e3d1954247e s390x glib2-2.56.4-170.el8_10.s390x.rpm SHA-256: 56e558812d478ce5c688eeb232f7ac7a5615caeb04151cdbb0d0656a0ded753d glib2-debuginfo-2.56.4-170.el8_10.s390x.rpm SHA-256: 2a60230759f638e01235888423d1794daac5b15e2ffd12816f439cbae232aa98 glib2-debugsource-2.56.4-170.el8_10.s390x.rpm SHA-256: f654ee3a1499baee66f2cdc85eda321f4dde57718248473a7e5e3170d273f867 glib2-devel-2.56.4-170.el8_10.s390x.rpm SHA-256: 401fd8edff9efd48ab67951199994c28215c197ccc6a0a6e3d8666d1f90227a5 glib2-devel-debuginfo-2.56.4-170.el8_10.s390x.rpm SHA-256: cd80a23673cc6e08360d1fb9a88049f68df0657ebb9ce58b12e30bf0ff17a503 glib2-fam-2.56.4-170.el8_10.s390x.rpm SHA-256: 753c4e75f68c336d5acc4b0c59b5aa93ae69b3647bc22bd979da9299c38e00a4 glib2-fam-debuginfo-2.56.4-170.el8_10.s390x.rpm SHA-256: 80d0721b47afe80c8f0a6be0abc4318a93e3b8b9429cb3e50f1cd4338f43f710 glib2-tests-2.56.4-170.el8_10.s390x.rpm SHA-256: 19e7391eef44f91df042eda3191be3b075b5e6d7e09916377ec8f42a103c42a6 glib2-tests-debuginfo-2.56.4-170.el8_10.s390x.rpm SHA-256: 8161f8a742aeab4b09e85880813a90322f05e8791f8c3e4e0b8f887dab5e449d Red Hat Enterprise Linux for Power, little endian 8 SRPM glib2-2.56.4-170.el8_10.src.rpm SHA-256: 702bab67efedbfd47f350a19936a40c4fd53d3137c8d37b7a7790e3d1954247e ppc64le glib2-2.56.4-170.el8_10.ppc64le.rpm SHA-256: ae8451700f5bf6870d6c93334fbf7f826e2ab723bc0554e93e8dfad4832fd50e glib2-debuginfo-2.56.4-170.el8_10.ppc64le.rpm SHA-256: c8496653934fef2fbc97122f88158e72bf2ec96f3b929700ecb023104e254618 glib2-debugsource-2.56.4-170.el8_10.ppc64le.rpm SHA-256: 3806777bdfaf14aa91a48f1fdff42085ca352639423ea91020f2fdcdc44302f7 glib2-devel-2.56.4-170.el8_10.ppc64le.rpm SHA-256: c696b981b02ad4749139ba804c5c56ae8a1c1c7ed890dcf905cf4b2facbd6d27 glib2-devel-debuginfo-2.56.4-170.el8_10.ppc64le.rpm SHA-256: 92c9d9199bf0f577e22846c24e38c8df6d32f4a39465416f02734c199ce7a5eb glib2-fam-2.56.4-170.el8_10.ppc64le.rpm SHA-256: 6144b9d43331a366459670f533543d659322e4e487db0f08e555fdbf66bd0164 glib2-fam-debuginfo-2.56.4-170.el8_10.ppc64le.rpm SHA-256: 9c18923459138b98bc15097f7c9ae8cabf11541876b70b441eb467c6d3cc6b69 glib2-tests-2.56.4-170.el8_10.ppc64le.rpm SHA-256: 28b275a277bbb52b583106bafde1d831a7e2e46eccadac090c229ba215cc4c22 glib2-tests-debuginfo-2.56.4-170.el8_10.ppc64le.rpm SHA-256: 8fed47b0e202515687992c052b0642cac44f6acd11d0f2e74db22f18af27a2cf Red Hat Enterprise Linux for ARM 64 8 SRPM glib2-2.56.4-170.el8_10.src.rpm SHA-256: 702bab67efedbfd47f350a19936a40c4fd53d3137c8d37b7a7790e3d1954247e aarch64 glib2-2.56.4-170.el8_10.aarch64.rpm SHA-256: 7f2f6b462e45fa46ef901b9641892e400e0937ac3cf6b235233b32d81ade51a0 glib2-debuginfo-2.56.4-170.el8_10.aarch64.rpm SHA-256: 9044dbde9b0b82ed947df3f59b41b792c855f8efab63dd008fe4724bf73bd001 glib2-debugsource-2.56.4-170.el8_10.aarch64.rpm SHA-256: 022e5e71a48684cf7ad6617fee8d81bcc95aa68045377571b0ed9b8872025462 glib2-devel-2.56.4-170.el8_10.aarch64.rpm SHA-256: ecc3f96801649057a9124170d0e3e0c01a9c218816dd30d38d63f322b4490cee glib2-devel-debuginfo-2.56.4-170.el8_10.aarch64.rpm SHA-256: ac9cc03f37e8e3a65590831c816ebcaf6b9f676224957f900d91d7f53c47cc12 glib2-fam-2.56.4-170.el8_10.aarch64.rpm SHA-256: cc33650d38d2bb1e7ca91f63ff41e4266006141e4e36d154b73a1bfa7a590750 glib2-fam-debuginfo-2.56.4-170.el8_10.aarch64.rpm SHA-256: e568ac8652d03e903c84012ebfdeab6cb5e2532c7539d1307a2bba093e2b445d glib2-tests-2.56.4-170.el8_10.aarch64.rpm SHA-256: 4193b00ef8f923964b32f786463a8a24d04a65aff6c40fb665b3370075a76f88 glib2-tests-debuginfo-2.56.4-170.el8_10.aarch64.rpm SHA-256: a66b43d8946946530ca167b7954570b016adfe2826424bb557e362926ccb1145 Red Hat CodeReady Linux Builder for x86_64 8 SRPM x86_64 glib2-debuginfo-2.56.4-170.el8_10.i686.rpm SHA-256: d257e4e6992a48e68747db223259ed45807a7d5a671c75f4f3d047ee164f80bd glib2-debuginfo-2.56.4-170.el8_10.x86_64.rpm SHA-256: a51bef92d39b451e5ed084510937fbd9671b97981387385f8f13d120270714f6 glib2-debugsource-2.56.4-170.el8_10.i686.rpm SHA-256: 4f3bed781f8d64ec9f470c3ed164e269877646d2935943bfe931fdbd6085faf0 glib2-debugsource-2.56.4-170.el8_10.x86_64.rpm SHA-256: d6c805c91866b77f70156a22a7baa202692ab258d008699613d9e5b601b6a662 glib2-devel-debuginfo-2.56.4-170.el8_10.i686.rpm SHA-256: 92e8cfd01833d5c6ec6a4ee4804c03becc1c1f06bd69a9f4484bb640787a9b8a glib2-devel-debuginfo-2.56.4-170.el8_10.x86_64.rpm SHA-256: 51f9e89afacabb4caba1787eb885fba9f76b0056d9c65b0d5799678dcf391e66 glib2-doc-2.56.4-170.el8_10.noarch.rpm SHA-256: e8c08be053e988a90e84e03dbb750d960b79a59f75377a2c3449c792608f3262 glib2-fam-debuginfo-2.56.4-170.el8_10.i686.rpm SHA-256: 475ee4bdf531e5872c4347f697324042772f8994f313ffa7ff5048a89444d052 glib2-fam-debuginfo-2.56.4-170.el8_10.x86_64.rpm SHA-256: 897577fcb8367e8cf09976c56331340332e45220855d856d0a5ebdb3a6a1ce51 glib2-static-2.56.4-170.el8_10.i686.rpm SHA-256: 3c8a990e885234b0f932dd4b687f85c3c3c5d79fc75372a4ed6abf4faee36ea1 glib2-static-2.56.4-170.el8_10.x86_64.rpm SHA-256: 4479c4abb8898e9ce4770d3ab1d6590c14be5b193e4726bdc73d04bcaa31f8c5 glib2-tests-debuginfo-2.56.4-170.el8_10.i686.rpm SHA-256: d938e1c7e3db9cf32079e9f8729ffb4639b9d14d806162c00481a320c5cfe4a7 glib2-tests-debuginfo-2.56.4-170.el8_10.x86_64.rpm SHA-256: 069f62ffa0fbe865a389bbb172ca7408e24d2362c7dcdb7ca729cc3d1ee51b99 Red Hat CodeReady Linux Builder for Power, little endian 8 SRPM ppc64le glib2-debuginfo-2.56.4-170.el8_10.ppc64le.rpm SHA-256: c84966