An integer underflow vulnerability (CVE-2026-58016, CVSS 7.5 HIGH) exists in the GLib library's `g_dbus_node_info_new_for_xml` function, which could be exploited via malicious D-Bus introspection XML. The vulnerability affects GNOME GLib versions prior to 2.88.1 and multiple Red Hat Enterprise Linux versions. The fix is to upgrade the glib2 package to version 2.88.1 or later as specified in the Red Hat advisory.
Red Hat Product Errata RHSA-2026:42063 - Security Advisory Issued: 2026-07-20 Updated: 2026-07-20 RHSA-2026:42063 - Security Advisory Overview Updated Packages Synopsis Important: glib2 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for glib2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2492257 - CVE-2026-58016 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" CVEs CVE-2026-58016 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM glib2-2.80.4-12.el10_2.14.src.rpm SHA-256: ad21f04f830f590db1ec623413a448c28f93ad714a2fca6657cfd338353d7f86 x86_64 glib2-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 8fc7e7738f680ba9e6064c8df4adb6b28ac5e11688e69cb3f105c1db0bc030af glib2-debuginfo-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 255f328d1e6abe4e78364ce5a2849299021e44b671460f3ff1bf4f3a2a7352b7 glib2-debuginfo-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 255f328d1e6abe4e78364ce5a2849299021e44b671460f3ff1bf4f3a2a7352b7 glib2-debugsource-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 468a044dfa66c818c7f98b119b15c10c20604558ece9dd94e7e191adf249f6e8 glib2-debugsource-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 468a044dfa66c818c7f98b119b15c10c20604558ece9dd94e7e191adf249f6e8 glib2-devel-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 33280080f0fa604bb3623ed0466ad485630a959a6990acbd50ff036005e721d9 glib2-devel-debuginfo-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 974d3b46fd61613e1c09b76a3e85895b72b9ae655c9db01315f2323d3a46ed8b glib2-devel-debuginfo-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 974d3b46fd61613e1c09b76a3e85895b72b9ae655c9db01315f2323d3a46ed8b glib2-tests-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: ab745852f9fee30fbfebbe967350256fc8a9bc9b357a8bd450bd4c07e2e938fa glib2-tests-debuginfo-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 970773a3d6178993864804d1d53fb0c9fc16dc082b59bb39eff8b81a2a690cee glib2-tests-debuginfo-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 970773a3d6178993864804d1d53fb0c9fc16dc082b59bb39eff8b81a2a690cee Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM glib2-2.80.4-12.el10_2.14.src.rpm SHA-256: ad21f04f830f590db1ec623413a448c28f93ad714a2fca6657cfd338353d7f86 x86_64 glib2-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 8fc7e7738f680ba9e6064c8df4adb6b28ac5e11688e69cb3f105c1db0bc030af glib2-debuginfo-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 255f328d1e6abe4e78364ce5a2849299021e44b671460f3ff1bf4f3a2a7352b7 glib2-debuginfo-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 255f328d1e6abe4e78364ce5a2849299021e44b671460f3ff1bf4f3a2a7352b7 glib2-debugsource-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 468a044dfa66c818c7f98b119b15c10c20604558ece9dd94e7e191adf249f6e8 glib2-debugsource-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 468a044dfa66c818c7f98b119b15c10c20604558ece9dd94e7e191adf249f6e8 glib2-devel-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 33280080f0fa604bb3623ed0466ad485630a959a6990acbd50ff036005e721d9 glib2-devel-debuginfo-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 974d3b46fd61613e1c09b76a3e85895b72b9ae655c9db01315f2323d3a46ed8b glib2-devel-debuginfo-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 974d3b46fd61613e1c09b76a3e85895b72b9ae655c9db01315f2323d3a46ed8b glib2-tests-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: ab745852f9fee30fbfebbe967350256fc8a9bc9b357a8bd450bd4c07e2e938fa glib2-tests-debuginfo-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 970773a3d6178993864804d1d53fb0c9fc16dc082b59bb39eff8b81a2a690cee glib2-tests-debuginfo-2.80.4-12.el10_2.14.x86_64.rpm SHA-256: 970773a3d6178993864804d1d53fb0c9fc16dc082b59bb39eff8b81a2a690cee Red Hat Enterprise Linux for IBM z Systems 10 SRPM glib2-2.80.4-12.el10_2.14.src.rpm SHA-256: ad21f04f830f590db1ec623413a448c28f93ad714a2fca6657cfd338353d7f86 s390x glib2-2.80.4-12.el10_2.14.s390x.rpm SHA-256: c1026e3ff075b6822923c6491c42f98b45d1af3a56a951a3036c9e92336f1ebe glib2-debuginfo-2.80.4-12.el10_2.14.s390x.rpm SHA-256: a7aae55d2325fd0ca0c79e7bcaa81adb26b4dbb9e64bae857f3a2ee8be7d2008 glib2-debuginfo-2.80.4-12.el10_2.14.s390x.rpm SHA-256: a7aae55d2325fd0ca0c79e7bcaa81adb26b4dbb9e64bae857f3a2ee8be7d2008 glib2-debugsource-2.80.4-12.el10_2.14.s390x.rpm SHA-256: 75af2ba6dc6dd0a0b0536e9f96fe8044688998050fe7d92b30612d6a1e5370e2 glib2-debugsource-2.80.4-12.el10_2.14.s390x.rpm SHA-256: 75af2ba6dc6dd0a0b0536e9f96fe8044688998050fe7d92b30612d6a1e5370e2 glib2-devel-2.80.4-12.el10_2.14.s390x.rpm SHA-256: 687db179076f6d317d977ed23275c07181c452aa78073faba08e82e248a9a38b glib2-devel-debuginfo-2.80.4-12.el10_2.14.s390x.rpm SHA-256: f2a6d0518cac00b8a7248ee8752de0233c30fff013fbde9e918615f1f2c054f7 glib2-devel-debuginfo-2.80.4-12.el10_2.14.s390x.rpm SHA-256: f2a6d0518cac00b8a7248ee8752de0233c30fff013fbde9e918615f1f2c054f7 glib2-tests-2.80.4-12.el10_2.14.s390x.rpm SHA-256: 900fd3ca1103c0a1bc68a4c9addee68fad1a1c0403bcdbb1ffb3ca3b37b96456 glib2-tests-debuginfo-2.80.4-12.el10_2.14.s390x.rpm SHA-256: 0919aab23f6c56bf2e5bc835d53e089efe88c6ef234555e58e64d9596c715747 glib2-tests-debuginfo-2.80.4-12.el10_2.14.s390x.rpm SHA-256: 0919aab23f6c56bf2e5bc835d53e089efe88c6ef234555e58e64d9596c715747 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM glib2-2.80.4-12.el10_2.14.src.rpm SHA-256: ad21f04f830f590db1ec623413a448c28f93ad714a2fca6657cfd338353d7f86 s390x glib2-2.80.4-12.el10_2.14.s390x.rpm SHA-256: c1026e3ff075b6822923c6491c42f98b45d1af3a56a951a3036c9e92336f1ebe glib2-debuginfo-2.80.4-12.el10_2.14.s390x.rpm SHA-256: a7aae55d2325fd0ca0c79e7bcaa81adb26b4dbb9e64bae857f3a2ee8be7d2008 glib2-debuginfo-2.80.4-12.el10_2.14.s390x.rpm SHA-256: a7aae55d2325fd0ca0c79e7bcaa81adb26b4dbb9e64bae857f3a2ee8be7d2008 glib2-debugsource-2.80.4-12.el10_2.14.s390x.rpm SHA-256: 75af2ba6dc6dd0a0b0536e9f96fe8044688998050fe7d92b30612d6a1e5370e2 glib2-debugsource-2.80.4-12.el10_2.14.s390x.rpm SHA-256: 75af2ba6dc6dd0a0b0536e9f96fe8044688998050fe7d92b30612d6a1e5370e2 glib2-devel-2.80.4-12.el10_2.14.s390x.rpm SHA-256: 687db179076f6d317d977ed23275c07181c452aa78073faba08e82e248a9a38b glib2-devel-debuginfo-2.80.4-12.el10_2.14.s390x.rpm SHA-256: f2a6d0518cac00b8a7248ee8752de0233c30fff013fbde9e918615f1f2c054f7 glib2-devel-debuginfo-2.80.4-12.el10_2.14.s390x.rpm SHA-256: f2a6d0518cac00b8a7248ee8752de0233c30fff013fbde9e918615f1f2c054f7 glib2-tests-2.80.4-12.el10_2.14.s390x.rpm SHA-256: 900fd3ca1103c0a1bc68a4c9addee68fad1a1c0403bcdbb1ffb3ca3b37b96456 glib2-tests-debuginfo-2.80.4-12.el10_2.14.s390x.rpm SHA-256: 0919aab23f6c56bf2e5bc835d53e089efe88c6ef234555e58e64d9596c715747 glib2-tests-debuginfo-2.80.4-12.el10_2.14.s390x.rpm SHA-256: 0919aab23f6c56bf2e5bc835d53e089efe88c6ef234555e58e64d9596c715747 Red Hat Enterprise Linux for Power, little endian 10 SRPM glib2-2.80.4-12.el10_2.14.src.rpm SHA-256: ad21f04f830f590db1ec623413a448c28f93ad714a2fca6657cfd338353d7f86 ppc64le glib2-2.80.4-12.el10_2.14.ppc64le.rpm SHA-256: e36f49c02fe2de73a1fa6181a1bc7d96b9d8add066ba6ea54dc9f889ada6e06f glib2-debuginfo-2.80.4-12.el10_2.14.ppc64le.rpm SHA-256: 95c7f0d08a6d00cf9dfc4a8aa36b995c6d1a2d4b2974f6547e1e464f5f4ecc9d glib2-debuginfo-2.80.4-12.el10_2.14.ppc64le.rpm SHA-256: 95c7f