An integer underflow vulnerability (CVE-2026-58016, CVSS 7.5 HIGH) exists in the GLib library's `g_dbus_node_info_new_for_xml` function, which could be exploited via crafted D-Bus introspection XML. The vulnerability affects glib2 versions prior to 2.88.1, specifically impacting Red Hat Enterprise Linux versions 6.0, 7.0, 8.0, and 9.0. The fix is included in glib2 version 2.88.1, which is provided in the referenced Red Hat security update for RHEL 9.6 EUS and related streams.
Red Hat Product Errata RHSA-2026:51175 - Security Advisory Issued: 2026-08-06 Updated: 2026-08-06 RHSA-2026:51175 - Security Advisory Overview Updated Packages Synopsis Important: glib2 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for glib2 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2492257 - CVE-2026-58016 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" CVEs CVE-2026-58016 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM glib2-2.68.4-16.el9_6.6.src.rpm SHA-256: 7b1090fe64f795bc36873578e275cc4cad385981b339783aee386f90c5f7732b x86_64 glib2-2.68.4-16.el9_6.6.i686.rpm SHA-256: cd4e38dce6feda7833155326a253affedc5e991aec4fc8e3f907670cc8308700 glib2-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: 3924fd6bc69b72d130521612b01df40d87e1a3ac06cbf4401e8d1772697d6069 glib2-debuginfo-2.68.4-16.el9_6.6.i686.rpm SHA-256: 1e110107fc775eb12b106fe22f3afa792e1198a9424c40bf1e6122f3c62df4a4 glib2-debuginfo-2.68.4-16.el9_6.6.i686.rpm SHA-256: 1e110107fc775eb12b106fe22f3afa792e1198a9424c40bf1e6122f3c62df4a4 glib2-debuginfo-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: 4a3a47accea0360d062499abccf3a9d6076d6e815f55f1c7a838a73c56a226c9 glib2-debuginfo-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: 4a3a47accea0360d062499abccf3a9d6076d6e815f55f1c7a838a73c56a226c9 glib2-debugsource-2.68.4-16.el9_6.6.i686.rpm SHA-256: db485cc4978ee1b4eaa6e9273ad1b9585d49e3f4b3b7cedb2f4dc6e0992b55f9 glib2-debugsource-2.68.4-16.el9_6.6.i686.rpm SHA-256: db485cc4978ee1b4eaa6e9273ad1b9585d49e3f4b3b7cedb2f4dc6e0992b55f9 glib2-debugsource-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: ee815ca8beb9eca986cc70319ab38f1e545d287e4c91651232dd02aa73f7b1c7 glib2-debugsource-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: ee815ca8beb9eca986cc70319ab38f1e545d287e4c91651232dd02aa73f7b1c7 glib2-devel-2.68.4-16.el9_6.6.i686.rpm SHA-256: d5d4bcdf7bd99b05beb22af1391676e53fa58f69c79273c92e00b4dd24dd94ea glib2-devel-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: d4725a803cf8127277b7adf22961e2d76ae4e4930447e1bb0479059adfc8ea03 glib2-devel-debuginfo-2.68.4-16.el9_6.6.i686.rpm SHA-256: 11d1e75018db2ec3832088c38faec05b0ae175e6817f2cd72020e8531ca59581 glib2-devel-debuginfo-2.68.4-16.el9_6.6.i686.rpm SHA-256: 11d1e75018db2ec3832088c38faec05b0ae175e6817f2cd72020e8531ca59581 glib2-devel-debuginfo-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: 05b3713125f6b03e5d51ecfb104a7c89a1cebf3e2af8f1235e1f4a3f3a43799f glib2-devel-debuginfo-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: 05b3713125f6b03e5d51ecfb104a7c89a1cebf3e2af8f1235e1f4a3f3a43799f glib2-doc-2.68.4-16.el9_6.6.noarch.rpm SHA-256: f9f7f69209d377385f43d99fff0c6949ca0a921219663ca6ad152c291686c977 glib2-tests-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: b071af6f801994ee1fb821f504f65b432164182aeee55fd647ac21fae396fc2d glib2-tests-debuginfo-2.68.4-16.el9_6.6.i686.rpm SHA-256: 5d629bc918ffce130bea7ef817f3a0da302134fccaf9642b900fca083f1ec7d7 glib2-tests-debuginfo-2.68.4-16.el9_6.6.i686.rpm SHA-256: 5d629bc918ffce130bea7ef817f3a0da302134fccaf9642b900fca083f1ec7d7 glib2-tests-debuginfo-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: b633ee274d962c35bb11c7596ed8c57e5f055462b3a709da70f15a3bca84ede2 glib2-tests-debuginfo-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: b633ee274d962c35bb11c7596ed8c57e5f055462b3a709da70f15a3bca84ede2 Red Hat Enterprise Linux Server - AUS 9.6 SRPM glib2-2.68.4-16.el9_6.6.src.rpm SHA-256: 7b1090fe64f795bc36873578e275cc4cad385981b339783aee386f90c5f7732b x86_64 glib2-2.68.4-16.el9_6.6.i686.rpm SHA-256: cd4e38dce6feda7833155326a253affedc5e991aec4fc8e3f907670cc8308700 glib2-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: 3924fd6bc69b72d130521612b01df40d87e1a3ac06cbf4401e8d1772697d6069 glib2-debuginfo-2.68.4-16.el9_6.6.i686.rpm SHA-256: 1e110107fc775eb12b106fe22f3afa792e1198a9424c40bf1e6122f3c62df4a4 glib2-debuginfo-2.68.4-16.el9_6.6.i686.rpm SHA-256: 1e110107fc775eb12b106fe22f3afa792e1198a9424c40bf1e6122f3c62df4a4 glib2-debuginfo-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: 4a3a47accea0360d062499abccf3a9d6076d6e815f55f1c7a838a73c56a226c9 glib2-debuginfo-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: 4a3a47accea0360d062499abccf3a9d6076d6e815f55f1c7a838a73c56a226c9 glib2-debugsource-2.68.4-16.el9_6.6.i686.rpm SHA-256: db485cc4978ee1b4eaa6e9273ad1b9585d49e3f4b3b7cedb2f4dc6e0992b55f9 glib2-debugsource-2.68.4-16.el9_6.6.i686.rpm SHA-256: db485cc4978ee1b4eaa6e9273ad1b9585d49e3f4b3b7cedb2f4dc6e0992b55f9 glib2-debugsource-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: ee815ca8beb9eca986cc70319ab38f1e545d287e4c91651232dd02aa73f7b1c7 glib2-debugsource-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: ee815ca8beb9eca986cc70319ab38f1e545d287e4c91651232dd02aa73f7b1c7 glib2-devel-2.68.4-16.el9_6.6.i686.rpm SHA-256: d5d4bcdf7bd99b05beb22af1391676e53fa58f69c79273c92e00b4dd24dd94ea glib2-devel-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: d4725a803cf8127277b7adf22961e2d76ae4e4930447e1bb0479059adfc8ea03 glib2-devel-debuginfo-2.68.4-16.el9_6.6.i686.rpm SHA-256: 11d1e75018db2ec3832088c38faec05b0ae175e6817f2cd72020e8531ca59581 glib2-devel-debuginfo-2.68.4-16.el9_6.6.i686.rpm SHA-256: 11d1e75018db2ec3832088c38faec05b0ae175e6817f2cd72020e8531ca59581 glib2-devel-debuginfo-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: 05b3713125f6b03e5d51ecfb104a7c89a1cebf3e2af8f1235e1f4a3f3a43799f glib2-devel-debuginfo-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: 05b3713125f6b03e5d51ecfb104a7c89a1cebf3e2af8f1235e1f4a3f3a43799f glib2-doc-2.68.4-16.el9_6.6.noarch.rpm SHA-256: f9f7f69209d377385f43d99fff0c6949ca0a921219663ca6ad152c291686c977 glib2-tests-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: b071af6f801994ee1fb821f504f65b432164182aeee55fd647ac21fae396fc2d glib2-tests-debuginfo-2.68.4-16.el9_6.6.i686.rpm SHA-256: 5d629bc918ffce130bea7ef817f3a0da302134fccaf9642b900fca083f1ec7d7 glib2-tests-debuginfo-2.68.4-16.el9_6.6.i686.rpm SHA-256: 5d629bc918ffce130bea7ef817f3a0da302134fccaf9642b900fca083f1ec7d7 glib2-tests-debuginfo-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: b633ee274d962c35bb11c7596ed8c57e5f055462b3a709da70f15a3bca84ede2 glib2-tests-debuginfo-2.68.4-16.el9_6.6.x86_64.rpm SHA-256: b633ee274d962c35bb11c7596ed8c57e5f055462b3a709da70f15a3bca84ede2 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 SRPM glib2-2.68.4-16.el9_6.6.src.rpm SHA-256: 7b1090fe64f795bc36873578e275cc4cad385981b339783aee386f90c5f7732b s390x glib2-2.68.4-16.el9_6.6.s390x.rpm SHA-256: 985a5207ca5f5d6bc63d8cdd23cc838945bc51f110edd90c5c23c9cd2092d735 glib2-debuginfo-2.68.4-16.el9_6.6.s390x.rpm SHA-256: de90b83516ff6d624d03f6fc5cf17ca12fbdc94de75476a208675d8e04a70bbb glib2-debuginfo-2.68.4-16.el9_6.6.s390x.rpm SHA-256: de90b83516ff6d624d03f6fc5cf17ca12fbdc94de75476a208675d8e04a70bbb glib2-debugsource-2.68.4-16.el9_6.6.s390x.rpm SHA-256: ea3c9a9b42f68716f9f0423df676906997853991bac5b78f8a53367b77b96293 glib2-debugsource-2.68.4-16.el9_6.6.s390x.rpm SHA-256: ea3c9a9b42f68716f9f0423df676906997853991bac5b78f8a53367b77b96293 glib2-devel-2.68.4-16.el9_6.6.s390x.rpm SHA-256: 8b34f6bc2746fa422d47279e43e7cb7361cccfd4c402696a83c20cb596a56b35 glib2-devel-debuginfo-2.68.4-16.el9_6.6.s390x.rpm SHA-256: 322b7f2506cc3219db0fe83608282c0389e322e15663b85bddb96f616abefd18 glib2-devel-debuginfo-2.68.4-16.el9_6.6.s390x.rpm SHA-256: 322b7f2506cc3219db0fe83608282c0389e322e15663b85bddb96f616abefd18 glib2-doc-2.68.4-16.el9_6.6.noarch.rpm SHA-256: f9f7f69209d377385f43d99fff0c6949ca0a921219663ca6ad152c291686c977 glib2-tests-2.68.4-16.el9_6.6.s390x.rpm SHA-256: