An integer underflow vulnerability (CVE-2026-58016, CVSS 7.5 HIGH) exists in the GLib library within the `g_dbus_node_info_new_for_xml` function, which could be exploited via crafted D-Bus introspection XML. The vulnerability affects glib2 versions prior to 2.88.1, specifically impacting Red Hat Enterprise Linux versions 6.0, 7.0, 8.0, and 9.0. The fix is included in glib2 version 2.88.1.
Red Hat Product Errata RHSA-2026:51183 - Security Advisory Issued: 2026-08-06 Updated: 2026-08-06 RHSA-2026:51183 - Security Advisory Overview Updated Packages Synopsis Important: glib2 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for glib2 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le Fixes BZ - 2492257 - CVE-2026-58016 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" CVEs CVE-2026-58016 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM glib2-2.56.1-13.el7_9.src.rpm SHA-256: 2169325cf34639796556ba77f576eaab38ec1435e7bd896489e52a3e2f92e61d x86_64 glib2-2.56.1-13.el7_9.i686.rpm SHA-256: be4135c7814554bbe007f0bd258b4841710d19a3f4f711f2ab3f7702d11ba42b glib2-2.56.1-13.el7_9.x86_64.rpm SHA-256: b4d66166a6404699950b0bac78ebe581dc1bb6925abffda4acc51f7cc0cee660 glib2-debuginfo-2.56.1-13.el7_9.i686.rpm SHA-256: a3ea0913cee185e7b08cf41b8a5995c467ad4b0cf4751f5be04efd05d8eb2b38 glib2-debuginfo-2.56.1-13.el7_9.i686.rpm SHA-256: a3ea0913cee185e7b08cf41b8a5995c467ad4b0cf4751f5be04efd05d8eb2b38 glib2-debuginfo-2.56.1-13.el7_9.x86_64.rpm SHA-256: a6870ac7d940bc9c5514bfe3ce914bd2a4beeeafc7054af260db7db0dc5dd344 glib2-debuginfo-2.56.1-13.el7_9.x86_64.rpm SHA-256: a6870ac7d940bc9c5514bfe3ce914bd2a4beeeafc7054af260db7db0dc5dd344 glib2-devel-2.56.1-13.el7_9.i686.rpm SHA-256: 4dce7cd38462ed76ec852ad20fa32c5fa98e092c0f129f064e2b5a7c84778d53 glib2-devel-2.56.1-13.el7_9.x86_64.rpm SHA-256: ea16252861736d7533f8792206ae3662b18a9c5c41cc1c4bab6ca03a0400e9c0 glib2-doc-2.56.1-13.el7_9.noarch.rpm SHA-256: 088c3f05b2cf281005ae288b0eb9081b50e206348829177f9e185df973a935a5 glib2-fam-2.56.1-13.el7_9.x86_64.rpm SHA-256: da3aebfe2bc7ecae88463ffe087f78b43ae91f032960d316943679a2cd68a021 glib2-static-2.56.1-13.el7_9.i686.rpm SHA-256: 4bfd858960a753e89ddb268853a428f709f39a314da3cffc2dc3b42b85a2b9c1 glib2-static-2.56.1-13.el7_9.x86_64.rpm SHA-256: 2feddc9a7f033660dc4aa208574deedb830dbc6973b513116907bc607734f73f glib2-tests-2.56.1-13.el7_9.x86_64.rpm SHA-256: cf2e3f25f977d28d958c3f4d8c79f07e8a3c5c0b1e644b3dccd1d3030478f8c7 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM glib2-2.56.1-13.el7_9.src.rpm SHA-256: 2169325cf34639796556ba77f576eaab38ec1435e7bd896489e52a3e2f92e61d s390x glib2-2.56.1-13.el7_9.s390.rpm SHA-256: 6fdf3c22990bd0d59fcb5f5c204b38c4875396140d098a1b6d274f9d67da0626 glib2-2.56.1-13.el7_9.s390x.rpm SHA-256: 8bf032182e8ad98c46eccf212d652642ee9dab7bc898673139ef3b147f321be2 glib2-debuginfo-2.56.1-13.el7_9.s390.rpm SHA-256: e243f88781cf098647a274568a1a35e708540957a332131645d9f947a06ee40f glib2-debuginfo-2.56.1-13.el7_9.s390.rpm SHA-256: e243f88781cf098647a274568a1a35e708540957a332131645d9f947a06ee40f glib2-debuginfo-2.56.1-13.el7_9.s390x.rpm SHA-256: 38d2e62469d8a96be89df7e3afba9b2c888b3f7e22735440bd112aeda49f83dc glib2-debuginfo-2.56.1-13.el7_9.s390x.rpm SHA-256: 38d2e62469d8a96be89df7e3afba9b2c888b3f7e22735440bd112aeda49f83dc glib2-devel-2.56.1-13.el7_9.s390.rpm SHA-256: 275f4c38c238550c70d7b8924d90a9488ad4ec8c8ecae50d3dfc83cd42cd4f64 glib2-devel-2.56.1-13.el7_9.s390x.rpm SHA-256: 73825bcb33d8312792e7bea08bc836b3d9e5157f4d41a3bed81ff5693aa3e8d1 glib2-doc-2.56.1-13.el7_9.noarch.rpm SHA-256: 088c3f05b2cf281005ae288b0eb9081b50e206348829177f9e185df973a935a5 glib2-fam-2.56.1-13.el7_9.s390x.rpm SHA-256: 193fc5964974b262215d94ecf276528a80162160b563f282e4fa3dfd42d7f597 glib2-static-2.56.1-13.el7_9.s390.rpm SHA-256: 2b2276a3dcaf788cfb1acdce56c22da0a34cd8612c09753fabed6c7c676b4da7 glib2-static-2.56.1-13.el7_9.s390x.rpm SHA-256: f2b132652128a8e8c60f84672be7d4ac5d84a1be00bcc1f236204860d2eb9bd2 glib2-tests-2.56.1-13.el7_9.s390x.rpm SHA-256: e729a2f76b834a09bcd658edd12b0984c19723a35501086e12fdef239e466ad3 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM glib2-2.56.1-13.el7_9.src.rpm SHA-256: 2169325cf34639796556ba77f576eaab38ec1435e7bd896489e52a3e2f92e61d ppc64 glib2-2.56.1-13.el7_9.ppc.rpm SHA-256: 54356012432807aa2df3964e89c14def17ea37696e7089af64f3d9cbd2e95f14 glib2-2.56.1-13.el7_9.ppc64.rpm SHA-256: 7f3ddcc451c61691a1330947a9897321c54e28dd8ebb00078941d9068ab1b658 glib2-debuginfo-2.56.1-13.el7_9.ppc.rpm SHA-256: ebdccd35dc1b88c9c81ddee53eb156e4e42909ee33aff1c067793876278bd6cc glib2-debuginfo-2.56.1-13.el7_9.ppc.rpm SHA-256: ebdccd35dc1b88c9c81ddee53eb156e4e42909ee33aff1c067793876278bd6cc glib2-debuginfo-2.56.1-13.el7_9.ppc64.rpm SHA-256: 60bbe99e2e16c4293d478270880bfdff504ac29ccb1b20f30f01af7206a71cb4 glib2-debuginfo-2.56.1-13.el7_9.ppc64.rpm SHA-256: 60bbe99e2e16c4293d478270880bfdff504ac29ccb1b20f30f01af7206a71cb4 glib2-devel-2.56.1-13.el7_9.ppc.rpm SHA-256: d9f7ad76bdc4d6c218b115207c5dc31a5de7b827ad0d6bed9f38c53ac917d2e7 glib2-devel-2.56.1-13.el7_9.ppc64.rpm SHA-256: 2457921550bb570226cbeef8ad83ab0dc9bb4a68b851343a3af22849e82adb69 glib2-doc-2.56.1-13.el7_9.noarch.rpm SHA-256: 088c3f05b2cf281005ae288b0eb9081b50e206348829177f9e185df973a935a5 glib2-fam-2.56.1-13.el7_9.ppc64.rpm SHA-256: 64d67a73f20ae48bb48869e5babe24102a24e850d5673b7930ea117b5f34ad0f glib2-static-2.56.1-13.el7_9.ppc.rpm SHA-256: 8e8286c041efddbf7696a63f3023036dead72045aa5d0753bb6565821b9d9e45 glib2-static-2.56.1-13.el7_9.ppc64.rpm SHA-256: 89af26d5b66d495356b7ca5c952c62af717f513e2110dc7e44a63641c3769657 glib2-tests-2.56.1-13.el7_9.ppc64.rpm SHA-256: 4e0549d622a1ec2953aac562729da0558fc32c42847a99599bcacc623fc57b0f Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 SRPM glib2-2.56.1-13.el7_9.src.rpm SHA-256: 2169325cf34639796556ba77f576eaab38ec1435e7bd896489e52a3e2f92e61d ppc64le glib2-2.56.1-13.el7_9.ppc64le.rpm SHA-256: 003b6214654c58300b1655e01d9161c4e5271640c05a44c5f09ffc066922baf4 glib2-debuginfo-2.56.1-13.el7_9.ppc64le.rpm SHA-256: e87641aa0255700074b28a86be5f64069e2251d88da95b0198dec994b09b291d glib2-debuginfo-2.56.1-13.el7_9.ppc64le.rpm SHA-256: e87641aa0255700074b28a86be5f64069e2251d88da95b0198dec994b09b291d glib2-devel-2.56.1-13.el7_9.ppc64le.rpm SHA-256: 06014c495d75bade3cc814a707826358105a2a02eebdb39d7e5c1f5deedef75c glib2-doc-2.56.1-13.el7_9.noarch.rpm SHA-256: 088c3f05b2cf281005ae288b0eb9081b50e206348829177f9e185df973a935a5 glib2-fam-2.56.1-13.el7_9.ppc64le.rpm SHA-256: 2cbfd54c09b36d23ddd95cc937e2fc4fb9c8e18ee095156ed06ddaf8bbfae7cd glib2-static-2.56.1-13.el7_9.ppc64le.rpm SHA-256: 03c3a2c72e67e1261ff715aa11fd3e0437649170bbcfd93a1755e6829e0fa94e glib2-tests-2.56.1-13.el7_9.ppc64le.rpm SHA-256: 3457e0cadf53ad5cf71647b3eabea4092bfaa4a2b6ff0bb1dd2096b98cb943b8 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .