Red Hat Product Errata RHSA-2026:55440 - Security Advisory Issued: 2026-08-17 Updated: 2026-08-17 RHSA-2026:55440 - Security Advisory Overview Updated Packages Synopsis Moderate: glib2 security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for glib2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010) glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011) glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012) glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013) glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014) glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015) GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2492243 - CVE-2026-58010 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() BZ - 2492245 - CVE-2026-58011 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime BZ - 2492247 - CVE-2026-58012 glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() BZ - 2492248 - CVE-2026-58013 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" BZ - 2492255 - CVE-2026-58014 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" BZ - 2492256 - CVE-2026-58015 glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive BZ - 2499675 - CVE-2026-15588 GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering CVEs CVE-2026-15588 CVE-2026-58010 CVE-2026-58011 CVE-2026-58012 CVE-2026-58013 CVE-2026-58014 CVE-2026-58015 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM glib2-2.68.4-19.el9_8.9.src.rpm SHA-256: f6c27202767306c1f6ac0018cf3989bbbb677888345bbbb0952b08c60c898b19 x86_64 glib2-2.68.4-19.el9_8.9.i686.rpm SHA-256: da1074fd211b7f6ad2f3c5495ce65b330312ab6d54a4313b86904093d9b095f4 glib2-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: 7d41f01824a72558dd3f3464b5d85af81ea7f8c53a28d48a5c06677ae98ba6b7 glib2-debuginfo-2.68.4-19.el9_8.9.i686.rpm SHA-256: 6027e07a324b8158c1eec0f7e3e5d8577fe24062381eff8c6dced8b026d50ea8 glib2-debuginfo-2.68.4-19.el9_8.9.i686.rpm SHA-256: 6027e07a324b8158c1eec0f7e3e5d8577fe24062381eff8c6dced8b026d50ea8 glib2-debuginfo-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: 0a9add30fdab632689dfbb41660d629670b6496d27b6af9f0117f8e0fbdfd3c4 glib2-debuginfo-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: 0a9add30fdab632689dfbb41660d629670b6496d27b6af9f0117f8e0fbdfd3c4 glib2-debugsource-2.68.4-19.el9_8.9.i686.rpm SHA-256: f392a1717d6632eb389fdea768cf75f883d15d723fa12a9538ca0f3436ed40d9 glib2-debugsource-2.68.4-19.el9_8.9.i686.rpm SHA-256: f392a1717d6632eb389fdea768cf75f883d15d723fa12a9538ca0f3436ed40d9 glib2-debugsource-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: 1e49e6db9b9dd8a0863c687abef3f0b952ae8ea35e2fdac66c6247971c561406 glib2-debugsource-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: 1e49e6db9b9dd8a0863c687abef3f0b952ae8ea35e2fdac66c6247971c561406 glib2-devel-2.68.4-19.el9_8.9.i686.rpm SHA-256: e6d7375c15bd76f7ede8b57bf4382cfa2de8e88f848c15607a87f23424bd34f5 glib2-devel-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: ea6eedfe93566ef0c5fa877465d3e6e3256bfe16b8337b28154dc5cd5ee11e0f glib2-devel-debuginfo-2.68.4-19.el9_8.9.i686.rpm SHA-256: 2cfd5dad58e981df979c6a8abee9ecd81a0970fd929aa72cd958684c3db3598a glib2-devel-debuginfo-2.68.4-19.el9_8.9.i686.rpm SHA-256: 2cfd5dad58e981df979c6a8abee9ecd81a0970fd929aa72cd958684c3db3598a glib2-devel-debuginfo-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: bc5d24e8aebe23647e62ae6f74a752873a3347cfb3728ca2adfcb97986e6da78 glib2-devel-debuginfo-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: bc5d24e8aebe23647e62ae6f74a752873a3347cfb3728ca2adfcb97986e6da78 glib2-doc-2.68.4-19.el9_8.9.noarch.rpm SHA-256: 778ecbbe139d2cccd1d575b8e1c4c30624da7e79de04d302540954fc08027cb6 glib2-tests-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: 35e02ae517976bd4920a9c5f48b2263bcd0749534b1c7287d526a3804dfcf658 glib2-tests-debuginfo-2.68.4-19.el9_8.9.i686.rpm SHA-256: 3b0052a06df9a67e94f01c3c0b7e04fb59f3da173ae65a7b713e8480569d70f3 glib2-tests-debuginfo-2.68.4-19.el9_8.9.i686.rpm SHA-256: 3b0052a06df9a67e94f01c3c0b7e04fb59f3da173ae65a7b713e8480569d70f3 glib2-tests-debuginfo-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: 43970aa1576c9bb6b61a2a4aabc5787f7b89856a4a66b3dda45133ba9890e6c9 glib2-tests-debuginfo-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: 43970aa1576c9bb6b61a2a4aabc5787f7b89856a4a66b3dda45133ba9890e6c9 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM glib2-2.68.4-19.el9_8.9.src.rpm SHA-256: f6c27202767306c1f6ac0018cf3989bbbb677888345bbbb0952b08c60c898b19 x86_64 glib2-2.68.4-19.el9_8.9.i686.rpm SHA-256: da1074fd211b7f6ad2f3c5495ce65b330312ab6d54a4313b86904093d9b095f4 glib2-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: 7d41f01824a72558dd3f3464b5d85af81ea7f8c53a28d48a5c06677ae98ba6b7 glib2-debuginfo-2.68.4-19.el9_8.9.i686.rpm SHA-256: 6027e07a324b8158c1eec0f7e3e5d8577fe24062381eff8c6dced8b026d50ea8 glib2-debuginfo-2.68.4-19.el9_8.9.i686.rpm SHA-256: 6027e07a324b8158c1eec0f7e3e5d8577fe24062381eff8c6dced8b026d50ea8 glib2-debuginfo-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: 0a9add30fdab632689dfbb41660d629670b6496d27b6af9f0117f8e0fbdfd3c4 glib2-debuginfo-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: 0a9add30fdab632689dfbb41660d629670b6496d27b6af9f0117f8e0fbdfd3c4 glib2-debugsource-2.68.4-19.el9_8.9.i686.rpm SHA-256: f392a1717d6632eb389fdea768cf75f883d15d723fa12a9538ca0f3436ed40d9 glib2-debugsource-2.68.4-19.el9_8.9.i686.rpm SHA-256: f392a1717d6632eb389fdea768cf75f883d15d723fa12a9538ca0f3436ed40d9 glib2-debugsource-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: 1e49e6db9b9dd8a0863c687abef3f0b952ae8ea35e2fdac66c6247971c561406 glib2-debugsource-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: 1e49e6db9b9dd8a0863c687abef3f0b952ae8ea35e2fdac66c6247971c561406 glib2-devel-2.68.4-19.el9_8.9.i686.rpm SHA-256: e6d7375c15bd76f7ede8b57bf4382cfa2de8e88f848c15607a87f23424bd34f5 glib2-devel-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: ea6eedfe93566ef0c5fa877465d3e6e3256bfe16b8337b28154dc5cd5ee11e0f glib2-devel-debuginfo-2.68.4-19.el9_8.9.i686.rpm SHA-256: 2cfd5dad58e981df979c6a8abee9ecd81a0970fd929aa72cd958684c3db3598a glib2-devel-debuginfo-2.68.4-19.el9_8.9.i686.rpm SHA-256: 2cfd5dad58e981df979c6a8abee9ecd81a0970fd929aa72cd958684c3db3598a glib2-devel-debuginfo-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: bc5d24e8aebe23647e62ae6f74a752873a3347cfb3728ca2adfcb97986e6da78 glib2-devel-debuginfo-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: bc5d24e8aebe23647e62ae6f74a752873a3347cfb3728ca2adfcb97986e6da78 glib2-doc-2.68.4-19.el9_8.9.noarch.rpm SHA-256: 778ecbbe139d2cccd1d575b8e1c4c30624da7e79de04d302540954fc08027cb6 glib2-tests-2.68.4-19.el9_8.9.x86_64.rpm SHA-256: 35e02ae517976bd4920a9c5f48b2263bcd07495