ELSA-2026-57015

ELSA-2026-57015 - glib2 security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-08-19

Description

[2.80.4-21]
- Fix CVE-2026-15588: limit D-Bus auth line read length

[2.80.4-20]
- Fix CVE-2026-58011: range validation in g_date_time_add_full()

[2.80.4-19]
- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW

[2.80.4-18]
- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking

[2.80.4-17]
- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context

[2.80.4-16]
- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list

[2.80.4-15]
- Fix CVE-2026-58013: GIOChannel memcmp buffer over-read

[2.80.4-14]
- Fix CVE-2026-58016: D-Bus introspection XML node nesting validation

[2.80.4-13]
- Fix CVE-2025-14087 and CVE-2025-14512

Related CVEs

CVE-2026-15588

CVE-2026-58010

CVE-2026-58011

CVE-2026-58012

CVE-2026-58013

CVE-2026-58014

CVE-2026-58015

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	glib2-2.80.4-12.el10_2.21.src.rpm	3cb27c51481eaa7b4498c57e4027ab8238525016343826b7c18c0af43d097ce7	-	ol10_aarch64_appstream
	glib2-2.80.4-12.el10_2.21.src.rpm	3cb27c51481eaa7b4498c57e4027ab8238525016343826b7c18c0af43d097ce7	-	ol10_aarch64_baseos_latest
	glib2-2.80.4-12.el10_2.21.src.rpm	3cb27c51481eaa7b4498c57e4027ab8238525016343826b7c18c0af43d097ce7	-	ol10_aarch64_codeready_builder
	glib2-2.80.4-12.el10_2.21.src.rpm	3cb27c51481eaa7b4498c57e4027ab8238525016343826b7c18c0af43d097ce7	-	ol10_aarch64_u2_baseos_patch
	glib2-2.80.4-12.el10_2.21.aarch64.rpm	b774fc0ab0b51a3af3b9b79a99d6b0cfad2661ea8cf3164802f1f7176c5f7da7	-	ol10_aarch64_baseos_latest
	glib2-2.80.4-12.el10_2.21.aarch64.rpm	b774fc0ab0b51a3af3b9b79a99d6b0cfad2661ea8cf3164802f1f7176c5f7da7	-	ol10_aarch64_u2_baseos_patch
	glib2-devel-2.80.4-12.el10_2.21.aarch64.rpm	7a24386316a27766309e4abf93385b56f70d97b4d5c982cd5a1462036c828d39	-	ol10_aarch64_appstream
	glib2-doc-2.80.4-12.el10_2.21.aarch64.rpm	86b6eb12c419f38ee003b74cfddffedcc464f79995807bfa24ffe824d5241927	-	ol10_aarch64_codeready_builder
	glib2-static-2.80.4-12.el10_2.21.aarch64.rpm	62d4a732d8cebdc7c6447948fcdd3063cba2d00552bf9d2058e099932c823ec2	-	ol10_aarch64_codeready_builder
	glib2-tests-2.80.4-12.el10_2.21.aarch64.rpm	b77b4d66a1ed6724136bf498c1d1f9d0a85da4cae69309dd7b09c5ea872eb002	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	glib2-2.80.4-12.el10_2.21.src.rpm	3cb27c51481eaa7b4498c57e4027ab8238525016343826b7c18c0af43d097ce7	-	ol10_x86_64_appstream
	glib2-2.80.4-12.el10_2.21.src.rpm	3cb27c51481eaa7b4498c57e4027ab8238525016343826b7c18c0af43d097ce7	-	ol10_x86_64_baseos_latest
	glib2-2.80.4-12.el10_2.21.src.rpm	3cb27c51481eaa7b4498c57e4027ab8238525016343826b7c18c0af43d097ce7	-	ol10_x86_64_codeready_builder
	glib2-2.80.4-12.el10_2.21.src.rpm	3cb27c51481eaa7b4498c57e4027ab8238525016343826b7c18c0af43d097ce7	-	ol10_x86_64_u2_baseos_patch
	glib2-2.80.4-12.el10_2.21.x86_64.rpm	8d90a801a1c293a159d3e395d769417d24ccf954a8b529a274ae0e34534673a7	-	ol10_x86_64_baseos_latest
	glib2-2.80.4-12.el10_2.21.x86_64.rpm	8d90a801a1c293a159d3e395d769417d24ccf954a8b529a274ae0e34534673a7	-	ol10_x86_64_u2_baseos_patch
	glib2-devel-2.80.4-12.el10_2.21.x86_64.rpm	ca5701195e35941843d581010350e1e10c0b9108c2022e5c4ac37e32558c85ad	-	ol10_x86_64_appstream
	glib2-doc-2.80.4-12.el10_2.21.x86_64.rpm	00c66a2344792c724f17f1ca6ea333937a7e4b78295e72e44701c3d3cc8d348e	-	ol10_x86_64_codeready_builder
	glib2-static-2.80.4-12.el10_2.21.x86_64.rpm	095ed42b10796d84ca90af84e1408486ec7d6938af209fa6c5dff3c97664fa86	-	ol10_x86_64_codeready_builder
	glib2-tests-2.80.4-12.el10_2.21.x86_64.rpm	9ccec1265bb7ca8bf67f98925030fb4382a200fd26566f89dac424f5278f2f0c	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team