ELSA-2026-55440

ELSA-2026-55440 - glib2 security update

Type:SECURITY
Impact:MODERATE
Release Date:2026-08-17

Description


[2.68.4-19.9]
- Fix CVE-2026-15588: limit D-Bus auth line read length

[2.68.4-19.8]
- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
- Resolves: RHEL-212157

[2.68.4-19.7]
- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW
- Resolves: RHEL-212217

[2.68.4-19.6]
- Fix CVE-2026-58011: range validation in g_date_time_add_full()
- Resolves: RHEL-212194

[2.68.4-19.5]
- Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators
- Resolves: RHEL-212236

[2.68.4-19.4]
- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list
- Resolves: RHEL-190589

[2.68.4-19.3]
- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context
- Resolves: RHEL-212261


Related CVEs


CVE-2026-15588
CVE-2026-58010
CVE-2026-58011
CVE-2026-58012
CVE-2026-58013
CVE-2026-58014
CVE-2026-58015

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) glib2-2.68.4-19.el9_8.9.src.rpm027d18ca1b725ffe723abe8cdd71d30e64ac420de62c556c1be8d516c12ed974-ol9_aarch64_appstream
glib2-2.68.4-19.el9_8.9.src.rpm027d18ca1b725ffe723abe8cdd71d30e64ac420de62c556c1be8d516c12ed974-ol9_aarch64_baseos_latest
glib2-2.68.4-19.el9_8.9.src.rpm027d18ca1b725ffe723abe8cdd71d30e64ac420de62c556c1be8d516c12ed974-ol9_aarch64_codeready_builder
glib2-2.68.4-19.el9_8.9.src.rpm027d18ca1b725ffe723abe8cdd71d30e64ac420de62c556c1be8d516c12ed974-ol9_aarch64_u8_baseos_patch
glib2-2.68.4-19.el9_8.9.aarch64.rpm90f12c2bf1018fb7d32a8934c5fa9480c22bccc7e6efeea12f3d1ee383577a73-ol9_aarch64_baseos_latest
glib2-2.68.4-19.el9_8.9.aarch64.rpm90f12c2bf1018fb7d32a8934c5fa9480c22bccc7e6efeea12f3d1ee383577a73-ol9_aarch64_u8_baseos_patch
glib2-devel-2.68.4-19.el9_8.9.aarch64.rpm68bc2060585ab8ae03ba26140d60c9fc935c20a8d8fe4a83519a815ebb251d2e-ol9_aarch64_appstream
glib2-doc-2.68.4-19.el9_8.9.noarch.rpm0cb2a94e1c5a9833c0ccbdca00e97533506571a7c45205d075ae6d7af3741dff-ol9_aarch64_appstream
glib2-static-2.68.4-19.el9_8.9.aarch64.rpm3e684d84a5d8ce638850ba6bb746eed048fbf03a716d064fa83c21cb95f013f3-ol9_aarch64_codeready_builder
glib2-tests-2.68.4-19.el9_8.9.aarch64.rpme85f8c34ae3e7c28c5adf7c3d2a54431a4ba4b9ae14485ee052439f7383da8c7-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) glib2-2.68.4-19.el9_8.9.src.rpm027d18ca1b725ffe723abe8cdd71d30e64ac420de62c556c1be8d516c12ed974-ol9_x86_64_appstream
glib2-2.68.4-19.el9_8.9.src.rpm027d18ca1b725ffe723abe8cdd71d30e64ac420de62c556c1be8d516c12ed974-ol9_x86_64_baseos_latest
glib2-2.68.4-19.el9_8.9.src.rpm027d18ca1b725ffe723abe8cdd71d30e64ac420de62c556c1be8d516c12ed974-ol9_x86_64_codeready_builder
glib2-2.68.4-19.el9_8.9.src.rpm027d18ca1b725ffe723abe8cdd71d30e64ac420de62c556c1be8d516c12ed974-ol9_x86_64_u8_baseos_patch
glib2-2.68.4-19.el9_8.9.i686.rpm77907bb7a276085a91fdb151af3b7a6eeee871422fbc4d0f0e1687f798355801-ol9_x86_64_baseos_latest
glib2-2.68.4-19.el9_8.9.i686.rpm77907bb7a276085a91fdb151af3b7a6eeee871422fbc4d0f0e1687f798355801-ol9_x86_64_u8_baseos_patch
glib2-2.68.4-19.el9_8.9.x86_64.rpmf5654cca395096df18c4dd66b1ff5e8cfd1dcac9c4f97c9b9e081f2686c748d9-ol9_x86_64_baseos_latest
glib2-2.68.4-19.el9_8.9.x86_64.rpmf5654cca395096df18c4dd66b1ff5e8cfd1dcac9c4f97c9b9e081f2686c748d9-ol9_x86_64_u8_baseos_patch
glib2-devel-2.68.4-19.el9_8.9.i686.rpm38686112c36a8d2615a85aa4e17ad6453ecc7d83b5424eb36943bb360665b9df-ol9_x86_64_appstream
glib2-devel-2.68.4-19.el9_8.9.x86_64.rpmf60786938d240b989860e3fe6dee40169d1d562b4f47ea21c87145b513579c67-ol9_x86_64_appstream
glib2-doc-2.68.4-19.el9_8.9.noarch.rpm0cb2a94e1c5a9833c0ccbdca00e97533506571a7c45205d075ae6d7af3741dff-ol9_x86_64_appstream
glib2-static-2.68.4-19.el9_8.9.i686.rpm1f3d93c17464995f2a32d2b176ed567eed0476836b6fb6cc0ab2da9000205ff1-ol9_x86_64_codeready_builder
glib2-static-2.68.4-19.el9_8.9.x86_64.rpma3f2898f44d407ced66082594d79ff8f7e3de250bb52d1f87e13312d189c377b-ol9_x86_64_codeready_builder
glib2-tests-2.68.4-19.el9_8.9.x86_64.rpm6b32bbcb41e894f49768236c4d5af3f6188515817501b5b5dcf87183aae7bafa-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete