ELSA-2026-64799-0

ELSA-2026-64799-0 - glib2 security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-09-08

Description

[2.80.4-22]
- Fix CVE-2026-16118: heap-buffer-overflow in xdgmime byte-swap

[2.80.4-21]
- Fix CVE-2026-15588: limit D-Bus auth line read length

[2.80.4-20]
- Fix CVE-2026-58011: range validation in g_date_time_add_full()

[2.80.4-19]
- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW

[2.80.4-18]
- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking

[2.80.4-17]
- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context

[2.80.4-16]
- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list

[2.80.4-15]
- Fix CVE-2026-58013: GIOChannel memcmp buffer over-read

[2.80.4-14]
- Fix CVE-2026-58016: D-Bus introspection XML node nesting validation

[2.80.4-13]
- Fix CVE-2025-14087 and CVE-2025-14512

Related CVEs

CVE-2026-16118

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	glib2-2.80.4-12.el10_2.22.src.rpm	a51f3aa32f563516ef96a4b127aa4021f418aa3d2f93dc726b24e78fa2ff21df	-	ol10_aarch64_appstream
	glib2-2.80.4-12.el10_2.22.src.rpm	a51f3aa32f563516ef96a4b127aa4021f418aa3d2f93dc726b24e78fa2ff21df	-	ol10_aarch64_baseos_latest
	glib2-2.80.4-12.el10_2.22.src.rpm	a51f3aa32f563516ef96a4b127aa4021f418aa3d2f93dc726b24e78fa2ff21df	-	ol10_aarch64_codeready_builder
	glib2-2.80.4-12.el10_2.22.src.rpm	a51f3aa32f563516ef96a4b127aa4021f418aa3d2f93dc726b24e78fa2ff21df	-	ol10_aarch64_u2_baseos_patch
	glib2-2.80.4-12.el10_2.22.aarch64.rpm	b429824f8c6d826668d1fc60c628c88075d8e487287f00946d0f3c86ea5389a8	-	ol10_aarch64_baseos_latest
	glib2-2.80.4-12.el10_2.22.aarch64.rpm	b429824f8c6d826668d1fc60c628c88075d8e487287f00946d0f3c86ea5389a8	-	ol10_aarch64_u2_baseos_patch
	glib2-devel-2.80.4-12.el10_2.22.aarch64.rpm	513a684765605a95f052c615691330f58da1bffb4041f70e85dad3b3eb10cc23	-	ol10_aarch64_appstream
	glib2-doc-2.80.4-12.el10_2.22.aarch64.rpm	b395f11d5a5f73cebeaf53923b0793e94d0f9f8034f759bce07d9b16f672499d	-	ol10_aarch64_codeready_builder
	glib2-static-2.80.4-12.el10_2.22.aarch64.rpm	1f1e68790310b2e2babd74652b3ef3053739ab06f679849586f6b02b00e0d805	-	ol10_aarch64_codeready_builder
	glib2-tests-2.80.4-12.el10_2.22.aarch64.rpm	9d679b2bcb32abf9a53f2d0c07d544c1525d1abab8ffa5beefe1a65b16bcb314	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	glib2-2.80.4-12.el10_2.22.src.rpm	a51f3aa32f563516ef96a4b127aa4021f418aa3d2f93dc726b24e78fa2ff21df	-	ol10_x86_64_appstream
	glib2-2.80.4-12.el10_2.22.src.rpm	a51f3aa32f563516ef96a4b127aa4021f418aa3d2f93dc726b24e78fa2ff21df	-	ol10_x86_64_baseos_latest
	glib2-2.80.4-12.el10_2.22.src.rpm	a51f3aa32f563516ef96a4b127aa4021f418aa3d2f93dc726b24e78fa2ff21df	-	ol10_x86_64_codeready_builder
	glib2-2.80.4-12.el10_2.22.src.rpm	a51f3aa32f563516ef96a4b127aa4021f418aa3d2f93dc726b24e78fa2ff21df	-	ol10_x86_64_u2_baseos_patch
	glib2-2.80.4-12.el10_2.22.x86_64.rpm	32e98ba2bfd4c8f9bf2db936cbcac36b18d5d502e75478f8560133674f5420e5	-	ol10_x86_64_baseos_latest
	glib2-2.80.4-12.el10_2.22.x86_64.rpm	32e98ba2bfd4c8f9bf2db936cbcac36b18d5d502e75478f8560133674f5420e5	-	ol10_x86_64_u2_baseos_patch
	glib2-devel-2.80.4-12.el10_2.22.x86_64.rpm	743971d369571a57ef4909a33dd9837051009b37024bc675aa9c81cd84e901ba	-	ol10_x86_64_appstream
	glib2-doc-2.80.4-12.el10_2.22.x86_64.rpm	4346853868b4e36bb44323510df36bdb6a54825beac6d935b597d95cb8dec680	-	ol10_x86_64_codeready_builder
	glib2-static-2.80.4-12.el10_2.22.x86_64.rpm	489556403752114db6d2aa9ed393f53cdece2fd96fceb75b6d7ba9b0b62c99b0	-	ol10_x86_64_codeready_builder
	glib2-tests-2.80.4-12.el10_2.22.x86_64.rpm	7f3a567ddf88443aa7e9bdba6efcc06612bbdf69efce66ec1a38b362c98c654d	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team