RHSA-2026:19452: Moderate: glib2 security update

Published May 20, 2026
·
Updated

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.Security Fix(es): glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087) glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

42 affected componentsFixes available
Red Hat Red Hat Enterprise Linux for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
redhat/glib2<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-debuginfo<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-debuginfo<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-debugsource<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-debugsource<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-devel<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-devel<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-devel-debuginfo<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-devel-debuginfo<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-doc<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-tests<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-tests-debuginfo<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-tests-debuginfo<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-tests<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-debuginfo<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-debugsource<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-devel<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-devel-debuginfo<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-tests<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-tests-debuginfo<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2<2.68.4-14.el9_4.6.aa
2.68.4-14.el9_4.6.aa
redhat/glib2-debuginfo<2.68.4-14.el9_4.6.aa
2.68.4-14.el9_4.6.aa
redhat/glib2-debugsource<2.68.4-14.el9_4.6.aa
2.68.4-14.el9_4.6.aa
redhat/glib2-devel<2.68.4-14.el9_4.6.aa
2.68.4-14.el9_4.6.aa
redhat/glib2-devel-debuginfo<2.68.4-14.el9_4.6.aa
2.68.4-14.el9_4.6.aa
redhat/glib2-tests<2.68.4-14.el9_4.6.aa
2.68.4-14.el9_4.6.aa
redhat/glib2-tests-debuginfo<2.68.4-14.el9_4.6.aa
2.68.4-14.el9_4.6.aa
redhat/glib2-static<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-static<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-static<2.68.4-14.el9_4.6
2.68.4-14.el9_4.6
redhat/glib2-static<2.68.4-14.el9_4.6.aa
2.68.4-14.el9_4.6.aa

Remediation

Event History

May 20, 2026
Advisory Published
via Red Hat·01:05 AM
Data Sourced
via Red Hat·01:05 AM
DescriptionSeverityAffected Software
May 23, 2026
Advisory Published
via Red Hat·01:34 AM
Data Sourced
via Red Hat·01:34 AM
Remedy

Frequently Asked Questions

1

What is the severity of RHSA-2026:19452?

The severity of RHSA-2026:19452 is classified as moderate.

2

How do I fix RHSA-2026:19452?

To fix RHSA-2026:19452, update the glib2 package to version 2.68.4-14.el9_4.6.

3

Which software versions are affected by RHSA-2026:19452?

RHSA-2026:19452 affects various versions of Red Hat Enterprise Linux and related products.

4

What kind of applications rely on GLib as mentioned in RHSA-2026:19452?

GLib serves as the core application building blocks for libraries and applications written in C, including those used in the GNOME desktop.

5

Is there any additional information for RHSA-2026:19452?

Yes, additional specifics regarding the vulnerability can typically be found in the advisories provided by Red Hat.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203