Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat servers with glib2 could be remotely compromised

published 2 months ago

Summary

The glib2 software library included in Red Hat Enterprise Linux has weaknesses that could let an attacker cause the system to crash or run their own code. This can affect any application that relies on that library. Apply the latest Red Hat security update to replace glib2 as soon as possible.

What to do

Update redhat glib2-debuginfo to version 0:2.80.4-12.el10_2.21.
Update redhat glib2-debugsource to version 0:2.80.4-12.el10_2.21.
Update redhat glib2-devel to version 0:2.80.4-12.el10_2.21.
Update redhat glib2-devel-debuginfo to version 0:2.80.4-12.el10_2.21.
Update redhat glib2-tests to version 0:2.80.4-12.el10_2.21.
Update redhat glib2-tests-debuginfo to version 0:2.80.4-12.el10_2.21.
Update redhat glib2 to version 0:2.80.4-12.el10_2.21.
Update redhat glib2-doc to version 0:2.80.4-12.el10_2.21.
Update redhat glib2-static to version 0:2.80.4-12.el10_2.21.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:10.2	redhat	glib2-debuginfo	< 0:2.80.4-12.el10_2.21 Fix: upgrade to 0:2.80.4-12.el10_2.21
Red Hat:enterprise_linux:10.2	redhat	glib2-debugsource	< 0:2.80.4-12.el10_2.21 Fix: upgrade to 0:2.80.4-12.el10_2.21
Red Hat:enterprise_linux:10.2	redhat	glib2-devel	< 0:2.80.4-12.el10_2.21 Fix: upgrade to 0:2.80.4-12.el10_2.21
Red Hat:enterprise_linux:10.2	redhat	glib2-devel-debuginfo	< 0:2.80.4-12.el10_2.21 Fix: upgrade to 0:2.80.4-12.el10_2.21
Red Hat:enterprise_linux:10.2	redhat	glib2-tests	< 0:2.80.4-12.el10_2.21 Fix: upgrade to 0:2.80.4-12.el10_2.21
Red Hat:enterprise_linux:10.2	redhat	glib2-tests-debuginfo	< 0:2.80.4-12.el10_2.21 Fix: upgrade to 0:2.80.4-12.el10_2.21
Red Hat:enterprise_linux:10.2	redhat	glib2	< 0:2.80.4-12.el10_2.21 Fix: upgrade to 0:2.80.4-12.el10_2.21
Red Hat:enterprise_linux:10.2	redhat	glib2-doc	< 0:2.80.4-12.el10_2.21 Fix: upgrade to 0:2.80.4-12.el10_2.21
Red Hat:enterprise_linux:10.2	redhat	glib2-static	< 0:2.80.4-12.el10_2.21 Fix: upgrade to 0:2.80.4-12.el10_2.21

Original advisory text

Red Hat Security Advisory: glib2 security update

References

https://access.redhat.com/errata/RHSA-2026:57015 Vendor Advisory
https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2492243 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2492245 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2492247 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2492248 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2492255 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2499675 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2492256 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57015.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-15588 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-15588 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-15588 Vendor Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/3985 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-58010 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-58010 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-58010 Vendor Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/3915 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-58011 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-58011 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-58011 Vendor Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/3917 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-58012 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-58012 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-58012 Vendor Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/3918 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-58013 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-58013 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-58013 Vendor Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/3925 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-58014 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-58014 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-58014 Vendor Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/3930 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-58015 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-58015 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-58015 Vendor Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/3931 Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.3 High

Timeline

Published20 Aug 2026

Updated22 Aug 2026

First seen22 Aug 2026

Sources

RHSA-2026:57015 · OSV

Track software like this

Free during beta