Red Hat Product Errata RHSA-2026:19524 - Security Advisory
Issued:
2026-05-20
Updated:
2026-05-20

RHSA-2026:19524 - Security Advisory

Synopsis

Moderate: glib2 security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for glib2 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

  • glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087)
  • glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

  • BZ - 2419093 - CVE-2025-14087 glib: GLib: Buffer underflow in GVariant parser leads to heap corruption
  • BZ - 2421339 - CVE-2025-14512 glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6

SRPM
glib2-2.56.4-158.el8_6.5.src.rpm SHA-256: f10c2ad607a22a7ff481b8b0926dbd5681851f3420970c48a6d3db53186cf1d9
x86_64
glib2-2.56.4-158.el8_6.5.i686.rpm SHA-256: 2bd75014fd80fd7c8a4200ef099e3bfda3597474d502ee13a009ea6b21de2ebd
glib2-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: c11148c33f71b165f04a40a68c61888021aec5a74d6fe68a0785f79d170210d4
glib2-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: c1a47546c61e41e154c9574a2394ab0daca91e1e060ddbecb27aa3fff8222f65
glib2-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 28cd8f681974e3c0a745c82784747056ba891ef9ac9332584f154884a784879d
glib2-debugsource-2.56.4-158.el8_6.5.i686.rpm SHA-256: bd134469d60e0b0f92b9265815e19390c942664d5422b6c3769017e31b4b4ea4
glib2-debugsource-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 8af9aeb8eef0521cfd5a18da431f5c4fcfe6a8ca3f24d5ebb93d5e824a0fc5e5
glib2-devel-2.56.4-158.el8_6.5.i686.rpm SHA-256: 14ba3441ef04289ffb56402d60684d476b29190b8274a43c9ea77bc4dab7e26b
glib2-devel-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 7e1ff676ea4546bb34c8e2828bd3b48c0c3cb81b7790c937a803b75528b71450
glib2-devel-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: 20c43c10f44a74c18f6fd031a6236ed9e2b24cdda6bc8d18650a101cdf8d950d
glib2-devel-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 7e762ed3e359be9a8bdcd2c7bb2617bc44012bcd98ecf42e5d929185e7f46067
glib2-fam-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: c257cd8c0ecb2dbcdc77578b6d959e70d015b1024fa5c263792a9b28e2848f29
glib2-fam-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: efc5d0ce0f61618bf564bf42f8d10b14289449806d642b33e6929bcd638678d5
glib2-fam-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 30ad6acda487375fc1e6b039b6826914edcd935a7c2a245096852af567f1812f
glib2-tests-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 6cec329dc215999fc2af5ca2fabfedc26745b99a3d868b6c36032ee7aa196333
glib2-tests-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: 55f196e6e2ad86a7bd745f5311d0e7395663c75db52ef4e6b6825cf7f260840a
glib2-tests-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 2a2dbef24c4b7092ac034146e97882047dee1725a8bc28abd0a0d936d6b213e6

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
glib2-2.56.4-158.el8_6.5.src.rpm SHA-256: f10c2ad607a22a7ff481b8b0926dbd5681851f3420970c48a6d3db53186cf1d9
x86_64
glib2-2.56.4-158.el8_6.5.i686.rpm SHA-256: 2bd75014fd80fd7c8a4200ef099e3bfda3597474d502ee13a009ea6b21de2ebd
glib2-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: c11148c33f71b165f04a40a68c61888021aec5a74d6fe68a0785f79d170210d4
glib2-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: c1a47546c61e41e154c9574a2394ab0daca91e1e060ddbecb27aa3fff8222f65
glib2-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 28cd8f681974e3c0a745c82784747056ba891ef9ac9332584f154884a784879d
glib2-debugsource-2.56.4-158.el8_6.5.i686.rpm SHA-256: bd134469d60e0b0f92b9265815e19390c942664d5422b6c3769017e31b4b4ea4
glib2-debugsource-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 8af9aeb8eef0521cfd5a18da431f5c4fcfe6a8ca3f24d5ebb93d5e824a0fc5e5
glib2-devel-2.56.4-158.el8_6.5.i686.rpm SHA-256: 14ba3441ef04289ffb56402d60684d476b29190b8274a43c9ea77bc4dab7e26b
glib2-devel-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 7e1ff676ea4546bb34c8e2828bd3b48c0c3cb81b7790c937a803b75528b71450
glib2-devel-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: 20c43c10f44a74c18f6fd031a6236ed9e2b24cdda6bc8d18650a101cdf8d950d
glib2-devel-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 7e762ed3e359be9a8bdcd2c7bb2617bc44012bcd98ecf42e5d929185e7f46067
glib2-fam-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: c257cd8c0ecb2dbcdc77578b6d959e70d015b1024fa5c263792a9b28e2848f29
glib2-fam-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: efc5d0ce0f61618bf564bf42f8d10b14289449806d642b33e6929bcd638678d5
glib2-fam-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 30ad6acda487375fc1e6b039b6826914edcd935a7c2a245096852af567f1812f
glib2-tests-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 6cec329dc215999fc2af5ca2fabfedc26745b99a3d868b6c36032ee7aa196333
glib2-tests-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: 55f196e6e2ad86a7bd745f5311d0e7395663c75db52ef4e6b6825cf7f260840a
glib2-tests-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 2a2dbef24c4b7092ac034146e97882047dee1725a8bc28abd0a0d936d6b213e6

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
glib2-2.56.4-158.el8_6.5.src.rpm SHA-256: f10c2ad607a22a7ff481b8b0926dbd5681851f3420970c48a6d3db53186cf1d9
x86_64
glib2-2.56.4-158.el8_6.5.i686.rpm SHA-256: 2bd75014fd80fd7c8a4200ef099e3bfda3597474d502ee13a009ea6b21de2ebd
glib2-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: c11148c33f71b165f04a40a68c61888021aec5a74d6fe68a0785f79d170210d4
glib2-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: c1a47546c61e41e154c9574a2394ab0daca91e1e060ddbecb27aa3fff8222f65
glib2-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 28cd8f681974e3c0a745c82784747056ba891ef9ac9332584f154884a784879d
glib2-debugsource-2.56.4-158.el8_6.5.i686.rpm SHA-256: bd134469d60e0b0f92b9265815e19390c942664d5422b6c3769017e31b4b4ea4
glib2-debugsource-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 8af9aeb8eef0521cfd5a18da431f5c4fcfe6a8ca3f24d5ebb93d5e824a0fc5e5
glib2-devel-2.56.4-158.el8_6.5.i686.rpm SHA-256: 14ba3441ef04289ffb56402d60684d476b29190b8274a43c9ea77bc4dab7e26b
glib2-devel-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 7e1ff676ea4546bb34c8e2828bd3b48c0c3cb81b7790c937a803b75528b71450
glib2-devel-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: 20c43c10f44a74c18f6fd031a6236ed9e2b24cdda6bc8d18650a101cdf8d950d
glib2-devel-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 7e762ed3e359be9a8bdcd2c7bb2617bc44012bcd98ecf42e5d929185e7f46067
glib2-fam-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: c257cd8c0ecb2dbcdc77578b6d959e70d015b1024fa5c263792a9b28e2848f29
glib2-fam-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: efc5d0ce0f61618bf564bf42f8d10b14289449806d642b33e6929bcd638678d5
glib2-fam-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 30ad6acda487375fc1e6b039b6826914edcd935a7c2a245096852af567f1812f
glib2-tests-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 6cec329dc215999fc2af5ca2fabfedc26745b99a3d868b6c36032ee7aa196333
glib2-tests-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: 55f196e6e2ad86a7bd745f5311d0e7395663c75db52ef4e6b6825cf7f260840a
glib2-tests-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 2a2dbef24c4b7092ac034146e97882047dee1725a8bc28abd0a0d936d6b213e6

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
glib2-2.56.4-158.el8_6.5.src.rpm SHA-256: f10c2ad607a22a7ff481b8b0926dbd5681851f3420970c48a6d3db53186cf1d9
ppc64le
glib2-2.56.4-158.el8_6.5.ppc64le.rpm SHA-256: c2e327405d4e5c95d54f4c695f6730668997210d2791405e469350e03f86deb1
glib2-debuginfo-2.56.4-158.el8_6.5.ppc64le.rpm SHA-256: 405e2792c90bd50a9e4724953c208d2dd7df3e09636d04a0e830f7be79f56e6f
glib2-debugsource-2.56.4-158.el8_6.5.ppc64le.rpm SHA-256: 347f47302cd64b53ecd56c58231e434e8835e3548f8937e33ce9f66d033a3185
glib2-devel-2.56.4-158.el8_6.5.ppc64le.rpm SHA-256: a5c3d3c94f3ac3a705bc3933712cc34fdc39bd8d33d0d52efdca005a6abf8050
glib2-devel-debuginfo-2.56.4-158.el8_6.5.ppc64le.rpm SHA-256: fb0c19c52fe346e7a9b70d4e3dee6a4fc46c49dcdf6060d064861ec85d92bc57
glib2-fam-2.56.4-158.el8_6.5.ppc64le.rpm SHA-256: 5891578f73092fb1678b95176c889f0e53c28c712ff337557ba1c509f5a2737d
glib2-fam-debuginfo-2.56.4-158.el8_6.5.ppc64le.rpm SHA-256: ad8d55801c6af48b18394a287a803e57e3339f813321136880e2e98a1066efa7
glib2-tests-2.56.4-158.el8_6.5.ppc64le.rpm SHA-256: 67b623b9e081d0279274e44a5593a70d3e48da3aa4f2de21bbb3c23ba6669905
glib2-tests-debuginfo-2.56.4-158.el8_6.5.ppc64le.rpm SHA-256: 679b2d0551fafa19bc37fc6f228a256d82667314b90ac6a00b429758474a671f

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
glib2-2.56.4-158.el8_6.5.src.rpm SHA-256: f10c2ad607a22a7ff481b8b0926dbd5681851f3420970c48a6d3db53186cf1d9
x86_64
glib2-2.56.4-158.el8_6.5.i686.rpm SHA-256: 2bd75014fd80fd7c8a4200ef099e3bfda3597474d502ee13a009ea6b21de2ebd
glib2-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: c11148c33f71b165f04a40a68c61888021aec5a74d6fe68a0785f79d170210d4
glib2-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: c1a47546c61e41e154c9574a2394ab0daca91e1e060ddbecb27aa3fff8222f65
glib2-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 28cd8f681974e3c0a745c82784747056ba891ef9ac9332584f154884a784879d
glib2-debugsource-2.56.4-158.el8_6.5.i686.rpm SHA-256: bd134469d60e0b0f92b9265815e19390c942664d5422b6c3769017e31b4b4ea4
glib2-debugsource-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 8af9aeb8eef0521cfd5a18da431f5c4fcfe6a8ca3f24d5ebb93d5e824a0fc5e5
glib2-devel-2.56.4-158.el8_6.5.i686.rpm SHA-256: 14ba3441ef04289ffb56402d60684d476b29190b8274a43c9ea77bc4dab7e26b
glib2-devel-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 7e1ff676ea4546bb34c8e2828bd3b48c0c3cb81b7790c937a803b75528b71450
glib2-devel-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: 20c43c10f44a74c18f6fd031a6236ed9e2b24cdda6bc8d18650a101cdf8d950d
glib2-devel-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 7e762ed3e359be9a8bdcd2c7bb2617bc44012bcd98ecf42e5d929185e7f46067
glib2-fam-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: c257cd8c0ecb2dbcdc77578b6d959e70d015b1024fa5c263792a9b28e2848f29
glib2-fam-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: efc5d0ce0f61618bf564bf42f8d10b14289449806d642b33e6929bcd638678d5
glib2-fam-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 30ad6acda487375fc1e6b039b6826914edcd935a7c2a245096852af567f1812f
glib2-tests-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 6cec329dc215999fc2af5ca2fabfedc26745b99a3d868b6c36032ee7aa196333
glib2-tests-debuginfo-2.56.4-158.el8_6.5.i686.rpm SHA-256: 55f196e6e2ad86a7bd745f5311d0e7395663c75db52ef4e6b6825cf7f260840a
glib2-tests-debuginfo-2.56.4-158.el8_6.5.x86_64.rpm SHA-256: 2a2dbef24c4b7092ac034146e97882047dee1725a8bc28abd0a0d936d6b213e6

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.