AlmaLinux alert ALSA-2026:49512 (mingw-glib2)

From:
             
 
AlmaLinux Errata Notifications via Announce <announce@lists.almalinux.org>
To:
             
 
announce@lists.almalinux.org
Subject:
             
 
[Announce]  [Security Advisory] ALSA-2026:49512: mingw-glib2 security update (Important)
Date:
             
 
Tue, 04 Aug 2026 00:01:52 +0000
Message-ID:
             
 
<0100019fca13a392-8f1b7996-cffe-4a96-a247-3da8467d0c10-000000@email.amazonses.com>
Archive-link:
             
 
Article
Hi,

You are receiving an AlmaLinux Security update email because you subscribed to receive errata
notifications from AlmaLinux.

AlmaLinux: 8
Type: Security
Severity: Important
Release date: 2026-08-03

Summary:

GLib provides the core application building blocks for libraries and applications written in C. It
provides the core object system used in GNOME, the main loop implementation, and a large set of
utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087)
  * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
(CVE-2026-58010)
  * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime
(CVE-2026-58011)
  * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and
g_utf8_next_char() (CVE-2026-58012)
  * glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
(CVE-2026-58013)
  * glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
(CVE-2026-58014)
  * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and
mechanism_client_data_receive (CVE-2026-58015)
  * glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
(CVE-2026-58016)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments,
and other related information, refer to the CVE page(s) listed in the References section.


Full details, updated packages, references, and other related information:
https://errata.almalinux.org/8/ALSA-2026-49512.html

This message is automatically generated, please don’t reply. For further questions, please, contact
us via the AlmaLinux community chat: https://chat.almalinux.org/.
Want to change your notification settings? Sign in and manage mailing lists on
https://lists.almalinux.org.

Kind regards,
AlmaLinux Team
_______________________________________________
Announce mailing list -- announce@lists.almalinux.org
To unsubscribe send an email to announce-leave@lists.almalinux.org