CVE-2026-58012

mingw32-glib2: GLib provides the core application building blocks for libraries and applications written in C

CVE-2026-58012 is fixed in 29 products on 1 platform, first by DEBIAN-CVE-2026-58012, released July 1, 2026. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.2
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0049
42nd percentile

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087) * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010) * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011) * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012) * glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013) * glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014) * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015) * glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
gir1.2-girepository-3.0 · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 gir1.2-girepository-3.0 2.80.0-6ubuntu3.9 Jul 20, 2026
gir1.2-girepository-3.0 · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 gir1.2-girepository-3.0 2.88.0-1ubuntu0.1 Jul 20, 2026
gir1.2-glib-2.0 · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 gir1.2-glib-2.0 2.80.0-6ubuntu3.9 Jul 20, 2026
gir1.2-glib-2.0 · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 gir1.2-glib-2.0 2.88.0-1ubuntu0.1 Jul 20, 2026
girepository-tools · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 girepository-tools 2.88.0-1ubuntu0.1 Jul 20, 2026
glib2 · RHEL 10 2.80.4-4.el10_0.17 RHSA-2026:65767 Jul 12, 2026
glib2 · RHEL 8 0:2.56.4-177.el8_10 RHSA-2026:61766 Sep 13, 2026
glib2 · RHEL 9 0:2.68.4-19.el9_8.9 RHSA-2026:55440 Aug 19, 2026
glib2 · almalinux 10 2.80.4-12.el10_2.21 ALSA-2026:57015 Aug 19, 2026
glib2 · almalinux 8 2.56.4-177.el8_10 ALSA-2026:61766 Aug 31, 2026
glib2 · almalinux 9 2.68.4-19.el9_8.9 ALSA-2026:55440 Aug 17, 2026
glib2 · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2 · ol 10 0:2.80.4-12.el10_2.21 ELSA-2026-57015 Aug 19, 2026
glib2 · ol 8 0:2.56.4-177.el8_10 ELSA-2026-61766-0 Sep 1, 2026
glib2 · ol 9 0:2.68.4-19.el9_8.9 ELSA-2026-55440 Aug 17, 2026
glib2 · opensuse-leap 16.0 2.84.4-160000.4.1 OPENSUSE-SU-2026:21410-1 Jul 22, 2026
glib2 · rocky 10 0:2.80.4-12.el10_2.21 RLSA-2026:57015 Aug 20, 2026
glib2 · rocky 8 0:2.56.4-177.el8_10 RLSA-2026:61766 Sep 1, 2026
glib2 · rocky 9 0:2.68.4-19.el9_8.9 RLSA-2026:55440 Aug 17, 2026
glib2 · sles 15.6 2.78.6-150600.4.38.1 SUSE-SU-2026:3341-1 Jul 28, 2026
glib2 · sles 15.7 2.78.6-150600.4.38.1 SUSE-SU-2026:3341-1 Jul 28, 2026
glib2 · sles 16.0 2.84.4-160000.4.1 SUSE-SU-2026:22846-1 Jul 22, 2026
glib2-debuginfo · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2-debugsource · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2-devel · RHEL 8 0:2.56.4-177.el8_10 RHSA-2026:61766 Sep 13, 2026
glib2-devel · RHEL 9 0:2.68.4-19.el9_8.9 RHSA-2026:55440 Aug 19, 2026
glib2-devel · almalinux 10 2.80.4-12.el10_2.21 ALSA-2026:57015 Aug 19, 2026
glib2-devel · almalinux 8 2.56.4-177.el8_10 ALSA-2026:61766 Aug 31, 2026
glib2-devel · almalinux 9 2.68.4-19.el9_8.9 ALSA-2026:55440 Aug 17, 2026
glib2-devel · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2-devel · ol 10 0:2.80.4-12.el10_2.21 ELSA-2026-57015 Aug 19, 2026
glib2-devel · ol 8 0:2.56.4-177.el8_10 ELSA-2026-61766-0 Sep 1, 2026
glib2-devel · ol 9 0:2.68.4-19.el9_8.9 ELSA-2026-55440 Aug 17, 2026
glib2-devel-debuginfo · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2-doc · RHEL 8 0:2.56.4-177.el8_10 RHSA-2026:61766 Sep 13, 2026
glib2-doc · RHEL 9 0:2.68.4-19.el9_8.9 RHSA-2026:55440 Aug 19, 2026
glib2-doc · almalinux 10 2.80.4-12.el10_2.21 ALSA-2026:57015 Aug 19, 2026
glib2-doc · almalinux 8 2.56.4-177.el8_10 ALSA-2026:61766 Aug 31, 2026
glib2-doc · almalinux 9 2.68.4-19.el9_8.9 ALSA-2026:55440 Aug 17, 2026
glib2-doc · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2-doc · ol 10 0:2.80.4-12.el10_2.21 ELSA-2026-57015 Aug 19, 2026
glib2-doc · ol 8 0:2.56.4-177.el8_10 ELSA-2026-61766-0 Sep 1, 2026
glib2-doc · ol 9 0:2.68.4-19.el9_8.9 ELSA-2026-55440 Aug 17, 2026
glib2-doc · opensuse-leap 16.0 2.84.4-160000.4.1 OPENSUSE-SU-2026:21410-1 Jul 22, 2026
glib2-doc · sles 16.0 2.84.4-160000.4.1 SUSE-SU-2026:22846-1 Jul 22, 2026
glib2-fam · RHEL 8 0:2.56.4-177.el8_10 RHSA-2026:61766 Sep 13, 2026
glib2-fam · almalinux 8 2.56.4-177.el8_10 ALSA-2026:61766 Aug 31, 2026
glib2-fam · ol 8 0:2.56.4-177.el8_10 ELSA-2026-61766-0 Sep 1, 2026
glib2-static · RHEL 8 0:2.56.4-177.el8_10 RHSA-2026:61766 Sep 13, 2026
glib2-static · RHEL 9 0:2.68.4-19.el9_8.9 RHSA-2026:55440 Aug 19, 2026
glib2-static · almalinux 10 2.80.4-12.el10_2.21 ALSA-2026:57015 Aug 19, 2026
glib2-static · almalinux 8 2.56.4-177.el8_10 ALSA-2026:61766 Aug 31, 2026
glib2-static · almalinux 9 2.68.4-19.el9_8.9 ALSA-2026:55440 Aug 17, 2026
glib2-static · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2-static · ol 10 0:2.80.4-12.el10_2.21 ELSA-2026-57015 Aug 19, 2026
glib2-static · ol 8 0:2.56.4-177.el8_10 ELSA-2026-61766-0 Sep 1, 2026
glib2-static · ol 9 0:2.68.4-19.el9_8.9 ELSA-2026-55440 Aug 17, 2026
glib2-tests · RHEL 8 0:2.56.4-177.el8_10 RHSA-2026:61766 Sep 13, 2026
glib2-tests · RHEL 9 0:2.68.4-19.el9_8.9 RHSA-2026:55440 Aug 19, 2026
glib2-tests · almalinux 10 2.80.4-12.el10_2.21 ALSA-2026:57015 Aug 19, 2026
glib2-tests · almalinux 8 2.56.4-177.el8_10 ALSA-2026:61766 Aug 31, 2026
glib2-tests · almalinux 9 2.68.4-19.el9_8.9 ALSA-2026:55440 Aug 17, 2026
glib2-tests · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2-tests · ol 10 0:2.80.4-12.el10_2.21 ELSA-2026-57015 Aug 19, 2026
glib2-tests · ol 8 0:2.56.4-177.el8_10 ELSA-2026-61766-0 Sep 1, 2026
glib2-tests · ol 9 0:2.68.4-19.el9_8.9 ELSA-2026-55440 Aug 17, 2026
glib2-tests-debuginfo · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2.0 · Debian 13.5 (trixie) 2.84.4-3~deb13u4 DEBIAN-CVE-2026-58012 Jul 1, 2026
glib2.0 · Debian 14 2.88.1-2 DEBIAN-CVE-2026-58012 Jul 1, 2026
libgio-2.0-dev-bin · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 libgio-2.0-dev-bin 2.88.0-1ubuntu0.1 Jul 20, 2026
libgirepository-2.0-0 · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 libgirepository-2.0-0 2.80.0-6ubuntu3.9 Jul 20, 2026
libgirepository-2.0-0 · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 libgirepository-2.0-0 2.88.0-1ubuntu0.1 Jul 20, 2026
libglib2.0-0 · Ubuntu 18.04.6 LTS (bionic) 2.56.4-0ubuntu0.18.04.9+esm6 libglib2.0-0 2.56.4-0ubuntu0.18.04.9+esm6 Jul 20, 2026
libglib2.0-0 · Ubuntu 20.04 LTS (focal) 2.64.6-1~ubuntu20.04.9+esm2 libglib2.0-0 2.64.6-1~ubuntu20.04.9+esm2 Jul 20, 2026
libglib2.0-0 · Ubuntu 22.04.1 LTS (jammy) 2.72.4-0ubuntu2.10 libglib2.0-0 2.72.4-0ubuntu2.10 Jul 20, 2026
libglib2.0-0t64 · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 libglib2.0-0t64 2.80.0-6ubuntu3.9 Jul 20, 2026
libglib2.0-0t64 · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 libglib2.0-0t64 2.88.0-1ubuntu0.1 Jul 20, 2026
libglib2.0-bin · Ubuntu 18.04.6 LTS (bionic) 2.56.4-0ubuntu0.18.04.9+esm6 libglib2.0-bin 2.56.4-0ubuntu0.18.04.9+esm6 Jul 20, 2026
libglib2.0-bin · Ubuntu 20.04 LTS (focal) 2.64.6-1~ubuntu20.04.9+esm2 libglib2.0-bin 2.64.6-1~ubuntu20.04.9+esm2 Jul 20, 2026
libglib2.0-bin · Ubuntu 22.04.1 LTS (jammy) 2.72.4-0ubuntu2.10 libglib2.0-bin 2.72.4-0ubuntu2.10 Jul 20, 2026
libglib2.0-bin · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 libglib2.0-bin 2.80.0-6ubuntu3.9 Jul 20, 2026
libglib2.0-bin · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 libglib2.0-bin 2.88.0-1ubuntu0.1 Jul 20, 2026
libglib2.0-data · Ubuntu 18.04.6 LTS (bionic) 2.56.4-0ubuntu0.18.04.9+esm6 libglib2.0-data 2.56.4-0ubuntu0.18.04.9+esm6 Jul 20, 2026
libglib2.0-data · Ubuntu 20.04 LTS (focal) 2.64.6-1~ubuntu20.04.9+esm2 libglib2.0-data 2.64.6-1~ubuntu20.04.9+esm2 Jul 20, 2026
libglib2.0-data · Ubuntu 22.04.1 LTS (jammy) 2.72.4-0ubuntu2.10 libglib2.0-data 2.72.4-0ubuntu2.10 Jul 20, 2026
libglib2.0-data · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 libglib2.0-data 2.80.0-6ubuntu3.9 Jul 20, 2026
libglib2.0-data · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 libglib2.0-data 2.88.0-1ubuntu0.1 Jul 20, 2026
libglib2.0-dev-bin · Ubuntu 18.04.6 LTS (bionic) 2.56.4-0ubuntu0.18.04.9+esm6 libglib2.0-dev-bin 2.56.4-0ubuntu0.18.04.9+esm6 Jul 20, 2026
libglib2.0-dev-bin · Ubuntu 20.04 LTS (focal) 2.64.6-1~ubuntu20.04.9+esm2 libglib2.0-dev-bin 2.64.6-1~ubuntu20.04.9+esm2 Jul 20, 2026
libglib2.0-dev-bin · Ubuntu 22.04.1 LTS (jammy) 2.72.4-0ubuntu2.10 libglib2.0-dev-bin 2.72.4-0ubuntu2.10 Jul 20, 2026
libglib2.0-dev-bin · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 libglib2.0-dev-bin 2.80.0-6ubuntu3.9 Jul 20, 2026
libglib2.0-dev-bin · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 libglib2.0-dev-bin 2.88.0-1ubuntu0.1 Jul 20, 2026
libglib2.0-tests · Ubuntu 18.04.6 LTS (bionic) 2.56.4-0ubuntu0.18.04.9+esm6 libglib2.0-tests 2.56.4-0ubuntu0.18.04.9+esm6 Jul 20, 2026
libglib2.0-tests · Ubuntu 20.04 LTS (focal) 2.64.6-1~ubuntu20.04.9+esm2 libglib2.0-tests 2.64.6-1~ubuntu20.04.9+esm2 Jul 20, 2026
libglib2.0-tests · Ubuntu 22.04.1 LTS (jammy) 2.72.4-0ubuntu2.10 libglib2.0-tests 2.72.4-0ubuntu2.10 Jul 20, 2026
libglib2.0-tests · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 libglib2.0-tests 2.80.0-6ubuntu3.9 Jul 20, 2026
libglib2.0-tests · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 libglib2.0-tests 2.88.0-1ubuntu0.1 Jul 20, 2026
mingw-glib2 · Fedora 43 2.86.5-2.fc43 FEDORA-2026-8E39F35701 Jul 8, 2026
mingw-glib2 · rocky 8 0:2.70.1-9.el8_10 RLSA-2026:49512 Aug 4, 2026
mingw32-glib2 · Fedora 43 2.86.5-2.fc43 FEDORA-2026-8E39F35701 Jul 8, 2026
mingw32-glib2 · RHEL 8 0:2.70.1-9.el8_10 RHSA-2026:49512 Aug 5, 2026
mingw32-glib2 · almalinux 8 2.70.1-9.el8_10 ALSA-2026:49512 Aug 3, 2026
mingw32-glib2 · ol 8 0:2.70.1-9.el8_10 ELSA-2026-49512 Aug 4, 2026
mingw32-glib2-debuginfo · Fedora 43 2.86.5-2.fc43 FEDORA-2026-8E39F35701 Jul 8, 2026
mingw32-glib2-static · Fedora 43 2.86.5-2.fc43 FEDORA-2026-8E39F35701 Jul 8, 2026
mingw32-glib2-static · RHEL 8 0:2.70.1-9.el8_10 RHSA-2026:49512 Aug 5, 2026
mingw32-glib2-static · almalinux 8 2.70.1-9.el8_10 ALSA-2026:49512 Aug 3, 2026
mingw32-glib2-static · ol 8 0:2.70.1-9.el8_10 ELSA-2026-49512 Aug 4, 2026
mingw64-glib2 · Fedora 43 2.86.5-2.fc43 FEDORA-2026-8E39F35701 Jul 8, 2026
mingw64-glib2 · RHEL 8 0:2.70.1-9.el8_10 RHSA-2026:49512 Aug 5, 2026
mingw64-glib2 · almalinux 8 2.70.1-9.el8_10 ALSA-2026:49512 Aug 3, 2026
mingw64-glib2 · ol 8 0:2.70.1-9.el8_10 ELSA-2026-49512 Aug 4, 2026
mingw64-glib2-debuginfo · Fedora 43 2.86.5-2.fc43 FEDORA-2026-8E39F35701 Jul 8, 2026
mingw64-glib2-static · Fedora 43 2.86.5-2.fc43 FEDORA-2026-8E39F35701 Jul 8, 2026
mingw64-glib2-static · RHEL 8 0:2.70.1-9.el8_10 RHSA-2026:49512 Aug 5, 2026
mingw64-glib2-static · almalinux 8 2.70.1-9.el8_10 ALSA-2026:49512 Aug 3, 2026
mingw64-glib2-static · ol 8 0:2.70.1-9.el8_10 ELSA-2026-49512 Aug 4, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.