CVE-2026-58016

glib2: GLib provides the core application building blocks for libraries and applications written in C

CVE-2026-58016 is fixed in 29 products on 1 platform, first by RHSA-2026:51185, released April 8, 2026. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
9.1
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0056
46th percentile

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
gir1.2-girepository-3.0 · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 gir1.2-girepository-3.0 2.80.0-6ubuntu3.9 Jul 20, 2026
gir1.2-girepository-3.0 · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 gir1.2-girepository-3.0 2.88.0-1ubuntu0.1 Jul 20, 2026
gir1.2-glib-2.0 · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 gir1.2-glib-2.0 2.80.0-6ubuntu3.9 Jul 20, 2026
gir1.2-glib-2.0 · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 gir1.2-glib-2.0 2.88.0-1ubuntu0.1 Jul 20, 2026
girepository-tools · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 girepository-tools 2.88.0-1ubuntu0.1 Jul 20, 2026
glib2 · RHEL 10 2.80.4-4.el10_0.10 RHSA-2026:51185 Apr 8, 2026
glib2 · RHEL 8 0:2.56.4-170.el8_10 RHSA-2026:42090 Jul 21, 2026
glib2 · RHEL 9 0:2.68.4-19.el9_8.2 RHSA-2026:42089 Jul 21, 2026
glib2 · almalinux 10 2.80.4-12.el10_2.14 ALSA-2026:42063 Jul 20, 2026
glib2 · almalinux 8 2.56.4-170.el8_10 ALSA-2026:42090 Jul 20, 2026
glib2 · almalinux 9 2.68.4-19.el9_8.2 ALSA-2026:42089 Jul 20, 2026
glib2 · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2 · ol 10 0:2.80.4-12.el10_2.14 ELSA-2026-42063 Jul 20, 2026
glib2 · ol 8 0:2.56.4-170.el8_10 ELSA-2026-42090 Jul 20, 2026
glib2 · ol 9 0:2.68.4-19.el9_8.2 ELSA-2026-42089 Jul 20, 2026
glib2 · opensuse-leap 16.0 2.84.4-160000.4.1 OPENSUSE-SU-2026:21410-1 Jul 22, 2026
glib2 · rocky 10 0:2.80.4-12.el10_2.14 RLSA-2026:42063 Jul 22, 2026
glib2 · rocky 8 0:2.56.4-170.el8_10 RLSA-2026:42090 Jul 21, 2026
glib2 · rocky 9 0:2.68.4-19.el9_8.2 RLSA-2026:42089 Jul 22, 2026
glib2 · sles 15.6 2.78.6-150600.4.38.1 SUSE-SU-2026:3341-1 Jul 28, 2026
glib2 · sles 15.7 2.78.6-150600.4.38.1 SUSE-SU-2026:3341-1 Jul 28, 2026
glib2 · sles 16.0 2.84.4-160000.4.1 SUSE-SU-2026:22846-1 Jul 22, 2026
glib2-debuginfo · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2-debugsource · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2-devel · RHEL 8 0:2.56.4-170.el8_10 RHSA-2026:42090 Jul 21, 2026
glib2-devel · RHEL 9 0:2.68.4-19.el9_8.2 RHSA-2026:42089 Jul 21, 2026
glib2-devel · almalinux 10 2.80.4-12.el10_2.14 ALSA-2026:42063 Jul 20, 2026
glib2-devel · almalinux 8 2.56.4-170.el8_10 ALSA-2026:42090 Jul 20, 2026
glib2-devel · almalinux 9 2.68.4-19.el9_8.2 ALSA-2026:42089 Jul 20, 2026
glib2-devel · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2-devel · ol 10 0:2.80.4-12.el10_2.14 ELSA-2026-42063 Jul 20, 2026
glib2-devel · ol 8 0:2.56.4-170.el8_10 ELSA-2026-42090 Jul 20, 2026
glib2-devel · ol 9 0:2.68.4-19.el9_8.2 ELSA-2026-42089 Jul 20, 2026
glib2-devel-debuginfo · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2-doc · RHEL 8 0:2.56.4-170.el8_10 RHSA-2026:42090 Jul 21, 2026
glib2-doc · RHEL 9 0:2.68.4-19.el9_8.2 RHSA-2026:42089 Jul 21, 2026
glib2-doc · almalinux 10 2.80.4-12.el10_2.14 ALSA-2026:42063 Jul 20, 2026
glib2-doc · almalinux 8 2.56.4-170.el8_10 ALSA-2026:42090 Jul 20, 2026
glib2-doc · almalinux 9 2.68.4-19.el9_8.2 ALSA-2026:42089 Jul 20, 2026
glib2-doc · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2-doc · ol 10 0:2.80.4-12.el10_2.14 ELSA-2026-42063 Jul 20, 2026
glib2-doc · ol 8 0:2.56.4-170.el8_10 ELSA-2026-42090 Jul 20, 2026
glib2-doc · ol 9 0:2.68.4-19.el9_8.2 ELSA-2026-42089 Jul 20, 2026
glib2-doc · opensuse-leap 16.0 2.84.4-160000.4.1 OPENSUSE-SU-2026:21410-1 Jul 22, 2026
glib2-doc · sles 16.0 2.84.4-160000.4.1 SUSE-SU-2026:22846-1 Jul 22, 2026
glib2-fam · RHEL 8 0:2.56.4-170.el8_10 RHSA-2026:42090 Jul 21, 2026
glib2-fam · almalinux 8 2.56.4-170.el8_10 ALSA-2026:42090 Jul 20, 2026
glib2-fam · ol 8 0:2.56.4-170.el8_10 ELSA-2026-42090 Jul 20, 2026
glib2-static · RHEL 8 0:2.56.4-170.el8_10 RHSA-2026:42090 Jul 21, 2026
glib2-static · RHEL 9 0:2.68.4-19.el9_8.2 RHSA-2026:42089 Jul 21, 2026
glib2-static · almalinux 10 2.80.4-12.el10_2.14 ALSA-2026:42063 Jul 20, 2026
glib2-static · almalinux 8 2.56.4-170.el8_10 ALSA-2026:42090 Jul 20, 2026
glib2-static · almalinux 9 2.68.4-19.el9_8.2 ALSA-2026:42089 Jul 20, 2026
glib2-static · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2-static · ol 10 0:2.80.4-12.el10_2.14 ELSA-2026-42063 Jul 20, 2026
glib2-static · ol 8 0:2.56.4-170.el8_10 ELSA-2026-42090 Jul 20, 2026
glib2-static · ol 9 0:2.68.4-19.el9_8.2 ELSA-2026-42089 Jul 20, 2026
glib2-tests · RHEL 8 0:2.56.4-170.el8_10 RHSA-2026:42090 Jul 21, 2026
glib2-tests · RHEL 9 0:2.68.4-19.el9_8.2 RHSA-2026:42089 Jul 21, 2026
glib2-tests · almalinux 10 2.80.4-12.el10_2.14 ALSA-2026:42063 Jul 20, 2026
glib2-tests · almalinux 8 2.56.4-170.el8_10 ALSA-2026:42090 Jul 20, 2026
glib2-tests · almalinux 9 2.68.4-19.el9_8.2 ALSA-2026:42089 Jul 20, 2026
glib2-tests · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2-tests · ol 10 0:2.80.4-12.el10_2.14 ELSA-2026-42063 Jul 20, 2026
glib2-tests · ol 8 0:2.56.4-170.el8_10 ELSA-2026-42090 Jul 20, 2026
glib2-tests · ol 9 0:2.68.4-19.el9_8.2 ELSA-2026-42089 Jul 20, 2026
glib2-tests-debuginfo · amzn 2023 2.82.2-770.amzn2023 ALAS2023-2026-1942 Jul 20, 2026
glib2.0 · Debian 13.5 (trixie) 2.84.4-3~deb13u4 DEBIAN-CVE-2026-58016 Jun 30, 2026
glib2.0 · Debian 14 2.88.3-2 DEBIAN-CVE-2026-58016 Jun 30, 2026
libgio-2.0-dev-bin · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 libgio-2.0-dev-bin 2.88.0-1ubuntu0.1 Jul 20, 2026
libgirepository-2.0-0 · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 libgirepository-2.0-0 2.80.0-6ubuntu3.9 Jul 20, 2026
libgirepository-2.0-0 · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 libgirepository-2.0-0 2.88.0-1ubuntu0.1 Jul 20, 2026
libglib2.0-0 · Ubuntu 18.04.6 LTS (bionic) 2.56.4-0ubuntu0.18.04.9+esm6 libglib2.0-0 2.56.4-0ubuntu0.18.04.9+esm6 Jul 20, 2026
libglib2.0-0 · Ubuntu 20.04 LTS (focal) 2.64.6-1~ubuntu20.04.9+esm2 libglib2.0-0 2.64.6-1~ubuntu20.04.9+esm2 Jul 20, 2026
libglib2.0-0 · Ubuntu 22.04.1 LTS (jammy) 2.72.4-0ubuntu2.10 libglib2.0-0 2.72.4-0ubuntu2.10 Jul 20, 2026
libglib2.0-0t64 · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 libglib2.0-0t64 2.80.0-6ubuntu3.9 Jul 20, 2026
libglib2.0-0t64 · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 libglib2.0-0t64 2.88.0-1ubuntu0.1 Jul 20, 2026
libglib2.0-bin · Ubuntu 18.04.6 LTS (bionic) 2.56.4-0ubuntu0.18.04.9+esm6 libglib2.0-bin 2.56.4-0ubuntu0.18.04.9+esm6 Jul 20, 2026
libglib2.0-bin · Ubuntu 20.04 LTS (focal) 2.64.6-1~ubuntu20.04.9+esm2 libglib2.0-bin 2.64.6-1~ubuntu20.04.9+esm2 Jul 20, 2026
libglib2.0-bin · Ubuntu 22.04.1 LTS (jammy) 2.72.4-0ubuntu2.10 libglib2.0-bin 2.72.4-0ubuntu2.10 Jul 20, 2026
libglib2.0-bin · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 libglib2.0-bin 2.80.0-6ubuntu3.9 Jul 20, 2026
libglib2.0-bin · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 libglib2.0-bin 2.88.0-1ubuntu0.1 Jul 20, 2026
libglib2.0-data · Ubuntu 18.04.6 LTS (bionic) 2.56.4-0ubuntu0.18.04.9+esm6 libglib2.0-data 2.56.4-0ubuntu0.18.04.9+esm6 Jul 20, 2026
libglib2.0-data · Ubuntu 20.04 LTS (focal) 2.64.6-1~ubuntu20.04.9+esm2 libglib2.0-data 2.64.6-1~ubuntu20.04.9+esm2 Jul 20, 2026
libglib2.0-data · Ubuntu 22.04.1 LTS (jammy) 2.72.4-0ubuntu2.10 libglib2.0-data 2.72.4-0ubuntu2.10 Jul 20, 2026
libglib2.0-data · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 libglib2.0-data 2.80.0-6ubuntu3.9 Jul 20, 2026
libglib2.0-data · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 libglib2.0-data 2.88.0-1ubuntu0.1 Jul 20, 2026
libglib2.0-dev-bin · Ubuntu 18.04.6 LTS (bionic) 2.56.4-0ubuntu0.18.04.9+esm6 libglib2.0-dev-bin 2.56.4-0ubuntu0.18.04.9+esm6 Jul 20, 2026
libglib2.0-dev-bin · Ubuntu 20.04 LTS (focal) 2.64.6-1~ubuntu20.04.9+esm2 libglib2.0-dev-bin 2.64.6-1~ubuntu20.04.9+esm2 Jul 20, 2026
libglib2.0-dev-bin · Ubuntu 22.04.1 LTS (jammy) 2.72.4-0ubuntu2.10 libglib2.0-dev-bin 2.72.4-0ubuntu2.10 Jul 20, 2026
libglib2.0-dev-bin · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 libglib2.0-dev-bin 2.80.0-6ubuntu3.9 Jul 20, 2026
libglib2.0-dev-bin · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 libglib2.0-dev-bin 2.88.0-1ubuntu0.1 Jul 20, 2026
libglib2.0-tests · Ubuntu 18.04.6 LTS (bionic) 2.56.4-0ubuntu0.18.04.9+esm6 libglib2.0-tests 2.56.4-0ubuntu0.18.04.9+esm6 Jul 20, 2026
libglib2.0-tests · Ubuntu 20.04 LTS (focal) 2.64.6-1~ubuntu20.04.9+esm2 libglib2.0-tests 2.64.6-1~ubuntu20.04.9+esm2 Jul 20, 2026
libglib2.0-tests · Ubuntu 22.04.1 LTS (jammy) 2.72.4-0ubuntu2.10 libglib2.0-tests 2.72.4-0ubuntu2.10 Jul 20, 2026
libglib2.0-tests · Ubuntu 24.04.5 LTS (noble) 2.80.0-6ubuntu3.9 libglib2.0-tests 2.80.0-6ubuntu3.9 Jul 20, 2026
libglib2.0-tests · Ubuntu 26.04.1 LTS (resolute) 2.88.0-1ubuntu0.1 libglib2.0-tests 2.88.0-1ubuntu0.1 Jul 20, 2026
mingw-glib2 · Fedora 43 2.86.5-2.fc43 FEDORA-2026-8E39F35701 Jul 8, 2026
mingw-glib2 · rocky 8 0:2.70.1-9.el8_10 RLSA-2026:49512 Aug 4, 2026
mingw32-glib2 · Fedora 43 2.86.5-2.fc43 FEDORA-2026-8E39F35701 Jul 8, 2026
mingw32-glib2 · RHEL 8 0:2.70.1-9.el8_10 RHSA-2026:49512 Aug 5, 2026
mingw32-glib2 · almalinux 8 2.70.1-9.el8_10 ALSA-2026:49512 Aug 3, 2026
mingw32-glib2 · ol 8 0:2.70.1-9.el8_10 ELSA-2026-49512 Aug 4, 2026
mingw32-glib2-debuginfo · Fedora 43 2.86.5-2.fc43 FEDORA-2026-8E39F35701 Jul 8, 2026
mingw32-glib2-static · Fedora 43 2.86.5-2.fc43 FEDORA-2026-8E39F35701 Jul 8, 2026
mingw32-glib2-static · RHEL 8 0:2.70.1-9.el8_10 RHSA-2026:49512 Aug 5, 2026
mingw32-glib2-static · almalinux 8 2.70.1-9.el8_10 ALSA-2026:49512 Aug 3, 2026
mingw32-glib2-static · ol 8 0:2.70.1-9.el8_10 ELSA-2026-49512 Aug 4, 2026
mingw64-glib2 · Fedora 43 2.86.5-2.fc43 FEDORA-2026-8E39F35701 Jul 8, 2026
mingw64-glib2 · RHEL 8 0:2.70.1-9.el8_10 RHSA-2026:49512 Aug 5, 2026
mingw64-glib2 · almalinux 8 2.70.1-9.el8_10 ALSA-2026:49512 Aug 3, 2026
mingw64-glib2 · ol 8 0:2.70.1-9.el8_10 ELSA-2026-49512 Aug 4, 2026
mingw64-glib2-debuginfo · Fedora 43 2.86.5-2.fc43 FEDORA-2026-8E39F35701 Jul 8, 2026
mingw64-glib2-static · Fedora 43 2.86.5-2.fc43 FEDORA-2026-8E39F35701 Jul 8, 2026
mingw64-glib2-static · RHEL 8 0:2.70.1-9.el8_10 RHSA-2026:49512 Aug 5, 2026
mingw64-glib2-static · almalinux 8 2.70.1-9.el8_10 ALSA-2026:49512 Aug 3, 2026
mingw64-glib2-static · ol 8 0:2.70.1-9.el8_10 ELSA-2026-49512 Aug 4, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.