https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:10:30.928092+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:49512 ALSA-2026:49512 — Important: mingw-glib2 security update 2026-10-02T17:10:32.132652+00:00

Affected: AlmaLinux:8: mingw32-glib2, AlmaLinux:8: mingw32-glib2-static, AlmaLinux:8: mingw64-glib2, AlmaLinux:8: mingw64-glib2-static

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087) * glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010) * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011) * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012) * glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013) * glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014) * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015) * glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bell-cve-2026-58014 BELL-CVE-2026-58014 2026-10-02T17:10:32.132758+00:00

Affected: Alpaquita:stream: glib

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0873 certfr-2026-avi-0873 — De multiples vulnérabilités ont été découvertes dans Microsoft Azure Linux. Elles permettent à un attaquant de provoque… 2026-10-02T17:10:32.132781+00:00 certfr-2026-avi-0873 https://cve.radiocsirt.org/vuln/euvd-2026-382037 EUVD-2026-382037 2026-10-02T17:10:32.132799+00:00 EUVD-2026-382037 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58014 fkie_cve-2026-58014 2026-10-02T17:10:32.132811+00:00

A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.

 https://cve.radiocsirt.org/vuln/ghsa-h88q-m8mm-7243 GHSA-h88q-m8mm-7243 2026-10-02T17:10:32.132842+00:00

A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-58014 msrc_CVE-2026-58014 — Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" 2026-10-02T17:10:32.132894+00:00 msrc_CVE-2026-58014 https://cve.radiocsirt.org/vuln/oesa-2026-3109 OESA-2026-3109 — glib2 security update 2026-10-02T17:10:32.132910+00:00

Affected: openEuler:22.03-LTS-SP4: glib2

GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fix(es):

A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory corruption. By processing specially crafted and extremely large Unicode strings, an attacker could trigger an undersized memory allocation, resulting in out-of-bounds writes. This could cause applications utilizing GLib for string conversion to crash or become unstable.(CVE-2026-1489)

A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.(CVE-2026-58010)

A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service.(CVE-2026-58011)

A flaw was found in GLib. A b…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21410-1 openSUSE-SU-2026:21410-1 — Security update for glib2 2026-10-02T17:10:32.132953+00:00

Security update for glib2

 https://cve.radiocsirt.org/vuln/rhsa-2026:49512 RHSA-2026:49512 — Red Hat Security Advisory: mingw-glib2 security update 2026-10-02T17:10:32.132973+00:00

glib: GLib: Buffer underflow in GVariant parser leads to heap corruption glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

 https://cve.radiocsirt.org/vuln/rlsa-2026:49512 RLSA-2026:49512 — Important: mingw-glib2 security update 2026-10-02T17:10:32.133004+00:00

Affected: Rocky Linux:8: mingw-glib2

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087)

* glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)

* glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)

* glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012)

* glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013)

* glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014)

* glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015)

* glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2026:22846-1 SUSE-SU-2026:22846-1 — Security update for glib2 2026-10-02T17:10:32.133037+00:00

Security update for glib2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-58014 UBUNTU-CVE-2026-58014 2026-10-02T17:10:32.133055+00:00

Affected: Ubuntu:Pro:14.04:LTS: glib2.0, Ubuntu:Pro:16.04:LTS: glib2.0, Ubuntu:Pro:18.04:LTS: glib2.0, Ubuntu:Pro:20.04:LTS: glib2.0, Ubuntu:22.04:LTS: glib2.0, Ubuntu:24.04:LTS: glib2.0, Ubuntu:25.10: glib2.0, Ubuntu:26.04:LTS: glib2.0

A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2866 WID-SEC-W-2026-2866 — Red Hat Enterprise Linux (glib2): Mehrere Schwachstellen 2026-10-02T17:10:32.133085+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux (glib2) ausnutzen, um einen Denial of Service Angriff durchzuführen und um Informationen offenzulegen.