Project Subscriptions
| Vendors | Products |
|---|---|
|
Gnome
Subscribe
|
Glib
Subscribe
|
|
Redhat
Subscribe
|
Cert-manager Operator
Subscribe
Cert Manager
Subscribe
Codeready Linux Builder
Subscribe
Codeready Linux Builder Eus
Subscribe
Discovery
Subscribe
Enterprise Linux
Subscribe
Enterprise Linux Aus
Subscribe
Enterprise Linux Els
Subscribe
Enterprise Linux Eus
Subscribe
Enterprise Linux Server Tus
Subscribe
Enterprise Linux Update Services For Sap Solutions
Subscribe
Hardened Images
Subscribe
Hummingbird
Subscribe
Insights-proxy
Subscribe
Insights Proxy
Subscribe
Openshift Ai
Subscribe
Rhel Aus
Subscribe
Rhel E4s
Subscribe
Rhel Els
Subscribe
Rhel Eus
Subscribe
Rhel Eus Long Life
Subscribe
Rhel Tus
Subscribe
Rhui
Subscribe
Update Infrastructure
Subscribe
|
| Source | ID | Title |
|---|---|---|
Ubuntu USN |
USN-8794-1 | GLib vulnerabilities |
Solution
No solution given by the vendor.
Workaround
To mitigate this vulnerability, implement input validation to sanitize untrusted D-Bus introspection XML, specifically rejecting malformed structures such as <node> elements improperly nested within <method>, <signal>, <property> or <arg> elements before calling g_dbus_node_info_new_for_xml(). Alternatively, restricting the application to only process XML input from trusted, authenticated sources will completely neutralize this issue.
Thu, 29 Oct 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat cert-manager Operator
Redhat codeready Linux Builder Redhat codeready Linux Builder Eus Redhat enterprise Linux Aus Redhat enterprise Linux Els Redhat enterprise Linux Server Tus Redhat enterprise Linux Update Services For Sap Solutions Redhat insights-proxy Redhat update Infrastructure |
|
| CPEs | cpe:2.3:a:redhat:cert-manager_operator:*:*:*:*:*:openshift:*:* cpe:2.3:a:redhat:cert-manager_operator:1.17.0:*:*:*:*:openshift:*:* cpe:2.3:a:redhat:cert-manager_operator:1.20.0:*:*:*:*:openshift:*:* cpe:2.3:a:redhat:codeready_linux_builder:10.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_eus:10.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_eus:9.6:*:*:*:*:*:*:* cpe:2.3:a:redhat:discovery:2.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:insights-proxy:1.5.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:update_infrastructure:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_els:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:*:*:*:*:*:*:* |
|
| Vendors & Products |
Redhat cert-manager Operator
Redhat codeready Linux Builder Redhat codeready Linux Builder Eus Redhat enterprise Linux Aus Redhat enterprise Linux Els Redhat enterprise Linux Server Tus Redhat enterprise Linux Update Services For Sap Solutions Redhat insights-proxy Redhat update Infrastructure |
Wed, 14 Oct 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Wed, 14 Oct 2026 03:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:cert_manager:1.17::el9 cpe:/a:redhat:cert_manager:1.18::el9 |
|
| References |
|
Fri, 02 Oct 2026 02:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:openshift_ai:3.4::el9 | |
| References |
|
Thu, 01 Oct 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:openshift_ai:3.2::el9 | |
| References |
|
Wed, 30 Sep 2026 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat openshift Ai
|
|
| CPEs | cpe:/a:redhat:openshift_ai:3.0::el9 | |
| Vendors & Products |
Redhat openshift Ai
|
|
| References |
|
Tue, 29 Sep 2026 01:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Mon, 28 Sep 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Mon, 28 Sep 2026 10:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Mon, 28 Sep 2026 08:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat cert Manager
|
|
| CPEs | cpe:/a:redhat:cert_manager:1.20::el9 | |
| Vendors & Products |
Redhat cert Manager
|
|
| References |
|
Tue, 25 Aug 2026 09:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Tue, 11 Aug 2026 09:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat insights Proxy
|
|
| CPEs | cpe:/a:redhat:insights_proxy:1.5::el9 | |
| Vendors & Products |
Redhat insights Proxy
|
|
| References |
|
Fri, 07 Aug 2026 02:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat enterprise Linux Eus
Redhat rhel Els Redhat rhel Eus |
|
| CPEs | cpe:/a:redhat:rhel_eus:9.6::appstream cpe:/a:redhat:rhel_eus:9.6::crb cpe:/o:redhat:enterprise_linux_eus:10.0 cpe:/o:redhat:rhel_els:7 cpe:/o:redhat:rhel_eus:9.6::baseos |
|
| Vendors & Products |
Redhat enterprise Linux Eus
Redhat rhel Els Redhat rhel Eus |
|
| References |
|
Thu, 06 Aug 2026 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhel Aus
Redhat rhel E4s Redhat rhel Eus Long Life Redhat rhel Tus |
|
| CPEs | cpe:/a:redhat:rhel_e4s:9.2::appstream cpe:/a:redhat:rhel_e4s:9.4::appstream cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.8::baseos cpe:/o:redhat:rhel_e4s:9.2::baseos cpe:/o:redhat:rhel_e4s:9.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.6::baseos cpe:/o:redhat:rhel_tus:8.8::baseos |
|
| Vendors & Products |
Redhat rhel Aus
Redhat rhel E4s Redhat rhel Eus Long Life Redhat rhel Tus |
|
| References |
|
Mon, 03 Aug 2026 04:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | ||
| References |
|
Tue, 28 Jul 2026 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a <node> element nested within other elements like <method>, <signal>, <property> or <arg>. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service. | A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service. |
Mon, 27 Jul 2026 17:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat discovery
|
|
| CPEs | cpe:/a:redhat:discovery:2::el9 | |
| Vendors & Products |
Redhat discovery
|
|
| References |
|
Thu, 23 Jul 2026 14:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhui
|
|
| CPEs | cpe:/a:redhat:rhui:5::el9 | |
| Vendors & Products |
Redhat rhui
|
|
| References |
|
Tue, 21 Jul 2026 03:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb cpe:/o:redhat:enterprise_linux:9::baseos |
|
| References |
|
Mon, 20 Jul 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/o:redhat:enterprise_linux:10.2 | |
| References |
|
Mon, 20 Jul 2026 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:enterprise_linux:8::crb cpe:/o:redhat:enterprise_linux:8::baseos |
|
| References |
|
Wed, 01 Jul 2026 10:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Gnome
Gnome glib Redhat hardened Images |
|
| Vendors & Products |
Gnome
Gnome glib Redhat hardened Images |
Tue, 30 Jun 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 30 Jun 2026 13:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a <node> element nested within other elements like <method>, <signal>, <property> or <arg>. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service. | |
| Title | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" | |
| First Time appeared |
Redhat
Redhat enterprise Linux Redhat hummingbird |
|
| Weaknesses | CWE-191 | |
| CPEs | cpe:/a:redhat:hummingbird:1 cpe:/o:redhat:enterprise_linux:10 cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9 |
|
| Vendors & Products |
Redhat
Redhat enterprise Linux Redhat hummingbird |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2026-10-14T19:10:38.064Z
Reserved: 2026-06-26T20:59:47.856Z
Link: CVE-2026-58016
Updated: 2026-06-30T13:58:11.595Z
Status : Analyzed
Published: 2026-06-30T13:19:17.840
Modified: 2026-10-29T14:16:54.210
Link: CVE-2026-58016
No data.
OpenCVE Enrichment
Updated: 2026-08-04T08:15:06Z
Ubuntu USN