Loading story…
Red Hat released glib2 security updates for Red Hat Enterprise Linux 9 and 10, and a related mingw-glib2 update for RHEL 8, to remediate a cluster of GLib vulnerabilities spanning memory-safety bugs, path traversal, and denial of service. The RHEL 9 advisory RHSA-2026:55440 ships glib2-2.68.4-19.el9_8.9, while the RHEL 10 advisory RHSA-2026:57015 ships glib2-2.80.4-12.el10_2.21; Red Hat also tied RHEL 8 remediation to RHSA-2026:49512. The issues were rated Moderate for the RHEL 9 and 10 glib2 updates, while the RHEL 8 mingw-glib2 advisory was rated Important.
The patched flaws include several out-of-bounds and buffer over-read conditions such as CVE-2026-58010, CVE-2026-58011, CVE-2026-58012, CVE-2026-58013, and CVE-2026-58014, affecting functions including gvs_tuple_is_normal(), g_date_time_get_ymd(), g_regex_replace(), g_io_channel_read_line_backend(), and g_key_file_get_locale_string_list(). Red Hat also fixed CVE-2026-58015, a client-side D-Bus DBUS_COOKIE_SHA1 path traversal flaw that could let a malicious server induce reads outside ~/.dbus-keyrings/ and verify guessed file contents, and CVE-2026-15588, a GDBusServer pre-authentication denial-of-service bug caused by unbounded SASL line buffering that could exhaust memory and CPU.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
On 2026-08-19, Red Hat published Moderate advisory RHSA-2026:57015 for glib2 on Red Hat Enterprise Linux 10. The update shipped glib2 version 2.80.4-12.el10_2.21 and fixed CVE-2026-58010 through CVE-2026-58015 plus CVE-2026-15588 across multiple RHEL 10 variants.
On 2026-08-17, Red Hat published Moderate advisory RHSA-2026:55440 for glib2 on Red Hat Enterprise Linux 9. The update shipped glib2 version 2.68.4-19.el9_8.9 and fixed seven vulnerabilities including CVE-2026-58010 through CVE-2026-58015 and CVE-2026-15588.
On 2026-08-03, Red Hat published Important advisory RHSA-2026:49512 for mingw-glib2 on Red Hat Enterprise Linux 8. The update provided version 2.70.1-9.el8_10 packages and fixed CVE-2026-58010 through CVE-2026-58015 among other GLib flaws.
Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.
Indicator values are masked on this page. See the values in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.
10 references tracked. Mallory keeps watching after this page renders.
bugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released **Important** security updates for Go across **RHEL 8, RHEL 9, and RHEL 10**, updating packages to **Go `1.26.5+1`** and addressing multiple vulnerabilities in the toolchain and bundled libraries. The advisories cover **CVE-2026-39821**, a privilege-escalation flaw in `golang.org/x/net/idna` caused by incorrect Punycode label handling that can bypass ASCII-only authorization checks, and **CVE-2026-39822`,** a Unix `os.Root` symlink-following bug that can enable directory traversal outside an intended root. Red Hat said the fixes apply across standard, extended support, and lifecycle variants on **x86_64, s390x, ppc64le, and aarch64** systems. The updates also include additional Go-related fixes depending on platform, including **CVE-2026-42505** in `crypto/tls`, which can leak pre-shared key identities during **Encrypted Client Hello (ECH)** handshakes and allow passive observers to correlate connections, and **CVE-2026-27145** on RHEL 8, described as a denial-of-service issue in `crypto/x509`. Red Hat rated **CVE-2026-39821** at **CVSS 8.2** and **CVE-2026-39822** at **CVSS 7.8**, and said there is no mitigation for the `os.Root` flaw other than updating to fixed Go releases such as **`1.25.12`** or **`1.26.5`**.
Aug 20, 2026
Red Hat released **Important** security updates for the Linux kernel across **RHEL 8, RHEL 9, and RHEL 10**, including `kernel-rt` for Real Time deployments, fixing vulnerabilities in core subsystems such as **SMB/CIFS client code, iSCSI target handling, SMC, `sched/psi`, `memfd`, UDF, netfilter, POSIX CPU timers, and AMD GPU drivers**. The advisories cover **nine CVEs in RHEL 8**, **26 CVEs in RHEL 9**, and **24 CVEs in RHEL 10**, with affected offerings spanning standard, Extended Life Cycle, Extended Update Support, SAP, NFV, and CodeReady Linux Builder channels across **x86_64, s390x, ppc64le, and aarch64**. Red Hat said systems should be **rebooted after applying the updates** and reiterated that kernel errata should be treated as security-relevant because of the kernel’s central role. Among the patched flaws, Red Hat detailed **`CVE-2026-53143`**, a **buffer overflow** in the `drm/amdkfd` driver on **GFX11** that could leak or corrupt adjacent GTT memory during CRIU checkpoint and restore operations because SDMA queues used compute-specific handlers with the wrong MQD size. The company also fixed **`CVE-2026-63952`** in **`memfd`**, where writable mappings could persist even when `SEAL_EXEC` implicitly applied `SEAL_WRITE`, weakening the expected write-seal guarantees and undermining **W^X** protections. The RHEL 9 advisory also includes non-security fixes, including a regression in `5.14.0-687.5.1.el9_8` that broke Wi-Fi when **FIPS** was enabled.
Aug 20, 2026
Red Hat released **Important** security updates for Go packages in **Red Hat Enterprise Linux 9** and **Red Hat Enterprise Linux 10**, addressing **CVE-2026-27137** and **CVE-2026-25679** across multiple architectures and support channels. The advisories, `RHSA-2026:19181` for RHEL 9 and `RHSA-2026:19022` for RHEL 10, update Go to `1.26.2+2` in the RHEL 9.8.z stream and `1.26.2-2.el10_2` in RHEL 10.2, with packages provided for `x86_64`, `s390x`, `ppc64le`, and `aarch64` systems, including Extended Update Support and Extended Life Cycle offerings. The more detailed flaw, **CVE-2026-25679**, affects Go's `net/url.Parse` function, which can incorrectly accept malformed URLs by failing to properly validate the host or authority component and by treating garbage before an IPv6 literal as ignorable. Red Hat rated that issue **Important** with a **CVSS 7.5** score and said no qualifying mitigation was available, while the second bug, **CVE-2026-27137**, affects Go's `crypto/x509` handling of email constraints. Organizations running Go workloads or development toolchains on supported RHEL releases should prioritize the updated `golang` and `go-toolset` packages to close both parsing and certificate-validation exposure.
Aug 20, 2026