MinGW Windows Glib2 library. Update Information : Backport fixes for CVE-2026-1484, CVE-2026-1485, CVE-2026-1489.
MinGW Windows Glib2 library.
Backport fixes for CVE-2026-1484, CVE-2026-1485, CVE-2026-1489.
* Thu Jan 29 2026 Sandro Mani - 2.86.3-3 - Backport fixes for CVE-2026-1484, CVE-2026-1485, CVE-2026-1489 - Remove ancient, obsolete downstream patch from 2012 (RHBZ#2431179)
* Thu Jan 29 2026 Sandro Mani - 2.86.3-3 - Backport fixes for CVE-2026-1484, CVE-2026-1485, CVE-2026-1489 - Remove ancient, obsolete downstream patch from 2012 (RHBZ#2431179)
[ 1 ] Bug #2433314 - CVE-2026-1484 mingw-glib2: Integer Overflow Leading to Buffer Underflow and Out-of-Bounds Write in GLib g_base64_encode() [fedora-all] [ 2 ] Bug #2433340 - CVE-2026-1485 mingw-glib2: Glib: Local denial of service via buffer underflow in content type parsing [fedora-all] [ 3 ] Bug #2433365 - CVE-2026-1489 mingw-glib2: GLib: Memory corruption via integer overflow in Unicode case conversion [fedora-all]
[ 1 ] Bug #2433314 - CVE-2026-1484 mingw-glib2: Integer Overflow Leading to Buffer Underflow and Out-of-Bounds Write in GLib g_base64_encode() [fedora-all] [ 2 ] Bug #2433340 - CVE-2026-1485 mingw-glib2: Glib: Local denial of service via buffer underflow in content type parsing [fedora-all] [ 3 ] Bug #2433365 - CVE-2026-1489 mingw-glib2: GLib: Memory corruption via integer overflow in Unicode case conversion [fedora-all]
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-607c3364fd' at the command line. For more information, refer to the dnf documentation available at
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-607c3364fd' at the command line. For more information, refer to the dnf documentation available at
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
