Back Linuxsecurity

Fedora 44 minGW-GLib2 Critical Buffer Overflow Fix CVE-2026

Linuxsecurity •LinuxSecurity Advisories • July 17, 2026

* Wed Jul 8 2026 Sandro Mani - 2.88.2-2 - Backport fix for CVE-2026-58016 * Thu Jul 2 2026 Sandro Mani - 2.88.2-1 - Update to 2.88.2

[ 1 ] Bug #2494867 - CVE-2026-58010 mingw-glib2: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() [fedora-all] [ 2 ] Bug #2494871 - CVE-2026-58011 mingw-glib2: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime [fedora-all] [ 3 ] Bug #2494874 - CVE-2026-58012 mingw-glib2: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() [fedora-all] [ 4 ] Bug #2494877 - CVE-2026-58013 mingw-glib2: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" [fedora-all] [ 5 ] Bug #2494881 - CVE-2026-58014 mingw-glib2: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7bf2937528' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Buffer Overflow Vulnerabilities in Fedora 43 and 44 minGW-GLib2 Fedora has released critical updates for its minGW-GLib2 packages in versions 43 and 44 due to multiple buffer overflow vulnerabilities. The vulnerabilities, identified as CVE-2026-58010, CVE-2026-58011, CVE-2026-58012, CVE-2026-58013, CVE-2026-58014, and CVE-2026-58016, were published on June 30, 2026. They affect various components of the minGW-GLib2 library, which is used in applications built for Windows using the GNU Compiler Collection. Users are advised to update their systems using the 'dnf' package manager to mitigate potential exploits. The updates were backported by Sandro Mani on July 8, 2026. The vulnerabilities include buffer over-reads and integer underflows, which could allow attackers to execute arbitrary code. Both Fedora 43 and 44 are impacted, highlighting the need for immediate action by users. 12 sources 71

Extracted Entities

Fedora 44 minGW-GLib2 Critical Buffer Overflow Fix CVE-2026

The full story

Extracted Entities

Companies (1)

CVEs (6)

CWE Weaknesses (2)