Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 42 mingw-glib2 Major Memory Leak Denial of Service 2026-1a6369b123

fedora
Calendar Grey February 8, 2026
Dist Fedora Esm H88
Backport fixes for critical integer overflow and memory error in mingw-glib2 on Fedora 42. Update advised.
Backport fixes for CVE-2026-1484, CVE-2026-1485, CVE-2026-1489.

Summary

MinGW Windows Glib2 library.

Update Information:

Backport fixes for CVE-2026-1484, CVE-2026-1485, CVE-2026-1489.

Topics%20covered

Topics Covered

security advisory denial of service fedora buffer overflow memory corruption important

Change Log

* Sun Dec 14 2025 Sandro Mani - 2.84.3-3 - Backport patch for CVE-2025-13601

References


[ 1 ] Bug #2433314 - CVE-2026-1484 mingw-glib2: Integer Overflow Leading to Buffer Underflow and Out-of-Bounds Write in GLib g_base64_encode() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2433314 [ 2 ] Bug #2433340 - CVE-2026-1485 mingw-glib2: Glib: Local denial of service via buffer underflow in content type parsing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2433340 [ 3 ] Bug #2433365 - CVE-2026-1489 mingw-glib2: GLib: Memory corruption via integer overflow in Unicode case conversion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2433365

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2c53d4d272' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: mingw-glib2
Product: Fedora 42
Version: 2.84.3
Release: 3.fc42
URL: http://www.gtk.org
Summary: MinGW Windows GLib2 library

Topics%20covered

Topics Covered

security advisory denial of service fedora buffer overflow memory corruption important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here