Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 43 mingw-glib2 Important Buffer Overflow Denial of Service Advisory

fedora
Calendar Grey February 8, 2026
Dist Fedora Esm H88
Important backport fixes for mingw-glib2 address critical issues in Fedora 43. Stay secure!
Backport fixes for CVE-2026-1484, CVE-2026-1485, CVE-2026-1489.

Summary

MinGW Windows Glib2 library.

Update Information:

Backport fixes for CVE-2026-1484, CVE-2026-1485, CVE-2026-1489.

Topics%20covered

Topics Covered

security advisory denial of service fedora buffer overflow memory corruption important

Change Log

* Thu Jan 29 2026 Sandro Mani - 2.86.3-3 - Backport fixes for CVE-2026-1484, CVE-2026-1485, CVE-2026-1489 - Remove ancient, obsolete downstream patch from 2012 (RHBZ#2431179)

References


[ 1 ] Bug #2433314 - CVE-2026-1484 mingw-glib2: Integer Overflow Leading to Buffer Underflow and Out-of-Bounds Write in GLib g_base64_encode() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2433314 [ 2 ] Bug #2433340 - CVE-2026-1485 mingw-glib2: Glib: Local denial of service via buffer underflow in content type parsing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2433340 [ 3 ] Bug #2433365 - CVE-2026-1489 mingw-glib2: GLib: Memory corruption via integer overflow in Unicode case conversion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2433365

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-607c3364fd' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: mingw-glib2
Product: Fedora 43
Version: 2.86.3
Release: 3.fc43
URL: http://www.gtk.org
Summary: MinGW Windows GLib2 library

Topics%20covered

Topics Covered

security advisory denial of service fedora buffer overflow memory corruption important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here