SUSE-SU-2026:0018-1

This update for glib2 fixes the following issues:

• CVE-2025-14512: integer overflow in the GIO escape_byte_string() function when processing malicious files or remote filesystem attribute values can lead to denial-of-service (bsc#1254878).
• CVE-2025-14087: buffer underflow in the GVariant parser bytestring_parse() and string_parse()functions when processing attacker-influenced data may lead to crash or code execution (bsc#1254662).
• CVE-2025-13601: heap-based buffer overflow in the g_escape_uri_string() function when processing strings with a large number of unacceptable characters may lead to crash or code execution (bsc#1254297).