Every CVESearch/Get API key

CVE-2026-58013

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

6.5 MediumFix available

CVE-2026-58013 is a medium vulnerability (CVSS 6.5) in Gnome Glib, published June 30, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 54th percentile. Fixed in glib 2.86.4-r0.

What does this mean?
Severity
6.5 MediumCVSS 3.1, CVE List
Exploit chance
0.71%EPSS, 54th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.86.4-r0glib +299 more

Description

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
Low

Exploit likelihood

0.71%Up 0.4 points since Jul 1, 2026
90%50%10%1%

Affected products

Show 20 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
glib
Alpine:v3.23
before 2.86.4-r0
2.86.4-r0
mingw32-glib2
AlmaLinux:8
From an advisory covering 8 CVEs
before 2.70.1-9.el8_10
2.70.1-9.el8_10
mingw32-glib2-static
AlmaLinux:8
From an advisory covering 8 CVEs
before 2.70.1-9.el8_10
2.70.1-9.el8_10
mingw64-glib2
AlmaLinux:8
From an advisory covering 8 CVEs
before 2.70.1-9.el8_10
2.70.1-9.el8_10
mingw64-glib2-static
AlmaLinux:8
From an advisory covering 8 CVEs
before 2.70.1-9.el8_10
2.70.1-9.el8_10
glib2
AlmaLinux:9
From an advisory covering 7 CVEs
before 2.68.4-19.el9_8.9
2.68.4-19.el9_8.9
glib2-devel
AlmaLinux:9
From an advisory covering 7 CVEs
before 2.68.4-19.el9_8.9
2.68.4-19.el9_8.9
glib2-doc
AlmaLinux:9
From an advisory covering 7 CVEs
before 2.68.4-19.el9_8.9
2.68.4-19.el9_8.9
glib2-static
AlmaLinux:9
From an advisory covering 7 CVEs
before 2.68.4-19.el9_8.9
2.68.4-19.el9_8.9
glib2-tests
AlmaLinux:9
From an advisory covering 7 CVEs
before 2.68.4-19.el9_8.9
2.68.4-19.el9_8.9
Show 290 moreShow less
Affected packages
PackageAffectedFixed
glib2
AlmaLinux:10
From an advisory covering 7 CVEs
before 2.80.4-12.el10_2.21
2.80.4-12.el10_2.21
glib2-devel
AlmaLinux:10
From an advisory covering 7 CVEs
before 2.80.4-12.el10_2.21
2.80.4-12.el10_2.21
glib2-doc
AlmaLinux:10
From an advisory covering 7 CVEs
before 2.80.4-12.el10_2.21
2.80.4-12.el10_2.21
glib2-static
AlmaLinux:10
From an advisory covering 7 CVEs
before 2.80.4-12.el10_2.21
2.80.4-12.el10_2.21
glib2-tests
AlmaLinux:10
From an advisory covering 7 CVEs
before 2.80.4-12.el10_2.21
2.80.4-12.el10_2.21
glib2
AlmaLinux:8
From an advisory covering 7 CVEs
before 2.56.4-177.el8_10
2.56.4-177.el8_10
glib2-devel
AlmaLinux:8
From an advisory covering 7 CVEs
before 2.56.4-177.el8_10
2.56.4-177.el8_10
glib2-doc
AlmaLinux:8
From an advisory covering 7 CVEs
before 2.56.4-177.el8_10
2.56.4-177.el8_10
glib2-fam
AlmaLinux:8
From an advisory covering 7 CVEs
before 2.56.4-177.el8_10
2.56.4-177.el8_10
glib2-static
AlmaLinux:8
From an advisory covering 7 CVEs
before 2.56.4-177.el8_10
2.56.4-177.el8_10
glib2-tests
AlmaLinux:8
From an advisory covering 7 CVEs
before 2.56.4-177.el8_10
2.56.4-177.el8_10
glib
Azure Linux:3
before 2.78.6-11
2.78.6-11
glib
Alpaquita:stream
2.76.0-r1 up to 2.88.2-r0
2.88.2-r0
glib2
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
before 2.56.4-156.el8.tuxcare.els9
2.56.4-156.el8.tuxcare.els9
glib2-devel
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
before 2.56.4-156.el8.tuxcare.els9
2.56.4-156.el8.tuxcare.els9
glib2-doc
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
before 2.56.4-156.el8.tuxcare.els9
2.56.4-156.el8.tuxcare.els9
glib2-fam
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
before 2.56.4-156.el8.tuxcare.els9
2.56.4-156.el8.tuxcare.els9
glib2-static
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
before 2.56.4-156.el8.tuxcare.els9
2.56.4-156.el8.tuxcare.els9
glib2-tests
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
before 2.56.4-156.el8.tuxcare.els9
2.56.4-156.el8.tuxcare.els9
glib2
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
before 2.56.4-156.el8.tuxcare.els9
2.56.4-156.el8.tuxcare.els9
glib2-devel
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
before 2.56.4-156.el8.tuxcare.els9
2.56.4-156.el8.tuxcare.els9
glib2-doc
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
before 2.56.4-156.el8.tuxcare.els9
2.56.4-156.el8.tuxcare.els9
glib2-fam
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
before 2.56.4-156.el8.tuxcare.els9
2.56.4-156.el8.tuxcare.els9
glib2-static
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
before 2.56.4-156.el8.tuxcare.els9
2.56.4-156.el8.tuxcare.els9
glib2-tests
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
before 2.56.4-156.el8.tuxcare.els9
2.56.4-156.el8.tuxcare.els9
glib2
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
before 2.68.4-16.el9_6.3.tuxcare.els5
2.68.4-16.el9_6.3.tuxcare.els5
glib2-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
before 2.68.4-16.el9_6.3.tuxcare.els5
2.68.4-16.el9_6.3.tuxcare.els5
glib2-doc
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
before 2.68.4-16.el9_6.3.tuxcare.els5
2.68.4-16.el9_6.3.tuxcare.els5
glib2-static
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
before 2.68.4-16.el9_6.3.tuxcare.els5
2.68.4-16.el9_6.3.tuxcare.els5
glib2-tests
TuxCare:AlmaLinux:9.6
From an advisory covering 4 CVEs
before 2.68.4-16.el9_6.3.tuxcare.els5
2.68.4-16.el9_6.3.tuxcare.els5
libglib2.0-0
TuxCare:Ubuntu:20.04
From an advisory covering 4 CVEs
before 2.64.6-1~ubuntu20.04.9+tuxcare.els4
2.64.6-1~ubuntu20.04.9+tuxcare.els4
libglib2.0-bin
TuxCare:Ubuntu:20.04
From an advisory covering 4 CVEs
before 2.64.6-1~ubuntu20.04.9+tuxcare.els4
2.64.6-1~ubuntu20.04.9+tuxcare.els4
libglib2.0-data
TuxCare:Ubuntu:20.04
From an advisory covering 4 CVEs
before 2.64.6-1~ubuntu20.04.9+tuxcare.els4
2.64.6-1~ubuntu20.04.9+tuxcare.els4
libglib2.0-dev
TuxCare:Ubuntu:20.04
From an advisory covering 4 CVEs
before 2.64.6-1~ubuntu20.04.9+tuxcare.els4
2.64.6-1~ubuntu20.04.9+tuxcare.els4
libglib2.0-dev-bin
TuxCare:Ubuntu:20.04
From an advisory covering 4 CVEs
before 2.64.6-1~ubuntu20.04.9+tuxcare.els4
2.64.6-1~ubuntu20.04.9+tuxcare.els4
libglib2.0-doc
TuxCare:Ubuntu:20.04
From an advisory covering 4 CVEs
before 2.64.6-1~ubuntu20.04.9+tuxcare.els4
2.64.6-1~ubuntu20.04.9+tuxcare.els4
libglib2.0-tests
TuxCare:Ubuntu:20.04
From an advisory covering 4 CVEs
before 2.64.6-1~ubuntu20.04.9+tuxcare.els4
2.64.6-1~ubuntu20.04.9+tuxcare.els4
libglib2.0-0
TuxCare:Ubuntu:16.04
From an advisory covering 4 CVEs
before 2.48.2-0ubuntu4.8+tuxcare.els7
2.48.2-0ubuntu4.8+tuxcare.els7
libglib2.0-0-refdbg
TuxCare:Ubuntu:16.04
From an advisory covering 4 CVEs
before 2.48.2-0ubuntu4.8+tuxcare.els7
2.48.2-0ubuntu4.8+tuxcare.els7
libglib2.0-bin
TuxCare:Ubuntu:16.04
From an advisory covering 4 CVEs
before 2.48.2-0ubuntu4.8+tuxcare.els7
2.48.2-0ubuntu4.8+tuxcare.els7
libglib2.0-data
TuxCare:Ubuntu:16.04
From an advisory covering 4 CVEs
before 2.48.2-0ubuntu4.8+tuxcare.els7
2.48.2-0ubuntu4.8+tuxcare.els7
libglib2.0-dev
TuxCare:Ubuntu:16.04
From an advisory covering 4 CVEs
before 2.48.2-0ubuntu4.8+tuxcare.els7
2.48.2-0ubuntu4.8+tuxcare.els7
libglib2.0-doc
TuxCare:Ubuntu:16.04
From an advisory covering 4 CVEs
before 2.48.2-0ubuntu4.8+tuxcare.els7
2.48.2-0ubuntu4.8+tuxcare.els7
libglib2.0-tests
TuxCare:Ubuntu:16.04
From an advisory covering 4 CVEs
before 2.48.2-0ubuntu4.8+tuxcare.els7
2.48.2-0ubuntu4.8+tuxcare.els7
libglib2.0-0
TuxCare:Ubuntu:18.04
From an advisory covering 4 CVEs
before 2.56.4-0ubuntu0.18.04.9+tuxcare.els6
2.56.4-0ubuntu0.18.04.9+tuxcare.els6
libglib2.0-bin
TuxCare:Ubuntu:18.04
From an advisory covering 4 CVEs
before 2.56.4-0ubuntu0.18.04.9+tuxcare.els6
2.56.4-0ubuntu0.18.04.9+tuxcare.els6
libglib2.0-data
TuxCare:Ubuntu:18.04
From an advisory covering 4 CVEs
before 2.56.4-0ubuntu0.18.04.9+tuxcare.els6
2.56.4-0ubuntu0.18.04.9+tuxcare.els6
libglib2.0-dev
TuxCare:Ubuntu:18.04
From an advisory covering 4 CVEs
before 2.56.4-0ubuntu0.18.04.9+tuxcare.els6
2.56.4-0ubuntu0.18.04.9+tuxcare.els6
libglib2.0-dev-bin
TuxCare:Ubuntu:18.04
From an advisory covering 4 CVEs
before 2.56.4-0ubuntu0.18.04.9+tuxcare.els6
2.56.4-0ubuntu0.18.04.9+tuxcare.els6
libglib2.0-doc
TuxCare:Ubuntu:18.04
From an advisory covering 4 CVEs
before 2.56.4-0ubuntu0.18.04.9+tuxcare.els6
2.56.4-0ubuntu0.18.04.9+tuxcare.els6
libglib2.0-tests
TuxCare:Ubuntu:18.04
From an advisory covering 4 CVEs
before 2.56.4-0ubuntu0.18.04.9+tuxcare.els6
2.56.4-0ubuntu0.18.04.9+tuxcare.els6
glib2
TuxCare:CentOS-Stream:8
From an advisory covering 4 CVEs
before 2.56.4-163.el8.tuxcare.els7
2.56.4-163.el8.tuxcare.els7
glib2-devel
TuxCare:CentOS-Stream:8
From an advisory covering 4 CVEs
before 2.56.4-163.el8.tuxcare.els7
2.56.4-163.el8.tuxcare.els7
glib2-doc
TuxCare:CentOS-Stream:8
From an advisory covering 4 CVEs
before 2.56.4-163.el8.tuxcare.els7
2.56.4-163.el8.tuxcare.els7
glib2-fam
TuxCare:CentOS-Stream:8
From an advisory covering 4 CVEs
before 2.56.4-163.el8.tuxcare.els7
2.56.4-163.el8.tuxcare.els7
glib2-static
TuxCare:CentOS-Stream:8
From an advisory covering 4 CVEs
before 2.56.4-163.el8.tuxcare.els7
2.56.4-163.el8.tuxcare.els7
glib2-tests
TuxCare:CentOS-Stream:8
From an advisory covering 4 CVEs
before 2.56.4-163.el8.tuxcare.els7
2.56.4-163.el8.tuxcare.els7
glib2
TuxCare:OracleLinux:6
From an advisory covering 2 CVEs
before 2.28.8-12.el6.tuxcare.els11
2.28.8-12.el6.tuxcare.els11
glib2-devel
TuxCare:OracleLinux:6
From an advisory covering 2 CVEs
before 2.28.8-12.el6.tuxcare.els11
2.28.8-12.el6.tuxcare.els11
glib2-doc
TuxCare:OracleLinux:6
From an advisory covering 2 CVEs
before 2.28.8-12.el6.tuxcare.els11
2.28.8-12.el6.tuxcare.els11
glib2-static
TuxCare:OracleLinux:6
From an advisory covering 2 CVEs
before 2.28.8-12.el6.tuxcare.els11
2.28.8-12.el6.tuxcare.els11
glib2
TuxCare:CentOS:6
From an advisory covering 2 CVEs
before 2.28.8-12.el6.tuxcare.els11
2.28.8-12.el6.tuxcare.els11
glib2-devel
TuxCare:CentOS:6
From an advisory covering 2 CVEs
before 2.28.8-12.el6.tuxcare.els11
2.28.8-12.el6.tuxcare.els11
glib2-doc
TuxCare:CentOS:6
From an advisory covering 2 CVEs
before 2.28.8-12.el6.tuxcare.els11
2.28.8-12.el6.tuxcare.els11
glib2-static
TuxCare:CentOS:6
From an advisory covering 2 CVEs
before 2.28.8-12.el6.tuxcare.els11
2.28.8-12.el6.tuxcare.els11
glib2
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
before 2.68.4-6.el9.tuxcare.els9
2.68.4-6.el9.tuxcare.els9
glib2-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
before 2.68.4-6.el9.tuxcare.els9
2.68.4-6.el9.tuxcare.els9
glib2-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
before 2.68.4-6.el9.tuxcare.els9
2.68.4-6.el9.tuxcare.els9
glib2-static
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
before 2.68.4-6.el9.tuxcare.els9
2.68.4-6.el9.tuxcare.els9
glib2-tests
TuxCare:AlmaLinux:9.2
From an advisory covering 4 CVEs
before 2.68.4-6.el9.tuxcare.els9
2.68.4-6.el9.tuxcare.els9
glib2.0
Debian:12
All versions, plus listed versions
2.74.6-22.74.6-2+deb12u12.74.6-2+deb12u22.74.6-2+deb12u32.74.6-2+deb12u4
Show 45 moreShow less
2.74.6-2+deb12u52.74.6-2+deb12u62.74.6-2+deb12u72.74.6-2+deb12u82.74.6-2+deb12u92.75.0-12.75.2-12.75.3-12.75.3-22.75.3-32.75.4-12.76.0-12.76.1-12.76.2-12.76.3-12.76.4-12.76.4-22.76.4-32.76.4-42.77.0-12.77.1-12.77.1-22.77.2-12.77.3-12.78.0-12.78.0-22.78.1-12.78.1-22.78.1-32.78.1-42.78.2-12.78.3-12.78.3-22.78.4-12.78.4-22.78.4-2.12.78.4-32.78.4-42.78.4-52.78.4-62.78.4-72.79.0+git20240110~g38f5ba3c-12.79.0+git20240110~g38f5ba3c-22.79.0+git20240119~62ee8bf6-12.79.1-1
None known
glib2.0
Debian:13
before 2.84.4-3~deb13u4, plus listed versions
2.84.3-12.84.4-12.84.4-22.84.4-3~deb13u12.84.4-3~deb13u22.84.4-3~deb13u3
2.84.4-3~deb13u4
glib2.0
Debian:14
before 2.88.1-2, plus listed versions
2.84.3-12.84.4-12.84.4-22.84.4-32.84.4-3~deb13u1
Show 32 moreShow less
2.84.4-3~deb13u22.84.4-3~deb13u32.84.4-3~deb13u42.84.4-3~deb13u52.85.1-12.85.1-22.85.2-22.85.3-12.85.4-12.86.0-12.86.0-22.86.0-32.86.0-42.86.0-52.86.0-62.86.0-72.86.1-12.86.1-22.86.2-12.86.3-12.86.3-22.86.3-32.86.3-42.86.3-52.87.1-12.87.2-12.87.2-22.87.2-32.87.3-12.87.3~gitlab0-12.87.5-12.88.0-1
2.88.1-2
Glib_jll
Julia
before 2.88.3+0
2.88.3+0
mingw-glib2
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
before 0:2.70.1-9.el8_10
0:2.70.1-9.el8_10
mingw32-glib2
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
before 0:2.70.1-9.el8_10
0:2.70.1-9.el8_10
mingw32-glib2-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
before 0:2.70.1-9.el8_10
0:2.70.1-9.el8_10
mingw32-glib2-static
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
before 0:2.70.1-9.el8_10
0:2.70.1-9.el8_10
mingw64-glib2
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
before 0:2.70.1-9.el8_10
0:2.70.1-9.el8_10
mingw64-glib2-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
before 0:2.70.1-9.el8_10
0:2.70.1-9.el8_10
mingw64-glib2-static
Red Hat:enterprise_linux:8::crb
From an advisory covering 8 CVEs
before 0:2.70.1-9.el8_10
0:2.70.1-9.el8_10
glib2-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-tests
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-tests-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2
Red Hat:enterprise_linux:9::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-devel-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-tests-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-devel-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-static
Red Hat:enterprise_linux:9::crb
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-tests-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:2.80.4-12.el10_2.21
0:2.80.4-12.el10_2.21
glib2-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:2.80.4-12.el10_2.21
0:2.80.4-12.el10_2.21
glib2-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:2.80.4-12.el10_2.21
0:2.80.4-12.el10_2.21
glib2-devel-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:2.80.4-12.el10_2.21
0:2.80.4-12.el10_2.21
glib2-tests
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:2.80.4-12.el10_2.21
0:2.80.4-12.el10_2.21
glib2-tests-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:2.80.4-12.el10_2.21
0:2.80.4-12.el10_2.21
glib2
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:2.80.4-12.el10_2.21
0:2.80.4-12.el10_2.21
glib2-doc
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:2.80.4-12.el10_2.21
0:2.80.4-12.el10_2.21
glib2-static
Red Hat:enterprise_linux:10.2
From an advisory covering 7 CVEs
before 0:2.80.4-12.el10_2.21
0:2.80.4-12.el10_2.21
glib2
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2-devel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2-fam
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2-fam-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2-tests
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2-tests-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2-devel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2-doc
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2-fam-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2-static
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2-tests-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
glib2
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-debuginfo
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-debugsource
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-devel
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-devel-debuginfo
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-fam
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-fam-debuginfo
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-tests
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-tests-debuginfo
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2
Red Hat:rhel_eus_long_life:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-debugsource
Red Hat:rhel_eus_long_life:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-devel
Red Hat:rhel_eus_long_life:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-devel-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-fam
Red Hat:rhel_eus_long_life:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-fam-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-tests
Red Hat:rhel_eus_long_life:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-tests-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-10.el8_4.7
0:2.56.4-10.el8_4.7
glib2-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-debugsource
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-devel
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-devel-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-doc
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-tests
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-tests-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-debugsource
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-devel-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-tests-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-debugsource
Red Hat:rhel_eus:9.6::crb
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-devel-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-static
Red Hat:rhel_eus:9.6::crb
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-tests-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 7 CVEs
before 0:2.68.4-16.el9_6.7
0:2.68.4-16.el9_6.7
glib2-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 7 CVEs
before 0:2.80.4-4.el10_0.17
0:2.80.4-4.el10_0.17
glib2-debugsource
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 7 CVEs
before 0:2.80.4-4.el10_0.17
0:2.80.4-4.el10_0.17
glib2-devel
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 7 CVEs
before 0:2.80.4-4.el10_0.17
0:2.80.4-4.el10_0.17
glib2-devel-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 7 CVEs
before 0:2.80.4-4.el10_0.17
0:2.80.4-4.el10_0.17
glib2-tests
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 7 CVEs
before 0:2.80.4-4.el10_0.17
0:2.80.4-4.el10_0.17
glib2-tests-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 7 CVEs
before 0:2.80.4-4.el10_0.17
0:2.80.4-4.el10_0.17
glib2
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 7 CVEs
before 0:2.80.4-4.el10_0.17
0:2.80.4-4.el10_0.17
glib2-doc
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 7 CVEs
before 0:2.80.4-4.el10_0.17
0:2.80.4-4.el10_0.17
glib2-static
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 7 CVEs
before 0:2.80.4-4.el10_0.17
0:2.80.4-4.el10_0.17
glib2-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-7.el9_2.7
0:2.68.4-7.el9_2.7
glib2-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-7.el9_2.7
0:2.68.4-7.el9_2.7
glib2-devel
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-7.el9_2.7
0:2.68.4-7.el9_2.7
glib2-devel-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-7.el9_2.7
0:2.68.4-7.el9_2.7
glib2-doc
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-7.el9_2.7
0:2.68.4-7.el9_2.7
glib2-tests
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-7.el9_2.7
0:2.68.4-7.el9_2.7
glib2-tests-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-7.el9_2.7
0:2.68.4-7.el9_2.7
glib2
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-7.el9_2.7
0:2.68.4-7.el9_2.7
glib2-debuginfo
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-7.el9_2.7
0:2.68.4-7.el9_2.7
glib2-debugsource
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-7.el9_2.7
0:2.68.4-7.el9_2.7
glib2-devel-debuginfo
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-7.el9_2.7
0:2.68.4-7.el9_2.7
glib2-tests-debuginfo
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-7.el9_2.7
0:2.68.4-7.el9_2.7
glib2
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-debuginfo
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-debugsource
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-devel
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-devel-debuginfo
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-fam
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-fam-debuginfo
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-tests
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-tests-debuginfo
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2
Red Hat:rhel_eus_long_life:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-debuginfo
Red Hat:rhel_eus_long_life:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-debugsource
Red Hat:rhel_eus_long_life:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-devel
Red Hat:rhel_eus_long_life:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-devel-debuginfo
Red Hat:rhel_eus_long_life:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-fam
Red Hat:rhel_eus_long_life:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-fam-debuginfo
Red Hat:rhel_eus_long_life:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-tests
Red Hat:rhel_eus_long_life:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-tests-debuginfo
Red Hat:rhel_eus_long_life:8.6::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-158.el8_6.7
0:2.56.4-158.el8_6.7
glib2-debuginfo
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-14.el9_4.8
0:2.68.4-14.el9_4.8
glib2-debugsource
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-14.el9_4.8
0:2.68.4-14.el9_4.8
glib2-devel
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-14.el9_4.8
0:2.68.4-14.el9_4.8
glib2-devel-debuginfo
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-14.el9_4.8
0:2.68.4-14.el9_4.8
glib2-doc
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-14.el9_4.8
0:2.68.4-14.el9_4.8
glib2-tests
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-14.el9_4.8
0:2.68.4-14.el9_4.8
glib2-tests-debuginfo
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 7 CVEs
before 0:2.68.4-14.el9_4.8
0:2.68.4-14.el9_4.8
glib2
Red Hat:rhel_e4s:9.4::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-14.el9_4.8
0:2.68.4-14.el9_4.8
glib2-debuginfo
Red Hat:rhel_e4s:9.4::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-14.el9_4.8
0:2.68.4-14.el9_4.8
glib2-debugsource
Red Hat:rhel_e4s:9.4::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-14.el9_4.8
0:2.68.4-14.el9_4.8
glib2-devel-debuginfo
Red Hat:rhel_e4s:9.4::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-14.el9_4.8
0:2.68.4-14.el9_4.8
glib2-tests-debuginfo
Red Hat:rhel_e4s:9.4::baseos
From an advisory covering 7 CVEs
before 0:2.68.4-14.el9_4.8
0:2.68.4-14.el9_4.8
glib2
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-debuginfo
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-debugsource
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-devel
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-devel-debuginfo
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-fam
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-fam-debuginfo
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-tests
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-tests-debuginfo
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-debuginfo
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-debugsource
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-devel
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-devel-debuginfo
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-fam
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-fam-debuginfo
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-tests
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2-tests-debuginfo
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 7 CVEs
before 0:2.56.4-165.el8_8.2
0:2.56.4-165.el8_8.2
glib2
Red Hat:rhel_els:7
From an advisory covering 7 CVEs
before 0:2.56.1-13.el7_9.1
0:2.56.1-13.el7_9.1
glib2-debuginfo
Red Hat:rhel_els:7
From an advisory covering 7 CVEs
before 0:2.56.1-13.el7_9.1
0:2.56.1-13.el7_9.1
glib2-devel
Red Hat:rhel_els:7
From an advisory covering 7 CVEs
before 0:2.56.1-13.el7_9.1
0:2.56.1-13.el7_9.1
glib2-doc
Red Hat:rhel_els:7
From an advisory covering 7 CVEs
before 0:2.56.1-13.el7_9.1
0:2.56.1-13.el7_9.1
glib2-fam
Red Hat:rhel_els:7
From an advisory covering 7 CVEs
before 0:2.56.1-13.el7_9.1
0:2.56.1-13.el7_9.1
glib2-static
Red Hat:rhel_els:7
From an advisory covering 7 CVEs
before 0:2.56.1-13.el7_9.1
0:2.56.1-13.el7_9.1
glib2-tests
Red Hat:rhel_els:7
From an advisory covering 7 CVEs
before 0:2.56.1-13.el7_9.1
0:2.56.1-13.el7_9.1
mingw-glib2
Red Hat:enterprise_linux:10.3
From an advisory covering 8 CVEs
before 0:2.89.2-1.el10
0:2.89.2-1.el10
mingw32-glib2
Red Hat:enterprise_linux:10.3
From an advisory covering 8 CVEs
before 0:2.89.2-1.el10
0:2.89.2-1.el10
mingw-glib2
Rocky Linux:8
From an advisory covering 8 CVEs
before 0:2.70.1-9.el8_10
0:2.70.1-9.el8_10
glib2
Rocky Linux:9
From an advisory covering 7 CVEs
before 0:2.68.4-19.el9_8.9
0:2.68.4-19.el9_8.9
glib2
Rocky Linux:10
From an advisory covering 7 CVEs
before 0:2.80.4-12.el10_2.21
0:2.80.4-12.el10_2.21
glib2
Rocky Linux:8
From an advisory covering 7 CVEs
before 0:2.56.4-177.el8_10
0:2.56.4-177.el8_10
mingw32-glib2-debuginfo
Rocky Linux:10
From an advisory covering 8 CVEs
before 0:2.89.2-1.el10
0:2.89.2-1.el10
mingw32-glib2
Rocky Linux:10
From an advisory covering 8 CVEs
before 0:2.89.2-1.el10
0:2.89.2-1.el10
mingw64-glib2
Rocky Linux:10
From an advisory covering 8 CVEs
before 0:2.89.2-1.el10
0:2.89.2-1.el10
mingw32-glib2-static
Rocky Linux:10
From an advisory covering 8 CVEs
before 0:2.89.2-1.el10
0:2.89.2-1.el10
mingw64-glib2-debuginfo
Rocky Linux:10
From an advisory covering 8 CVEs
before 0:2.89.2-1.el10
0:2.89.2-1.el10
mingw64-glib2-static
Rocky Linux:10
From an advisory covering 8 CVEs
before 0:2.89.2-1.el10
0:2.89.2-1.el10
glib2.0
Root:Debian:11
before 2.66.8-1+deb11u8.aikido.8
2.66.8-1+deb11u8.aikido.82.66.8-1+deb11u8.aikido.92.66.8-1+deb11u8.aikido.102.66.8-1+deb11u8.aikido.11
rootio-glib2.0
Root:Debian:11
before 2.66.8-1+deb11u8.aikido.8
2.66.8-1+deb11u8.aikido.82.66.8-1+deb11u8.aikido.92.66.8-1+deb11u8.aikido.102.66.8-1+deb11u8.aikido.11
glib2.0
Root:Debian:12
before 2.74.6-2+deb12u9.aikido.11
2.74.6-2+deb12u9.aikido.112.74.6-2+deb12u9.aikido.122.74.6-2+deb12u9.aikido.13
rootio-glib2.0
Root:Debian:12
before 2.74.6-2+deb12u9.aikido.11
2.74.6-2+deb12u9.aikido.112.74.6-2+deb12u9.aikido.122.74.6-2+deb12u9.aikido.13
glib2
SUSE:Linux Enterprise Server 16.0
From an advisory covering 6 CVEs
before 2.84.4-160000.4.1
2.84.4-160000.4.1
glib2-doc
SUSE:Linux Enterprise Server 16.0
From an advisory covering 6 CVEs
before 2.84.4-160000.4.1
2.84.4-160000.4.1
glib2
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 6 CVEs
before 2.84.4-160000.4.1
2.84.4-160000.4.1
glib2-doc
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 6 CVEs
before 2.84.4-160000.4.1
2.84.4-160000.4.1
glib2
SUSE:Linux Micro 6.2
From an advisory covering 6 CVEs
before 2.84.4-160000.4.1
2.84.4-160000.4.1
glib2
SUSE:Linux Micro 6.0
From an advisory covering 6 CVEs
before 2.76.2-13.1
2.76.2-13.1
glib2
SUSE:Linux Micro 6.1
From an advisory covering 6 CVEs
before 2.78.6-slfo.1.1_7.1
2.78.6-slfo.1.1_7.1
glib2
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 6 CVEs
before 2.70.5-150400.3.37.1
2.70.5-150400.3.37.1
glib2
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 6 CVEs
before 2.70.5-150400.3.37.1
2.70.5-150400.3.37.1
glib2
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 6 CVEs
before 2.70.5-150400.3.37.1
2.70.5-150400.3.37.1
glib2
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 6 CVEs
before 2.70.5-150400.3.37.1
2.70.5-150400.3.37.1
glib2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 6 CVEs
before 2.70.5-150400.3.37.1
2.70.5-150400.3.37.1
glib2
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 6 CVEs
before 2.70.5-150400.3.37.1
2.70.5-150400.3.37.1
glib2
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 6 CVEs
before 2.70.5-150400.3.37.1
2.70.5-150400.3.37.1
glib2
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 6 CVEs
before 2.70.5-150400.3.37.1
2.70.5-150400.3.37.1
glib2
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 6 CVEs
before 2.70.5-150400.3.37.1
2.70.5-150400.3.37.1
glib2
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 6 CVEs
before 2.70.5-150400.3.37.1
2.70.5-150400.3.37.1
glib2
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 6 CVEs
before 2.70.5-150400.3.37.1
2.70.5-150400.3.37.1
glib2
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 6 CVEs
before 2.48.2-12.61.1
2.48.2-12.61.1
glib2
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 6 CVEs
before 2.48.2-12.61.1
2.48.2-12.61.1
glib2
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 6 CVEs
before 2.78.6-150600.4.38.1
2.78.6-150600.4.38.1
glib2
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 6 CVEs
before 2.78.6-150600.4.38.1
2.78.6-150600.4.38.1
glib2
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 6 CVEs
before 2.78.6-150600.4.38.1
2.78.6-150600.4.38.1
glib2.0
Ubuntu:Pro:14.04:LTS
before 2.40.2-0ubuntu1.1+esm8, plus listed versions
2.38.0-1ubuntu12.38.1-12.39.1-0ubuntu12.39.1-0ubuntu22.39.1-0ubuntu3
Show 19 moreShow less
2.39.2-0ubuntu12.39.2-0ubuntu22.39.3-0ubuntu42.39.4-0ubuntu12.39.90-0ubuntu12.39.91-0ubuntu22.39.91-0ubuntu32.39.92-22.40.0-12.40.0-1ubuntu12.40.0-22.40.2-0ubuntu12.40.2-0ubuntu1.12.40.2-0ubuntu1.1+esm12.40.2-0ubuntu1.1+esm22.40.2-0ubuntu1.1+esm32.40.2-0ubuntu1.1+esm42.40.2-0ubuntu1.1+esm62.40.2-0ubuntu1.1+esm7
2.40.2-0ubuntu1.1+esm8
glib2.0
Ubuntu:Pro:16.04:LTS
before 2.48.2-0ubuntu4.8+esm6, plus listed versions
2.46.1-12.46.1-22.47.1-12.47.3-32.47.4-1
Show 20 moreShow less
2.47.5-12.47.6-12.48.0-1ubuntu32.48.0-1ubuntu42.48.1-1~ubuntu16.04.12.48.2-0ubuntu12.48.2-0ubuntu32.48.2-0ubuntu42.48.2-0ubuntu4.12.48.2-0ubuntu4.22.48.2-0ubuntu4.32.48.2-0ubuntu4.42.48.2-0ubuntu4.52.48.2-0ubuntu4.62.48.2-0ubuntu4.72.48.2-0ubuntu4.82.48.2-0ubuntu4.8+esm12.48.2-0ubuntu4.8+esm32.48.2-0ubuntu4.8+esm42.48.2-0ubuntu4.8+esm5
2.48.2-0ubuntu4.8+esm6
glib2.0
Ubuntu:Pro:18.04:LTS
before 2.56.4-0ubuntu0.18.04.9+esm6, plus listed versions
2.54.1-1ubuntu12.55.2-2ubuntu12.56.0-2ubuntu12.56.0-4ubuntu12.56.1-2ubuntu1
Show 14 moreShow less
2.56.2-0ubuntu0.18.04.12.56.2-0ubuntu0.18.04.22.56.3-0ubuntu0.18.04.12.56.4-0ubuntu0.18.04.22.56.4-0ubuntu0.18.04.32.56.4-0ubuntu0.18.04.42.56.4-0ubuntu0.18.04.52.56.4-0ubuntu0.18.04.62.56.4-0ubuntu0.18.04.72.56.4-0ubuntu0.18.04.82.56.4-0ubuntu0.18.04.92.56.4-0ubuntu0.18.04.9+esm32.56.4-0ubuntu0.18.04.9+esm42.56.4-0ubuntu0.18.04.9+esm5
2.56.4-0ubuntu0.18.04.9+esm6
glib2.0
Ubuntu:Pro:20.04:LTS
before 2.64.6-1~ubuntu20.04.9+esm2, plus listed versions
2.62.1-12.63.1-22.63.1-2ubuntu12.63.3-12.63.3-3
Show 14 moreShow less
2.63.5-22.64.0-12.64.1-12.64.2-1~fakesync12.64.3-1~ubuntu20.04.12.64.6-1~ubuntu20.04.12.64.6-1~ubuntu20.04.22.64.6-1~ubuntu20.04.32.64.6-1~ubuntu20.04.42.64.6-1~ubuntu20.04.62.64.6-1~ubuntu20.04.72.64.6-1~ubuntu20.04.82.64.6-1~ubuntu20.04.92.64.6-1~ubuntu20.04.9+esm1
2.64.6-1~ubuntu20.04.9+esm2
glib2.0
Ubuntu:22.04:LTS
before 2.72.4-0ubuntu2.10, plus listed versions
2.68.4-1ubuntu12.70.1-12.70.2-12.71.0-22.71.1-1
Show 14 moreShow less
2.71.2-12.71.3-12.72.0-12.72.1-12.72.4-0ubuntu12.72.4-0ubuntu22.72.4-0ubuntu2.22.72.4-0ubuntu2.32.72.4-0ubuntu2.42.72.4-0ubuntu2.52.72.4-0ubuntu2.62.72.4-0ubuntu2.72.72.4-0ubuntu2.82.72.4-0ubuntu2.9
2.72.4-0ubuntu2.10
glib2.0
Ubuntu:24.04:LTS
before 2.80.0-6ubuntu3.9, plus listed versions
2.78.0-22.78.1-42.78.3-12.78.3-22.79.1-1
Show 11 moreShow less
2.79.2-1~ubuntu12.79.3-3ubuntu52.80.0-6ubuntu12.80.0-6ubuntu32.80.0-6ubuntu3.12.80.0-6ubuntu3.22.80.0-6ubuntu3.42.80.0-6ubuntu3.52.80.0-6ubuntu3.62.80.0-6ubuntu3.72.80.0-6ubuntu3.8
2.80.0-6ubuntu3.9
glib2.0
Ubuntu:25.10
All versions, plus listed versions
2.84.1-12.84.1-22.84.2-12.84.3-12.85.1-2
Show 6 moreShow less
2.85.2-22.85.3-12.86.0-22.86.0-2ubuntu0.12.86.0-2ubuntu0.22.86.0-2ubuntu0.3
None known
glib2.0
Ubuntu:26.04:LTS
before 2.88.0-1ubuntu0.1, plus listed versions
2.86.0-22.86.1-12.86.1-22.86.2-12.86.3-1
Show 5 moreShow less
2.86.3-42.87.2-22.87.2-32.87.3-12.88.0-1
2.88.0-1ubuntu0.1
glib2.0
Ubuntu:Pro:14.04:LTS
From an advisory covering 9 CVEs
before 2.40.2-0ubuntu1.1+esm8, plus listed versions
2.38.0-1ubuntu12.38.1-12.39.1-0ubuntu12.39.1-0ubuntu22.39.1-0ubuntu3
Show 19 moreShow less
2.39.2-0ubuntu12.39.2-0ubuntu22.39.3-0ubuntu42.39.4-0ubuntu12.39.90-0ubuntu12.39.91-0ubuntu22.39.91-0ubuntu32.39.92-22.40.0-12.40.0-1ubuntu12.40.0-22.40.2-0ubuntu12.40.2-0ubuntu1.12.40.2-0ubuntu1.1+esm12.40.2-0ubuntu1.1+esm22.40.2-0ubuntu1.1+esm32.40.2-0ubuntu1.1+esm42.40.2-0ubuntu1.1+esm62.40.2-0ubuntu1.1+esm7
2.40.2-0ubuntu1.1+esm8
glib2.0
Ubuntu:Pro:16.04:LTS
From an advisory covering 9 CVEs
before 2.48.2-0ubuntu4.8+esm6, plus listed versions
2.46.1-12.46.1-22.47.1-12.47.3-32.47.4-1
Show 20 moreShow less
2.47.5-12.47.6-12.48.0-1ubuntu32.48.0-1ubuntu42.48.1-1~ubuntu16.04.12.48.2-0ubuntu12.48.2-0ubuntu32.48.2-0ubuntu42.48.2-0ubuntu4.12.48.2-0ubuntu4.22.48.2-0ubuntu4.32.48.2-0ubuntu4.42.48.2-0ubuntu4.52.48.2-0ubuntu4.62.48.2-0ubuntu4.72.48.2-0ubuntu4.82.48.2-0ubuntu4.8+esm12.48.2-0ubuntu4.8+esm32.48.2-0ubuntu4.8+esm42.48.2-0ubuntu4.8+esm5
2.48.2-0ubuntu4.8+esm6
glib2.0
Ubuntu:Pro:18.04:LTS
From an advisory covering 9 CVEs
before 2.56.4-0ubuntu0.18.04.9+esm6, plus listed versions
2.54.1-1ubuntu12.55.2-2ubuntu12.56.0-2ubuntu12.56.0-4ubuntu12.56.1-2ubuntu1
Show 14 moreShow less
2.56.2-0ubuntu0.18.04.12.56.2-0ubuntu0.18.04.22.56.3-0ubuntu0.18.04.12.56.4-0ubuntu0.18.04.22.56.4-0ubuntu0.18.04.32.56.4-0ubuntu0.18.04.42.56.4-0ubuntu0.18.04.52.56.4-0ubuntu0.18.04.62.56.4-0ubuntu0.18.04.72.56.4-0ubuntu0.18.04.82.56.4-0ubuntu0.18.04.92.56.4-0ubuntu0.18.04.9+esm32.56.4-0ubuntu0.18.04.9+esm42.56.4-0ubuntu0.18.04.9+esm5
2.56.4-0ubuntu0.18.04.9+esm6
glib2.0
Ubuntu:Pro:20.04:LTS
From an advisory covering 9 CVEs
before 2.64.6-1~ubuntu20.04.9+esm2, plus listed versions
2.62.1-12.63.1-22.63.1-2ubuntu12.63.3-12.63.3-3
Show 14 moreShow less
2.63.5-22.64.0-12.64.1-12.64.2-1~fakesync12.64.3-1~ubuntu20.04.12.64.6-1~ubuntu20.04.12.64.6-1~ubuntu20.04.22.64.6-1~ubuntu20.04.32.64.6-1~ubuntu20.04.42.64.6-1~ubuntu20.04.62.64.6-1~ubuntu20.04.72.64.6-1~ubuntu20.04.82.64.6-1~ubuntu20.04.92.64.6-1~ubuntu20.04.9+esm1
2.64.6-1~ubuntu20.04.9+esm2
glib2.0
Ubuntu:22.04:LTS
From an advisory covering 9 CVEs
before 2.72.4-0ubuntu2.10, plus listed versions
2.68.4-1ubuntu12.70.1-12.70.2-12.71.0-22.71.1-1
Show 14 moreShow less
2.71.2-12.71.3-12.72.0-12.72.1-12.72.4-0ubuntu12.72.4-0ubuntu22.72.4-0ubuntu2.22.72.4-0ubuntu2.32.72.4-0ubuntu2.42.72.4-0ubuntu2.52.72.4-0ubuntu2.62.72.4-0ubuntu2.72.72.4-0ubuntu2.82.72.4-0ubuntu2.9
2.72.4-0ubuntu2.10
glib2.0
Ubuntu:24.04:LTS
From an advisory covering 9 CVEs
before 2.80.0-6ubuntu3.9, plus listed versions
2.78.0-22.78.1-42.78.3-12.78.3-22.79.1-1
Show 11 moreShow less
2.79.2-1~ubuntu12.79.3-3ubuntu52.80.0-6ubuntu12.80.0-6ubuntu32.80.0-6ubuntu3.12.80.0-6ubuntu3.22.80.0-6ubuntu3.42.80.0-6ubuntu3.52.80.0-6ubuntu3.62.80.0-6ubuntu3.72.80.0-6ubuntu3.8
2.80.0-6ubuntu3.9
glib2.0
Ubuntu:26.04:LTS
From an advisory covering 9 CVEs
before 2.88.0-1ubuntu0.1, plus listed versions
2.86.0-22.86.1-12.86.1-22.86.2-12.86.3-1
Show 5 moreShow less
2.86.3-42.87.2-22.87.2-32.87.3-12.88.0-1
2.88.0-1ubuntu0.1
glib2
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
before 2.84.4-160000.4.1
2.84.4-160000.4.1
glib2-doc
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
before 2.84.4-160000.4.1
2.84.4-160000.4.1

What each source reports

CVE List Score used6.5

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Record
CVE-2026-58013
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-126
Updated
2026-11-10
EUVDEUVD-2026-403156.5

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Record
EUVD-2026-40315
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-10
GitHub AdvisoriesGHSA-4x46-h598-64qr6.5

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the...

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Record
GHSA-4x46-h598-64qr
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-126
Updated
2026-11-10
NVD6.5

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Record
CVE-2026-58013
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-126
Updated
2026-11-10
OSVALPINE-CVE-2026-580138.2

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Record
ALPINE-CVE-2026-58013
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-08
OSVBELL-CVE-2026-580138.2
Record
BELL-CVE-2026-58013
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
Show 48 moreShow less
OSV6.5

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Record
CVE-2026-58013
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-126
Updated
2026-11-11
OSVDEBIAN-CVE-2026-580138.2

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Record
DEBIAN-CVE-2026-58013
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-07
OSVJLSEC-2026-12468.2

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the...

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Record
JLSEC-2026-1246
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:495127.5

Red Hat Security Advisory: mingw-glib2 security update

Record
RHSA-2026:49512
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-13
OSVRHSA-2026:554407.3

Red Hat Security Advisory: glib2 security update

Record
RHSA-2026:55440
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-13
OSVRHSA-2026:570157.3

Red Hat Security Advisory: glib2 security update

Record
RHSA-2026:57015
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-13
OSVRHSA-2026:617667.3

Red Hat Security Advisory: glib2 security update

Record
RHSA-2026:61766
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-13
OSVRHSA-2026:657627.3

Red Hat Security Advisory: glib2 security update

Record
RHSA-2026:65762
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-13
OSVRHSA-2026:657637.3

Red Hat Security Advisory: glib2 security update

Record
RHSA-2026:65763
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-13
OSVRHSA-2026:657677.3

Red Hat Security Advisory: glib2 security update

Record
RHSA-2026:65767
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-13
OSVRHSA-2026:657687.3

Red Hat Security Advisory: glib2 security update

Record
RHSA-2026:65768
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-13
OSVRHSA-2026:657697.3

Red Hat Security Advisory: glib2 security update

Record
RHSA-2026:65769
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-13
OSVRHSA-2026:657707.3

Red Hat Security Advisory: glib2 security update

Record
RHSA-2026:65770
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-13
OSVRHSA-2026:657717.3

Red Hat Security Advisory: glib2 security update

Record
RHSA-2026:65771
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-13
OSVRHSA-2026:657737.3

Red Hat Security Advisory: glib2 security update

Record
RHSA-2026:65773
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-13
OSVRHSA-2026:971637.5

Red Hat Security Advisory: mingw-glib2 security, bug fix, and enhancement update

Record
RHSA-2026:97163
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-13
OSVRLSA-2026:495127.5

Important: mingw-glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

  • glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087)

  • glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)

  • glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)

  • glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012)

  • glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013)

  • glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014)

  • glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015)

  • glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:49512
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:554407.3

Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

  • glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)

  • glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)

  • glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012)

  • glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013)

  • glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014)

  • glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015)

  • GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:55440
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRLSA-2026:570157.3

Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

  • glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)

  • glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)

  • glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012)

  • glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013)

  • glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014)

  • glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015)

  • GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57015
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRLSA-2026:617667.3

Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

  • glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)

  • glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)

  • glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012)

  • glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013)

  • glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014)

  • glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015)

  • GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:61766
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRLSA-2026:971637.5

Moderate: mingw-glib2 security, bug fix, and enhancement update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

  • glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087)

  • glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)

  • glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)

  • glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012)

  • glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013)

  • glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014)

  • glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015)

  • glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016)

Bug Fix(es) and Enhancement(s):

  • [mingw-glib2] cause qga command 'guest-ssh-get-authorized-keys' failed (JIRA:Rocky Linux-151748)

  • Rebase mingw-glib2 to 2.87.5 (JIRA:Rocky Linux-159874)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.

Record
RLSA-2026:97163
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-13
OSVUBUNTU-CVE-2026-580136.5

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Record
UBUNTU-CVE-2026-58013
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:49512No score

Important: mingw-glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

  • glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087)
  • glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)
  • glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)
  • glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012)
  • glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013)
  • glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014)
  • glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015)
  • glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" (CVE-2026-58016)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:49512
Updated
2026-11-02
OSVALSA-2026:55440No score

Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

  • glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)
  • glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)
  • glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012)
  • glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013)
  • glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014)
  • glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015)
  • GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:55440
Updated
2026-11-02
OSVALSA-2026:57015No score

Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

  • glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)
  • glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)
  • glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012)
  • glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013)
  • glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014)
  • glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015)
  • GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57015
Updated
2026-11-02
OSVALSA-2026:61766No score

Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

  • glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)
  • glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)
  • glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012)
  • glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013)
  • glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014)
  • glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015)
  • GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:61766
Updated
2026-11-02
OSVAZL-91442No score

CVE-2026-58013 affecting package glib for versions less than 2.78.6-11

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Record
AZL-91442
Updated
2026-11-05
OSVCLSA-2026-1783417293No score

glib2: Fix of 4 CVEs

  • CVE-2026-58010: fix an off-by-one out-of-bounds read in GVariant normal-form checking (gvs_tuple_is_normal)
  • CVE-2026-58011: reject out-of-range results in g_date_time_add_full() instead of returning an invalid GDateTime
  • CVE-2026-58012: use byte-wise case changing in g_regex_replace() substitutions under G_REGEX_RAW
  • CVE-2026-58013: avoid a memcmp() read past the buffer end in g_io_channel_read_line() with multi-byte line terminators
Record
CLSA-2026-1783417293
Updated
2026-11-02
OSVCLSA-2026-1783417323No score

glib2: Fix of 4 CVEs

  • CVE-2026-58010: fix an off-by-one out-of-bounds read in GVariant normal-form checking (gvs_tuple_is_normal)
  • CVE-2026-58011: reject out-of-range results in g_date_time_add_full() instead of returning an invalid GDateTime
  • CVE-2026-58012: use byte-wise case changing in g_regex_replace() substitutions under G_REGEX_RAW
  • CVE-2026-58013: avoid a memcmp() read past the buffer end in g_io_channel_read_line() with multi-byte line terminators
Record
CLSA-2026-1783417323
Updated
2026-11-02
OSVCLSA-2026-1783423114No score

glib2: Fix of 4 CVEs

  • CVE-2026-58010: fix an off-by-one out-of-bounds read in GVariant normal-form checking (gvs_tuple_is_normal)
  • CVE-2026-58011: reject out-of-range results in g_date_time_add_full() instead of returning an invalid GDateTime
  • CVE-2026-58012: use byte-wise case changing in g_regex_replace() substitutions under G_REGEX_RAW
  • CVE-2026-58013: avoid a memcmp() read past the buffer end in g_io_channel_read_line() with multi-byte line terminators
Record
CLSA-2026-1783423114
Updated
2026-11-02
OSVCLSA-2026-1783525266No score

Fix CVE(s): CVE-2026-58010, CVE-2026-58011, CVE-2026-58012, CVE-2026-58013

  • SECURITY UPDATE: Multiple vulnerabilities in glib2
    • debian/patches/CVE-2026-58010.patch: Fix off-by-one out-of-bounds read in gvs_tuple_is_normal() during GVariant normal-form checking.
    • debian/patches/CVE-2026-58011.patch: Add missing range validation to g_date_time_add_full() to reject out-of-range GDateTime values.
    • debian/patches/CVE-2026-58012.patch: Fix buffer overflow in case-changing regex substitutions when G_REGEX_RAW is set.
    • debian/patches/CVE-2026-58013.patch: Fix memcmp() read past end of buffer with multi-byte line terminators in giochannel.
    • CVE-2026-58010
    • CVE-2026-58011
    • CVE-2026-58012
    • CVE-2026-58013
Record
CLSA-2026-1783525266
Updated
2026-11-02
OSVCLSA-2026-1783589822No score

Fix CVE(s): CVE-2026-58010, CVE-2026-58011, CVE-2026-58012, CVE-2026-58013

  • SECURITY UPDATE: off-by-one out-of-bounds read in GVariant normal-form checking
    • debian/patches/CVE-2026-58010.patch: fix an off-by-one offset comparison in gvs_tuple_is_normal()
    • CVE-2026-58010
  • SECURITY UPDATE: out-of-range GDateTime creation leading to out-of-bounds reads in getter functions
    • debian/patches/CVE-2026-58011.patch: add missing range validation to g_date_time_add_full()
    • CVE-2026-58011
  • SECURITY UPDATE: buffer over-read in g_regex_replace() case-change substitutions under G_REGEX_RAW
    • debian/patches/CVE-2026-58012.patch: operate on bytes instead of UTF-8 characters when changing case of raw-mode matches
    • CVE-2026-58012
  • SECURITY UPDATE: memcmp() buffer over-read in g_io_channel_read_line() with multi-byte line terminators
    • debian/patches/CVE-2026-58013.patch: check the remaining buffer length against the line terminator length before memcmp()
    • CVE-2026-58013
Record
CLSA-2026-1783589822
Updated
2026-11-02
OSVCLSA-2026-1783590319No score

Fix CVE(s): CVE-2026-58010, CVE-2026-58011, CVE-2026-58012, CVE-2026-58013

  • SECURITY UPDATE: off-by-one out-of-bounds read in GVariant normal-form checking
    • debian/patches/CVE-2026-58010.patch: fix an off-by-one offset comparison in gvs_tuple_is_normal()
    • CVE-2026-58010
  • SECURITY UPDATE: out-of-range GDateTime creation leading to out-of-bounds reads in getter functions
    • debian/patches/CVE-2026-58011.patch: add missing range validation to g_date_time_add_full()
    • CVE-2026-58011
  • SECURITY UPDATE: buffer over-read in g_regex_replace() case-change substitutions under G_REGEX_RAW
    • debian/patches/CVE-2026-58012.patch: operate on bytes instead of UTF-8 characters when changing case of raw-mode matches
    • CVE-2026-58012
  • SECURITY UPDATE: memcmp() buffer over-read in g_io_channel_read_line() with multi-byte line terminators
    • debian/patches/CVE-2026-58013.patch: check the remaining buffer length against the line terminator length before memcmp()
    • CVE-2026-58013
Record
CLSA-2026-1783590319
Updated
2026-11-02
OSVCLSA-2026-1783590412No score

glib2: Fix of 4 CVEs

  • CVE-2026-58010: fix an off-by-one out-of-bounds read in GVariant normal-form checking (gvs_tuple_is_normal)
  • CVE-2026-58011: reject out-of-range results in g_date_time_add_full() instead of returning an invalid GDateTime
  • CVE-2026-58012: use byte-wise case changing in g_regex_replace() substitutions under G_REGEX_RAW
  • CVE-2026-58013: avoid a memcmp() read past the buffer end in g_io_channel_read_line() with multi-byte line terminators
Record
CLSA-2026-1783590412
Updated
2026-11-02
OSVCLSA-2026-1783792531No score

glib2: Fix of 2 CVEs

  • CVE-2026-58011: out-of-bounds read from an invalid GDateTime produced by g_date_time_add_full() without range validation, later read by g_date_time_get_ymd()
  • CVE-2026-58013: heap buffer over-read in g_io_channel_read_line_backend() when a multi-byte line terminator is memcmp'd past the end of the buffer
Record
CLSA-2026-1783792531
Updated
2026-11-02
OSVCLSA-2026-1783793047No score

glib2: Fix of 2 CVEs

  • CVE-2026-58011: out-of-bounds read from an invalid GDateTime produced by g_date_time_add_full() without range validation, later read by g_date_time_get_ymd()
  • CVE-2026-58013: heap buffer over-read in g_io_channel_read_line_backend() when a multi-byte line terminator is memcmp'd past the end of the buffer
Record
CLSA-2026-1783793047
Updated
2026-11-02
OSVCLSA-2026-1785760071No score

glib2: Fix of 4 CVEs

  • CVE-2026-58010: fix one-byte heap over-read in gvs_tuple_is_normal() by changing the offset bounds check from '>' to '>=' (glib/gvariant-serialiser.c)
  • CVE-2026-58011: validate the days field in g_date_time_add_full() to prevent an out-of-bounds read in g_date_time_get_ymd() (glib/gdatetime.c)
  • CVE-2026-58012: fix buffer over-read in g_regex_replace() with G_REGEX_RAW by splitting UTF-8 vs raw code paths in string_append() (glib/gregex.c)
  • CVE-2026-58013: fix out-of-bounds read in g_io_channel_read_line_backend() by bounding memcmp() length to the remaining buffer (glib/giochannel.c)
Record
CLSA-2026-1785760071
Updated
2026-11-02
OSVopenSUSE-SU-2026:21410-1No score

Security update for glib2

This update for glib2 fixes the following issues:

  • CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009).
  • CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte out-of-bounds read (bsc#1270010).
  • CVE-2026-58012: raw byte regex matches with UTF-8 functions during case-change replacements could cause an out-of- bounds read (bsc#1270016).
  • CVE-2026-58013: multi-byte custom line terminator in g_io_channel_read_line_backend could trigger an out-of-bounds read (bsc#1270018).
  • CVE-2026-58014: processing empty key file values in g_key_file_get_locale_string_list could cause a 1-byte out-of- bounds access (bsc#1270021).
  • CVE-2026-58016: malformed D-Bus introspection XML could trigger an unsigned integer overflow (bsc#1270008).
Record
openSUSE-SU-2026:21410-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-58013No score

CVE-2026-58013 in glib2.0 - Patched by Root

Root has patched CVE-2026-58013 in the glib2.0 package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-58013
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-58013No score

CVE-2026-58013 in glib2.0 - Patched by Root

Root has patched CVE-2026-58013 in the glib2.0 package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-58013
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-58013No score

CVE-2026-58013 in glib2.0 - Patched by Root

Root has patched CVE-2026-58013 in the glib2.0 package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-58013
Updated
2026-11-02
OSVSUSE-SU-2026:22846-1No score

Security update for glib2

This update for glib2 fixes the following issues:

  • CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009).
  • CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte out-of-bounds read (bsc#1270010).
  • CVE-2026-58012: raw byte regex matches with UTF-8 functions during case-change replacements could cause an out-of- bounds read (bsc#1270016).
  • CVE-2026-58013: multi-byte custom line terminator in g_io_channel_read_line_backend could trigger an out-of-bounds read (bsc#1270018).
  • CVE-2026-58014: processing empty key file values in g_key_file_get_locale_string_list could cause a 1-byte out-of- bounds access (bsc#1270021).
  • CVE-2026-58016: malformed D-Bus introspection XML could trigger an unsigned integer overflow (bsc#1270008).
Record
SUSE-SU-2026:22846-1
Updated
2026-11-02
OSVSUSE-SU-2026:22928-1No score

Security update for glib2

This update for glib2 fixes the following issues:

  • CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009).
  • CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte out-of-bounds read (bsc#1270010).
  • CVE-2026-58012: raw byte regex matches with UTF-8 functions during case-change replacements could cause an out-of- bounds read (bsc#1270016).
  • CVE-2026-58013: multi-byte custom line terminator in g_io_channel_read_line_backend could trigger an out-of-bounds read (bsc#1270018).
  • CVE-2026-58014: processing empty key file values in g_key_file_get_locale_string_list could cause a 1-byte out-of- bounds access (bsc#1270021).
  • CVE-2026-58016: malformed D-Bus introspection XML could trigger an unsigned integer overflow (bsc#1270008).
Record
SUSE-SU-2026:22928-1
Updated
2026-11-02
OSVSUSE-SU-2026:23009-1No score

Security update for glib2

This update for glib2 fixes the following issues:

  • CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009).
  • CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte out-of-bounds read (bsc#1270010).
  • CVE-2026-58012: raw byte regex matches with UTF-8 functions during case-change replacements could cause an out-of- bounds read (bsc#1270016).
  • CVE-2026-58013: multi-byte custom line terminator in g_io_channel_read_line_backend could trigger an out-of-bounds read (bsc#1270018).
  • CVE-2026-58014: processing empty key file values in g_key_file_get_locale_string_list could cause a 1-byte out-of- bounds access (bsc#1270021).
  • CVE-2026-58016: malformed D-Bus introspection XML could trigger an unsigned integer overflow (bsc#1270008).
Record
SUSE-SU-2026:23009-1
Updated
2026-11-02
OSVSUSE-SU-2026:23078-1No score

Security update for glib2

This update for glib2 fixes the following issues

  • CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009).
  • CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte out-of-bounds read (bsc#1270010).
  • CVE-2026-58012: raw byte regex matches with UTF-8 functions during case-change replacements could cause an out-of- bounds read (bsc#1270016).
  • CVE-2026-58013: multi-byte custom line terminator in g_io_channel_read_line_backend could trigger an out-of-bounds read (bsc#1270018).
  • CVE-2026-58014: processing empty key file values in g_key_file_get_locale_string_list could cause a 1-byte out-of- bounds access (bsc#1270021).
  • CVE-2026-58016: malformed D-Bus introspection XML could trigger an unsigned integer overflow (bsc#1270008).
Record
SUSE-SU-2026:23078-1
Updated
2026-11-02
OSVSUSE-SU-2026:3235-1No score

Security update for glib2

This update for glib2 fixes the following issues:

  • CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009).
  • CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte out-of-bounds read (bsc#1270010).
  • CVE-2026-58012: raw byte regex matches with UTF-8 functions during case-change replacements could cause an out-of- bounds read (bsc#1270016).
  • CVE-2026-58013: multi-byte custom line terminator in g_io_channel_read_line_backend could trigger an out-of-bounds read (bsc#1270018).
  • CVE-2026-58014: processing empty key file values in g_key_file_get_locale_string_list could cause a 1-byte out-of- bounds access (bsc#1270021).
  • CVE-2026-58016: malformed D-Bus introspection XML could trigger an unsigned integer overflow (bsc#1270008).
Record
SUSE-SU-2026:3235-1
Updated
2026-11-02
OSVSUSE-SU-2026:3236-1No score

Security update for glib2

This update for glib2 fixes the following issues:

  • CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009).
  • CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte out-of-bounds read (bsc#1270010).
  • CVE-2026-58012: raw byte regex matches with UTF-8 functions during case-change replacements could cause an out-of- bounds read (bsc#1270016).
  • CVE-2026-58013: multi-byte custom line terminator in g_io_channel_read_line_backend could trigger an out-of-bounds read (bsc#1270018).
  • CVE-2026-58014: processing empty key file values in g_key_file_get_locale_string_list could cause a 1-byte out-of- bounds access (bsc#1270021).
  • CVE-2026-58016: malformed D-Bus introspection XML could trigger an unsigned integer overflow (bsc#1270008).
Record
SUSE-SU-2026:3236-1
Updated
2026-11-02
OSVSUSE-SU-2026:3341-1No score

Security update for glib2

This update for glib2 fixes the following issues:

  • CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009).
  • CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte out-of-bounds read (bsc#1270010).
  • CVE-2026-58012: raw byte regex matches with UTF-8 functions during case-change replacements could cause an out-of- bounds read (bsc#1270016).
  • CVE-2026-58013: multi-byte custom line terminator in g_io_channel_read_line_backend could trigger an out-of-bounds read (bsc#1270018).
  • CVE-2026-58014: processing empty key file values in g_key_file_get_locale_string_list could cause a 1-byte out-of- bounds access (bsc#1270021).
  • CVE-2026-58016: malformed D-Bus introspection XML could trigger an unsigned integer overflow (bsc#1270008).
Record
SUSE-SU-2026:3341-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affected, aliases, referencesOSV
referencesOSV
referencesCVE List, GitHub Advisories, NVD
referencesEUVD
affected, aliases
affected, aliases, referencesNVD, OSV
affected, productsCVE List, EUVD, NVD
factsOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 5 package rows, 98 versions and 2 references. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 1 source record.

MoveEnter Open