[CLSA-2026:1783632345] glib: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-07-09 21:26:03 UTC
Description:
2.76.6.tuxcare.els5-r0: - CVE-2026-58015 path traversal in DBUS_COOKIE_SHA1 client via unvalidated cookie_context - CVE-2026-58014 one-byte heap under-read in g_key_file_get_locale_string_list() on empty value
CVEs fixed:
Updated packages:
  • glib-2.76.6.tuxcare.els5-r0.apk
    sha:Q18bDUtn6bA2VvwhRrNp0ghQLfFrs=
  • glib-2.76.6.tuxcare.els5-r0.apk
    sha:Q1I330TuIaKVUKAqrJNzOByhy2pLY=
  • glib-bash-completion-2.76.6.tuxcare.els5-r0.apk
    sha:Q1+obs86eC8gVGkkyuiKNp0vAQlJA=
  • glib-bash-completion-2.76.6.tuxcare.els5-r0.apk
    sha:Q1CZujHivLGByJBpI9t7TATVxDn9s=
  • glib-dev-2.76.6.tuxcare.els5-r0.apk
    sha:Q1Bffw/F8LtVpyUt3yGgycZ8Hezq4=
  • glib-dev-2.76.6.tuxcare.els5-r0.apk
    sha:Q1UNgj46GCyMWm+1Igdjn+/a1anYw=
  • glib-doc-2.76.6.tuxcare.els5-r0.apk
    sha:Q1yxfElEVShnbZchm6ClSBASBceE0=
  • glib-doc-2.76.6.tuxcare.els5-r0.apk
    sha:Q1AxuCWTgPZMo/4yEXmgC8OAHsxY8=
  • glib-lang-2.76.6.tuxcare.els5-r0.apk
    sha:Q1UTZdhYwg0CwGrIwQ1MNmgFA5zCY=
  • glib-lang-2.76.6.tuxcare.els5-r0.apk
    sha:Q1LeunSwLBS/qEaW9dAosDyltpVz0=
  • glib-static-2.76.6.tuxcare.els5-r0.apk
    sha:Q1OIZ3oC94+jgEUumFWEogZwmCyqw=
  • glib-static-2.76.6.tuxcare.els5-r0.apk
    sha:Q13NugIX68cg4iUXTivbXsjfOYVxo=
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.