Release date:
2026-07-09 09:45:41 UTC
Description:
* SECURITY UPDATE: off-by-one out-of-bounds read in GVariant
normal-form checking
- debian/patches/CVE-2026-58010.patch: fix an off-by-one offset
comparison in gvs_tuple_is_normal()
- CVE-2026-58010
* SECURITY UPDATE: out-of-range GDateTime creation leading to
out-of-bounds reads in getter functions
- debian/patches/CVE-2026-58011.patch: add missing range validation
to g_date_time_add_full()
- CVE-2026-58011
* SECURITY UPDATE: buffer over-read in g_regex_replace() case-change
substitutions under G_REGEX_RAW
- debian/patches/CVE-2026-58012.patch: operate on bytes instead of
UTF-8 characters when changing case of raw-mode matches
- CVE-2026-58012
* SECURITY UPDATE: memcmp() buffer over-read in g_io_channel_read_line()
with multi-byte line terminators
- debian/patches/CVE-2026-58013.patch: check the remaining buffer
length against the line terminator length before memcmp()
- CVE-2026-58013
Updated packages:
-
libglib2.0-0_2.56.4-0ubuntu0.18.04.9+tuxcare.els6_amd64.deb
sha:f8e4950a37a51d78f3ec1187284452d6e229722a
-
libglib2.0-bin_2.56.4-0ubuntu0.18.04.9+tuxcare.els6_amd64.deb
sha:0f39d5320f20bd8deeefe9a77081073bb6f4bf6d
-
libglib2.0-data_2.56.4-0ubuntu0.18.04.9+tuxcare.els6_all.deb
sha:ae357a84951ba5d7d6832c75f9b2c9d0b4653585
-
libglib2.0-dev_2.56.4-0ubuntu0.18.04.9+tuxcare.els6_amd64.deb
sha:ffbe94b92139b3143e3c414420093f6742b2b719
-
libglib2.0-dev-bin_2.56.4-0ubuntu0.18.04.9+tuxcare.els6_amd64.deb
sha:b1ba7bbe68d8adb5c26c8d05800a55d79d32c4de
-
libglib2.0-doc_2.56.4-0ubuntu0.18.04.9+tuxcare.els6_all.deb
sha:30a28be36742650ed7480f1b293ca5c2e9d9781c
-
libglib2.0-tests_2.56.4-0ubuntu0.18.04.9+tuxcare.els6_amd64.deb
sha:7d50eaba5fa5182cb12f7fa78ea03b897e4680f3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
