{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "* SECURITY UPDATE: Integer overflow into heap buffer overflow when escaping\n a URI string\n - debian/patches/gconvert-Error-out-if-g_escape_uri_string-would-overflow.patch:\n add this patch to debian/patches/series. The file already shipped in\n 2.66.8-1+deb11u7, and that upload's changelog announces the CVE as\n fixed, but the patch was never added to the series and so was never\n applied: it is the only orphan in the 97-entry quilt stack, while every\n other CVE patch from the same entry (CVE-2025-14087, CVE-2025-4373,\n CVE-2025-7039) is listed. The shipped library therefore still counts\n unacceptable characters in a gint in g_escape_uri_string() in\n glib/gconvert.c, so g_malloc() is called with\n p - string + unacceptable * 2 + 1 after the multiplication has wrapped\n to INT_MIN. Confirmed against the stock Debian 11 libglib2.0-0\n 2.66.8-1+deb11u8: g_filename_to_uri() on a path of 2^30 escapable\n characters aborts in gmem.c with \"failed to allocate\n 18446744072635809794 bytes\", i.e. the negative sum widened to gsize.\n The patch is the vendor's own file and is added verbatim, unmodified.\n - CVE-2025-13601\n * SECURITY UPDATE: Off-by-one over-read in the GVariant tuple deserialiser\n - debian/patches/CVE-2026-58010.patch: correct the padding bounds test in\n gvs_tuple_is_normal() in glib/gvariant-serialiser.c from\n offset > value.size to offset >= value.size, which allowed a one-byte\n read past the end of the serialised data\n - CVE-2026-58010\n * SECURITY UPDATE: Missing range validation in g_date_time_add_full()\n - debian/patches/CVE-2026-58011.patch: reject results outside\n 0001-01-01..9999-12-31 in glib/gdatetime.c instead of leaving the\n \"XXX validate\" placeholder, preventing a two-byte over-read when the\n computed day count falls outside the representable range\n - CVE-2026-58011\n * SECURITY UPDATE: Buffer over-read in g_regex_replace() in raw mode\n - debian/patches/CVE-2026-58012.patch: handle case-changing substitutions\n byte-wise rather than as UTF-8 in glib/gregex.c when the pattern was\n compiled with G_REGEX_RAW, where the subject is not required to be\n valid UTF-8\n - CVE-2026-58012\n * SECURITY UPDATE: memcmp() past the end of the buffer in GIOChannel\n - debian/patches/CVE-2026-58013.patch: bound the line-terminator\n comparison in glib/giochannel.c by the remaining buffer length, which\n was over-read when a custom terminator is longer than the data left\n - CVE-2026-58013\n * SECURITY UPDATE: One-byte heap under-read in GKeyFile\n - debian/patches/CVE-2026-58014.patch: guard the trailing-separator test\n in g_key_file_get_locale_string_list() in glib/gkeyfile.c with len > 0,\n which indexed value[-1] for an empty value\n - CVE-2026-58014\n * SECURITY UPDATE: Path traversal via the D-Bus SHA-1 cookie context\n - debian/patches/CVE-2026-58015.patch: validate the server-supplied\n cookie context in gio/gdbusauthmechanismsha1.c against the D-Bus\n specification before using it as a keyring filename, so a malicious\n peer cannot direct the client to hash arbitrary files\n - CVE-2026-58015", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/debian11els/advisories/2026/clsa-2026_1789291176.json" } ], "tracking": { "current_release_date": "2026-09-13T09:21:04Z", "generator": { "date": "2026-09-13T09:21:04Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1789291176", "initial_release_date": "2026-09-13T09:21:04Z", "revision_history": [ { "date": "2026-09-13T09:21:04Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "Fix of 7 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian 11", "product": { "name": "Debian 11", "product_id": "Debian-11", "product_identification_helper": { "cpe": "cpe:2.3:o:debian:debian_linux:11:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Debian" } ], "category": "vendor", "name": "Software in the Public Interest, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "product": { "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "product_id": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-0@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "product": { "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "product_id": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-tests@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "product": { "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "product_id": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-dev-bin@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "product": { "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "product_id": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-dev@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "product": { "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "product_id": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-bin@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "product": { "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "product_id": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-tests@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "product": { "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "product_id": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-dev-bin@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "product": { "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "product_id": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-dev@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "product": { "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "product_id": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-0@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "product": { "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "product_id": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-bin@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "product": { "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "product_id": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-0@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=armel" } } }, { "category": "product_version", "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "product": { "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "product_id": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-tests@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=armel" } } }, { "category": "product_version", "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "product": { "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "product_id": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-dev-bin@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=armel" } } }, { "category": "product_version", "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "product": { "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "product_id": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-dev@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=armel" } } }, { "category": "product_version", "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "product": { "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "product_id": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-bin@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=armel" } } }, { "category": "product_version", "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "product": { "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "product_id": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-tests@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=armel" } } }, { "category": "product_version", "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "product": { "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "product_id": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-dev-bin@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=armel" } } }, { "category": "product_version", "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "product": { "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "product_id": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-dev@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=armel" } } }, { "category": "product_version", "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "product": { "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "product_id": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-0@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=armel" } } }, { "category": "product_version", "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "product": { "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "product_id": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-bin@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=armel" } } } ], "category": "architecture", "name": "armel" }, { "branches": [ { "category": "product_version", "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "product": { "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "product_id": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-0@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=arm64" } } }, { "category": "product_version", "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "product": { "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "product_id": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-tests@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=arm64" } } }, { "category": "product_version", "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "product": { "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "product_id": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-dev-bin@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=arm64" } } }, { "category": "product_version", "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "product": { "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "product_id": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-dev@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=arm64" } } }, { "category": "product_version", "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "product": { "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "product_id": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-bin@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=arm64" } } }, { "category": "product_version", "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "product": { "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "product_id": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-tests@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=arm64" } } }, { "category": "product_version", "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "product": { "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "product_id": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-dev-bin@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=arm64" } } }, { "category": "product_version", "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "product": { "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "product_id": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-dev@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=arm64" } } }, { "category": "product_version", "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "product": { "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "product_id": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-0@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=arm64" } } }, { "category": "product_version", "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "product": { "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "product_id": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-bin@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=arm64" } } } ], "category": "architecture", "name": "arm64" }, { "branches": [ { "category": "product_version", "name": "libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "product": { "name": "libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "product_id": "libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-doc@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=all" } } }, { "category": "product_version", "name": "libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "product": { "name": "libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "product_id": "libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-data@2.66.8-1%2Bdeb11u8%2Btuxcare.els2?arch=all" } } }, { "category": "product_version", "name": "libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "product": { "name": "libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "product_id": "libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-data@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "product": { "name": "libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "product_id": "libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libglib2.0-doc@2.66.8-1%2Bdeb11u8%2Btuxcare.els1?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64" }, "product_reference": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel as a component of Debian 11", "product_id": "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel" }, "product_reference": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64" }, "product_reference": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel as a component of Debian 11", "product_id": "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel" }, "product_reference": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64" }, "product_reference": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64" }, "product_reference": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel as a component of Debian 11", "product_id": "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel" }, "product_reference": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64" }, "product_reference": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64" }, "product_reference": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel as a component of Debian 11", "product_id": "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel" }, "product_reference": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64" }, "product_reference": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64" }, "product_reference": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64" }, "product_reference": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64" }, "product_reference": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel as a component of Debian 11", "product_id": "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel" }, "product_reference": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all as a component of Debian 11", "product_id": "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all" }, "product_reference": "libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all as a component of Debian 11", "product_id": "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all" }, "product_reference": "libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64" }, "product_reference": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64" }, "product_reference": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel as a component of Debian 11", "product_id": "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" }, "product_reference": "libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all as a component of Debian 11", "product_id": "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all" }, "product_reference": "libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel as a component of Debian 11", "product_id": "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel" }, "product_reference": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64" }, "product_reference": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64" }, "product_reference": "libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64" }, "product_reference": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64" }, "product_reference": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel as a component of Debian 11", "product_id": "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel" }, "product_reference": "libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64" }, "product_reference": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64" }, "product_reference": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel as a component of Debian 11", "product_id": "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel" }, "product_reference": "libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64" }, "product_reference": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64 as a component of Debian 11", "product_id": "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64" }, "product_reference": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel as a component of Debian 11", "product_id": "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel" }, "product_reference": "libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all as a component of Debian 11", "product_id": "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all" }, "product_reference": "libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "relates_to_product_reference": "Debian-11" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-58010", "cwe": { "id": "CWE-126", "name": "Buffer Over-read" }, "notes": [ { "category": "description", "text": "A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel" ], "known_affected": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-58010" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49512", "url": "https://access.redhat.com/errata/RHSA-2026:49512" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:55440", "url": "https://access.redhat.com/errata/RHSA-2026:55440" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:57015", "url": "https://access.redhat.com/errata/RHSA-2026:57015" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:58981", "url": "https://access.redhat.com/errata/RHSA-2026:58981" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:61766", "url": "https://access.redhat.com/errata/RHSA-2026:61766" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:61783", "url": "https://access.redhat.com/errata/RHSA-2026:61783" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63135", "url": "https://access.redhat.com/errata/RHSA-2026:63135" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63138", "url": "https://access.redhat.com/errata/RHSA-2026:63138" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63140", "url": "https://access.redhat.com/errata/RHSA-2026:63140" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65762", "url": "https://access.redhat.com/errata/RHSA-2026:65762" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65763", "url": "https://access.redhat.com/errata/RHSA-2026:65763" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65767", "url": "https://access.redhat.com/errata/RHSA-2026:65767" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65768", "url": "https://access.redhat.com/errata/RHSA-2026:65768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65769", "url": "https://access.redhat.com/errata/RHSA-2026:65769" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65770", "url": "https://access.redhat.com/errata/RHSA-2026:65770" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65771", "url": "https://access.redhat.com/errata/RHSA-2026:65771" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65773", "url": "https://access.redhat.com/errata/RHSA-2026:65773" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:66018", "url": "https://access.redhat.com/errata/RHSA-2026:66018" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-58010", "url": "https://access.redhat.com/security/cve/CVE-2026-58010" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2492243", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492243" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3915", "url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3915" } ], "release_date": "2026-06-30T13:19:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-13T09:19:38.349874Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176", "product_ids": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176" }, { "category": "none_available", "date": "2026-06-30T13:19:00Z", "details": "Affected", "product_ids": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-58012", "cwe": { "id": "CWE-126", "name": "Buffer Over-read" }, "notes": [ { "category": "description", "text": "A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel" ], "known_affected": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-58012" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49512", "url": "https://access.redhat.com/errata/RHSA-2026:49512" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:55440", "url": "https://access.redhat.com/errata/RHSA-2026:55440" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:57015", "url": "https://access.redhat.com/errata/RHSA-2026:57015" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:58981", "url": "https://access.redhat.com/errata/RHSA-2026:58981" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:61766", "url": "https://access.redhat.com/errata/RHSA-2026:61766" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:61783", "url": "https://access.redhat.com/errata/RHSA-2026:61783" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63135", "url": "https://access.redhat.com/errata/RHSA-2026:63135" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63138", "url": "https://access.redhat.com/errata/RHSA-2026:63138" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63140", "url": "https://access.redhat.com/errata/RHSA-2026:63140" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65762", "url": "https://access.redhat.com/errata/RHSA-2026:65762" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65763", "url": "https://access.redhat.com/errata/RHSA-2026:65763" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65767", "url": "https://access.redhat.com/errata/RHSA-2026:65767" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65768", "url": "https://access.redhat.com/errata/RHSA-2026:65768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65769", "url": "https://access.redhat.com/errata/RHSA-2026:65769" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65770", "url": "https://access.redhat.com/errata/RHSA-2026:65770" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65771", "url": "https://access.redhat.com/errata/RHSA-2026:65771" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65773", "url": "https://access.redhat.com/errata/RHSA-2026:65773" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:66018", "url": "https://access.redhat.com/errata/RHSA-2026:66018" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-58012", "url": "https://access.redhat.com/security/cve/CVE-2026-58012" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2492247", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492247" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3918", "url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3918" } ], "release_date": "2026-06-30T13:19:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-13T09:19:38.349874Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176", "product_ids": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176" }, { "category": "none_available", "date": "2026-06-30T13:19:00Z", "details": "Affected", "product_ids": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-13601", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel" ], "known_affected": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-13601" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0936", "url": "https://access.redhat.com/errata/RHSA-2026:0936" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0975", "url": "https://access.redhat.com/errata/RHSA-2026:0975" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0991", "url": "https://access.redhat.com/errata/RHSA-2026:0991" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:1323", "url": "https://access.redhat.com/errata/RHSA-2026:1323" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:1324", "url": "https://access.redhat.com/errata/RHSA-2026:1324" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:1326", "url": "https://access.redhat.com/errata/RHSA-2026:1326" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:1327", "url": "https://access.redhat.com/errata/RHSA-2026:1327" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:1465", "url": "https://access.redhat.com/errata/RHSA-2026:1465" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:1608", "url": "https://access.redhat.com/errata/RHSA-2026:1608" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:1624", "url": "https://access.redhat.com/errata/RHSA-2026:1624" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:1625", "url": "https://access.redhat.com/errata/RHSA-2026:1625" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:1626", "url": "https://access.redhat.com/errata/RHSA-2026:1626" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:1627", "url": "https://access.redhat.com/errata/RHSA-2026:1627" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:1652", "url": "https://access.redhat.com/errata/RHSA-2026:1652" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:1736", "url": "https://access.redhat.com/errata/RHSA-2026:1736" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:18344", "url": "https://access.redhat.com/errata/RHSA-2026:18344" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:18705", "url": "https://access.redhat.com/errata/RHSA-2026:18705" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:2064", "url": "https://access.redhat.com/errata/RHSA-2026:2064" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:2072", "url": "https://access.redhat.com/errata/RHSA-2026:2072" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:2485", "url": "https://access.redhat.com/errata/RHSA-2026:2485" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:2563", "url": "https://access.redhat.com/errata/RHSA-2026:2563" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:2633", "url": "https://access.redhat.com/errata/RHSA-2026:2633" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:2659", "url": "https://access.redhat.com/errata/RHSA-2026:2659" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:2671", "url": "https://access.redhat.com/errata/RHSA-2026:2671" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:2974", "url": "https://access.redhat.com/errata/RHSA-2026:2974" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3415", "url": "https://access.redhat.com/errata/RHSA-2026:3415" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4419", "url": "https://access.redhat.com/errata/RHSA-2026:4419" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7461", "url": "https://access.redhat.com/errata/RHSA-2026:7461" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-13601", "url": "https://access.redhat.com/security/cve/CVE-2025-13601" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2416741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416741" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3827", "url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3827" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4914", "url": "https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4914" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-253495.html" } ], "release_date": "2025-11-26T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-13T09:19:38.349874Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176", "product_ids": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176" }, { "category": "none_available", "date": "2025-11-26T15:15:00Z", "details": "Affected", "product_ids": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.7, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-58013", "cwe": { "id": "CWE-126", "name": "Buffer Over-read" }, "notes": [ { "category": "description", "text": "A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel" ], "known_affected": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-58013" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49512", "url": "https://access.redhat.com/errata/RHSA-2026:49512" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:55440", "url": "https://access.redhat.com/errata/RHSA-2026:55440" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:57015", "url": "https://access.redhat.com/errata/RHSA-2026:57015" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:58981", "url": "https://access.redhat.com/errata/RHSA-2026:58981" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:61766", "url": "https://access.redhat.com/errata/RHSA-2026:61766" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:61783", "url": "https://access.redhat.com/errata/RHSA-2026:61783" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63135", "url": "https://access.redhat.com/errata/RHSA-2026:63135" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63138", "url": "https://access.redhat.com/errata/RHSA-2026:63138" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63140", "url": "https://access.redhat.com/errata/RHSA-2026:63140" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65762", "url": "https://access.redhat.com/errata/RHSA-2026:65762" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65763", "url": "https://access.redhat.com/errata/RHSA-2026:65763" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65767", "url": "https://access.redhat.com/errata/RHSA-2026:65767" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65768", "url": "https://access.redhat.com/errata/RHSA-2026:65768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65769", "url": "https://access.redhat.com/errata/RHSA-2026:65769" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65770", "url": "https://access.redhat.com/errata/RHSA-2026:65770" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65771", "url": "https://access.redhat.com/errata/RHSA-2026:65771" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65773", "url": "https://access.redhat.com/errata/RHSA-2026:65773" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:66018", "url": "https://access.redhat.com/errata/RHSA-2026:66018" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-58013", "url": "https://access.redhat.com/security/cve/CVE-2026-58013" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2492248", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492248" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3925", "url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3925" } ], "release_date": "2026-06-30T13:19:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-13T09:19:38.349874Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176", "product_ids": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176" }, { "category": "none_available", "date": "2026-06-30T13:19:00Z", "details": "Affected", "product_ids": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-58011", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel" ], "known_affected": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-58011" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49512", "url": "https://access.redhat.com/errata/RHSA-2026:49512" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:55440", "url": "https://access.redhat.com/errata/RHSA-2026:55440" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:57015", "url": "https://access.redhat.com/errata/RHSA-2026:57015" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:58981", "url": "https://access.redhat.com/errata/RHSA-2026:58981" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:61766", "url": "https://access.redhat.com/errata/RHSA-2026:61766" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:61783", "url": "https://access.redhat.com/errata/RHSA-2026:61783" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63135", "url": "https://access.redhat.com/errata/RHSA-2026:63135" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63138", "url": "https://access.redhat.com/errata/RHSA-2026:63138" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63140", "url": "https://access.redhat.com/errata/RHSA-2026:63140" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65762", "url": "https://access.redhat.com/errata/RHSA-2026:65762" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65763", "url": "https://access.redhat.com/errata/RHSA-2026:65763" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65767", "url": "https://access.redhat.com/errata/RHSA-2026:65767" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65768", "url": "https://access.redhat.com/errata/RHSA-2026:65768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65769", "url": "https://access.redhat.com/errata/RHSA-2026:65769" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65770", "url": "https://access.redhat.com/errata/RHSA-2026:65770" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65771", "url": "https://access.redhat.com/errata/RHSA-2026:65771" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65773", "url": "https://access.redhat.com/errata/RHSA-2026:65773" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:66018", "url": "https://access.redhat.com/errata/RHSA-2026:66018" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-58011", "url": "https://access.redhat.com/security/cve/CVE-2026-58011" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2492245", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492245" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3917", "url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3917" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/glib/-/work_items/3917", "url": "https://gitlab.gnome.org/GNOME/glib/-/work_items/3917" } ], "release_date": "2026-06-30T13:19:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-13T09:19:38.349874Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176", "product_ids": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176" }, { "category": "none_available", "date": "2026-06-30T13:19:00Z", "details": "Affected", "product_ids": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-58015", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')" }, "notes": [ { "category": "description", "text": "A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel" ], "known_affected": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-58015" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49512", "url": "https://access.redhat.com/errata/RHSA-2026:49512" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:55440", "url": "https://access.redhat.com/errata/RHSA-2026:55440" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:57015", "url": "https://access.redhat.com/errata/RHSA-2026:57015" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:58981", "url": "https://access.redhat.com/errata/RHSA-2026:58981" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:61766", "url": "https://access.redhat.com/errata/RHSA-2026:61766" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:61783", "url": "https://access.redhat.com/errata/RHSA-2026:61783" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63135", "url": "https://access.redhat.com/errata/RHSA-2026:63135" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63138", "url": "https://access.redhat.com/errata/RHSA-2026:63138" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63140", "url": "https://access.redhat.com/errata/RHSA-2026:63140" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65762", "url": "https://access.redhat.com/errata/RHSA-2026:65762" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65763", "url": "https://access.redhat.com/errata/RHSA-2026:65763" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65767", "url": "https://access.redhat.com/errata/RHSA-2026:65767" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65768", "url": "https://access.redhat.com/errata/RHSA-2026:65768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65769", "url": "https://access.redhat.com/errata/RHSA-2026:65769" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65770", "url": "https://access.redhat.com/errata/RHSA-2026:65770" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65771", "url": "https://access.redhat.com/errata/RHSA-2026:65771" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65773", "url": "https://access.redhat.com/errata/RHSA-2026:65773" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:66018", "url": "https://access.redhat.com/errata/RHSA-2026:66018" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-58015", "url": "https://access.redhat.com/security/cve/CVE-2026-58015" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2492256", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492256" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3931", "url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3931" } ], "release_date": "2026-06-30T13:19:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-13T09:19:38.349874Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176", "product_ids": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176" }, { "category": "none_available", "date": "2026-06-30T13:19:00Z", "details": "Affected", "product_ids": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-58014", "cwe": { "id": "CWE-193", "name": "Off-by-one Error" }, "notes": [ { "category": "description", "text": "A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel" ], "known_affected": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-58014" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:49512", "url": "https://access.redhat.com/errata/RHSA-2026:49512" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:55440", "url": "https://access.redhat.com/errata/RHSA-2026:55440" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:57015", "url": "https://access.redhat.com/errata/RHSA-2026:57015" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:58981", "url": "https://access.redhat.com/errata/RHSA-2026:58981" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:61766", "url": "https://access.redhat.com/errata/RHSA-2026:61766" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:61783", "url": "https://access.redhat.com/errata/RHSA-2026:61783" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63135", "url": "https://access.redhat.com/errata/RHSA-2026:63135" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63138", "url": "https://access.redhat.com/errata/RHSA-2026:63138" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:63140", "url": "https://access.redhat.com/errata/RHSA-2026:63140" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65762", "url": "https://access.redhat.com/errata/RHSA-2026:65762" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65763", "url": "https://access.redhat.com/errata/RHSA-2026:65763" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65767", "url": "https://access.redhat.com/errata/RHSA-2026:65767" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65768", "url": "https://access.redhat.com/errata/RHSA-2026:65768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65769", "url": "https://access.redhat.com/errata/RHSA-2026:65769" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65770", "url": "https://access.redhat.com/errata/RHSA-2026:65770" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65771", "url": "https://access.redhat.com/errata/RHSA-2026:65771" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65773", "url": "https://access.redhat.com/errata/RHSA-2026:65773" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:66018", "url": "https://access.redhat.com/errata/RHSA-2026:66018" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-58014", "url": "https://access.redhat.com/security/cve/CVE-2026-58014" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2492255", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492255" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3930", "url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3930" } ], "release_date": "2026-06-30T13:19:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-13T09:19:38.349874Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176", "product_ids": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els2.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els2.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els2.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789291176" }, { "category": "none_available", "date": "2026-06-30T13:19:00Z", "details": "Affected", "product_ids": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "version": "3.1" }, "products": [ "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-0-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-data-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-dev-bin-0:2.66.8-1+deb11u8+tuxcare.els1.armel", "Debian-11:libglib2.0-doc-0:2.66.8-1+deb11u8+tuxcare.els1.all", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.amd64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.arm64", "Debian-11:libglib2.0-tests-0:2.66.8-1+deb11u8+tuxcare.els1.armel" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }