[CLSA-2026:1783793047] glib2: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-12 19:19:05 UTC
Description:
- CVE-2026-58011: out-of-bounds read from an invalid GDateTime produced by g_date_time_add_full() without range validation, later read by g_date_time_get_ymd() - CVE-2026-58013: heap buffer over-read in g_io_channel_read_line_backend() when a multi-byte line terminator is memcmp'd past the end of the buffer
Updated packages:
  • glib2-2.28.8-12.el6.tuxcare.els11.i686.rpm
    sha:b1f18b17e502c60d9db84f1d1bd15f1acfa609e67d155879fd725e69335dabbe
  • glib2-2.28.8-12.el6.tuxcare.els11.x86_64.rpm
    sha:b1d492062a688da94cfa8728513e88e68aeda255b24afe308d68bb95fcffec52
  • glib2-devel-2.28.8-12.el6.tuxcare.els11.i686.rpm
    sha:00eb1def60cf1a120fe689889c249400067ea2571ef56cf768468c220d805662
  • glib2-devel-2.28.8-12.el6.tuxcare.els11.x86_64.rpm
    sha:492b2cd1eb1037a71bee8b927ca8b686624bbbe1a3e8b469784936ef8e1efbd3
  • glib2-doc-2.28.8-12.el6.tuxcare.els11.noarch.rpm
    sha:32b58b7b606c8a52eec258d33181c19cd516f36edf41799b03c8f0fab03781ed
  • glib2-static-2.28.8-12.el6.tuxcare.els11.x86_64.rpm
    sha:f7728d441a87e7cca06442c483c99d1352cdf0fd0546a137a89e864a8bbb07e6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.