CVE-2026-58013
CVE-2026-58013 · Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
CVSS 6.5 · Medium · EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
glib
- Versions
- ≥ 0, < 2.88.1: Affected (semver)
Update to 2.88.1
red hat enterprise linux 10
- Versions
- ≥ 0:2.80.4-12.el10_2.21: Not affected (rpm)
No fix published
red hat enterprise linux 10.0 extended update support
- Versions
- ≥ 0:2.80.4-4.el10_0.17: Not affected (rpm)
No fix published
red hat enterprise linux 7 extended lifecycle support
- Versions
- ≥ 0:2.56.1-13.el7_9.1: Not affected (rpm)
No fix published
red hat enterprise linux 8
- Versions
- ≥ 0:2.70.1-9.el8_10: Not affected (rpm)
No fix published
red hat enterprise linux 8
- Versions
- ≥ 0:2.56.4-177.el8_10: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 advanced mission critical update support
- Versions
- ≥ 0:2.56.4-10.el8_4.7: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 extended update support long-life add-on
- Versions
- ≥ 0:2.56.4-10.el8_4.7: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 advanced mission critical update support
- Versions
- ≥ 0:2.56.4-158.el8_6.7: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 extended update support long-life add-on
- Versions
- ≥ 0:2.56.4-158.el8_6.7: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 telecommunications update service
- Versions
- ≥ 0:2.56.4-165.el8_8.2: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 update services for sap solutions
- Versions
- ≥ 0:2.56.4-165.el8_8.2: Not affected (rpm)
No fix published
red hat enterprise linux 9
- Versions
- ≥ 0:2.68.4-19.el9_8.9: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 update services for sap solutions
- Versions
- ≥ 0:2.68.4-7.el9_2.7: Not affected (rpm)
No fix published
red hat enterprise linux 9.4 update services for sap solutions
- Versions
- ≥ 0:2.68.4-14.el9_4.8: Not affected (rpm)
No fix published
red hat enterprise linux 9.6 extended update support
- Versions
- ≥ 0:2.68.4-16.el9_6.7: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.17
- Versions
- ≥ 1791371080: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.17
- Versions
- ≥ 1791371069: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.17
- Versions
- ≥ 1791788287: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.17
- Versions
- ≥ 1791378395: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.17
- Versions
- ≥ 1791970484: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.18
- Versions
- ≥ 1791459707: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.18
- Versions
- ≥ 1791459711: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.18
- Versions
- ≥ 1791459759: Not affected (rpm)
No fix published
Original sources
- https://access.redhat.com/errata/RHSA-2026:49512
- https://access.redhat.com/errata/RHSA-2026:55440
- https://access.redhat.com/errata/RHSA-2026:57015
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:61766
- https://access.redhat.com/errata/RHSA-2026:61783
- https://access.redhat.com/errata/RHSA-2026:63135
- https://access.redhat.com/errata/RHSA-2026:63138
- https://access.redhat.com/errata/RHSA-2026:63140
- https://access.redhat.com/errata/RHSA-2026:65762
- https://access.redhat.com/errata/RHSA-2026:65763
- https://access.redhat.com/errata/RHSA-2026:65767
- https://access.redhat.com/errata/RHSA-2026:65768
- https://access.redhat.com/errata/RHSA-2026:65769
- https://access.redhat.com/errata/RHSA-2026:65770
- https://access.redhat.com/errata/RHSA-2026:65771
- https://access.redhat.com/errata/RHSA-2026:65773
- https://access.redhat.com/errata/RHSA-2026:66018
- https://access.redhat.com/errata/RHSA-2026:72394
- https://access.redhat.com/errata/RHSA-2026:72395
- https://access.redhat.com/errata/RHSA-2026:72399
- https://access.redhat.com/errata/RHSA-2026:72470
- https://access.redhat.com/errata/RHSA-2026:72475
- https://nvd.nist.gov/vuln/detail/CVE-2026-58013