CLSA-2026-1783590319
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1783590319.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1783590319
- Upstream
- Published
- 2026-07-09T09:45:41Z
- Modified
- 2026-10-26T09:32:03Z
- Summary
- Fix CVE(s): CVE-2026-58010, CVE-2026-58011, CVE-2026-58012, CVE-2026-58013
- Details
-
- SECURITY UPDATE: off-by-one out-of-bounds read in GVariant
normal-form checking
- debian/patches/CVE-2026-58010.patch: fix an off-by-one offset comparison in gvs_tuple_is_normal()
- CVE-2026-58010
- SECURITY UPDATE: out-of-range GDateTime creation leading to
out-of-bounds reads in getter functions
- debian/patches/CVE-2026-58011.patch: add missing range validation to g_date_time_add_full()
- CVE-2026-58011
- SECURITY UPDATE: buffer over-read in g_regex_replace() case-change
substitutions under G_REGEX_RAW
- debian/patches/CVE-2026-58012.patch: operate on bytes instead of UTF-8 characters when changing case of raw-mode matches
- CVE-2026-58012
- SECURITY UPDATE: memcmp() buffer over-read in g_io_channel_read_line()
with multi-byte line terminators
- debian/patches/CVE-2026-58013.patch: check the remaining buffer length against the line terminator length before memcmp()
- CVE-2026-58013
- SECURITY UPDATE: off-by-one out-of-bounds read in GVariant
normal-form checking
- References