Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-58013 →

DEBIAN-CVE-2026-58013

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 glib2.0

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 glib2.0

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.84.4-3~deb13u4"}]}]

Debian:14 glib2.0

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.88.1-2"}]}]

Références

advisory security-tracker.debian.org