This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-58013 →
DEBIAN-CVE-2026-58013
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with...
Original description
The description as published by the source.
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
glib2.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
glib2.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.84.4-3~deb13u4"}]}]
Debian:14
glib2.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.88.1-2"}]}]
References
- advisory security-tracker.debian.org