This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-58013 →
Categories
DEBIAN-CVE-2026-58013

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with...

Original description

The description as published by the source.

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 glib2.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13 glib2.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.84.4-3~deb13u4"}]}]
Debian:14 glib2.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.88.1-2"}]}]

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details