A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
Advisories
Source ID Title
Ubuntu USN Ubuntu USN USN-8794-1 GLib vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

To mitigate this vulnerability, restrict any custom line terminator string passed to g_io_channel_set_line_term() to a maximum length of one byte before calling g_io_channel_read_line_backend(). Using the default line terminators will completely neutralize this issue.

References
Link Providers
https://access.redhat.com/errata/RHSA-2026:49512 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:55440 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:57015 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:58981 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:61766 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:61783 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:63135 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:63138 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:63140 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65762 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65763 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65767 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65768 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65769 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65770 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65771 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65773 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:66018 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72394 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72395 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72399 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72470 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72475 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72476 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72502 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73859 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73909 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73929 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73930 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73959 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73960 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73961 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73962 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74458 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74459 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74460 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74461 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74462 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74463 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74674 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74677 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74678 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74679 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74681 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74683 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74685 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74687 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74688 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74771 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75652 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75654 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75655 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75657 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75658 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75659 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75660 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:76042 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2026-58013 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2492248 cve-icon cve-icon
https://gitlab.gnome.org/GNOME/glib/-/issues/3925 cve-icon cve-icon
History

Tue, 06 Oct 2026 02:45:00 +0000

Type Values Removed Values Added
References

Mon, 05 Oct 2026 11:00:00 +0000


Fri, 02 Oct 2026 02:45:00 +0000


Thu, 01 Oct 2026 17:30:00 +0000


Wed, 30 Sep 2026 17:00:00 +0000


Wed, 30 Sep 2026 10:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat ai Inference Server
CPEs cpe:/a:redhat:ai_inference_server:3.2::el9
Vendors & Products Redhat ai Inference Server
References

Tue, 29 Sep 2026 01:00:00 +0000

Type Values Removed Values Added
References

Mon, 28 Sep 2026 14:30:00 +0000


Mon, 28 Sep 2026 10:30:00 +0000

Type Values Removed Values Added
References

Mon, 28 Sep 2026 08:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:cert_manager:1.20::el9
References

Thu, 10 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
References

Wed, 09 Sep 2026 08:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat enterprise Linux Eus
Redhat rhel Eus
Redhat rhel Tus
CPEs cpe:/a:redhat:rhel_eus:9.6::appstream
cpe:/a:redhat:rhel_eus:9.6::crb
cpe:/o:redhat:enterprise_linux_eus:10.0
cpe:/o:redhat:rhel_aus:8.6::baseos
cpe:/o:redhat:rhel_e4s:8.8::baseos
cpe:/o:redhat:rhel_eus:9.6::baseos
cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
cpe:/o:redhat:rhel_tus:8.8::baseos
Vendors & Products Redhat enterprise Linux Eus
Redhat rhel Eus
Redhat rhel Tus
References

Wed, 09 Sep 2026 04:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel E4s
Redhat rhel Els
CPEs cpe:/o:redhat:enterprise_linux:7 cpe:/a:redhat:rhel_e4s:9.2::appstream
cpe:/a:redhat:rhel_e4s:9.4::appstream
cpe:/o:redhat:rhel_e4s:9.2::baseos
cpe:/o:redhat:rhel_e4s:9.4::baseos
cpe:/o:redhat:rhel_els:7
Vendors & Products Redhat rhel E4s
Redhat rhel Els
References

Wed, 09 Sep 2026 03:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Aus
Redhat rhel Eus Long Life
CPEs cpe:/o:redhat:rhel_aus:8.4::baseos
cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
Vendors & Products Redhat rhel Aus
Redhat rhel Eus Long Life
References

Tue, 08 Sep 2026 23:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat cert Manager
CPEs cpe:/a:redhat:cert_manager:1.19::el9
Vendors & Products Redhat cert Manager
References

Tue, 01 Sep 2026 02:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat discovery
CPEs cpe:/a:redhat:discovery:2::el9
Vendors & Products Redhat discovery
References

Mon, 31 Aug 2026 20:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:8::baseos
References

Tue, 25 Aug 2026 10:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhui
CPEs cpe:/a:redhat:rhui:5::el9
Vendors & Products Redhat rhui
References

Wed, 19 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:10.2
References

Mon, 17 Aug 2026 09:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9::appstream
cpe:/a:redhat:enterprise_linux:9::crb
cpe:/o:redhat:enterprise_linux:9::baseos
References

Mon, 03 Aug 2026 05:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:8::crb
References

Wed, 01 Jul 2026 10:30:00 +0000

Type Values Removed Values Added
First Time appeared Gnome
Gnome glib
Redhat hardened Images
Vendors & Products Gnome
Gnome glib
Redhat hardened Images

Tue, 30 Jun 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 30 Jun 2026 13:15:00 +0000

Type Values Removed Values Added
Description A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
Title Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
First Time appeared Redhat
Redhat enterprise Linux
Redhat hummingbird
Weaknesses CWE-126
CPEs cpe:/a:redhat:hummingbird:1
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
Redhat hummingbird
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-10-06T02:09:09.419Z

Reserved: 2026-06-26T20:59:47.855Z

Link: CVE-2026-58013

cve-icon Vulnrichment

Updated: 2026-06-30T14:17:59.369Z

cve-icon NVD

Status : Modified

Published: 2026-06-30T13:19:17.457

Modified: 2026-10-06T03:17:08.177

Link: CVE-2026-58013

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-01T10:01:37Z

Weaknesses