{"cves":["CVE-2026-15588","CVE-2026-58010","CVE-2026-58011","CVE-2026-58012","CVE-2026-58013","CVE-2026-58014","CVE-2026-58015"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[2.56.4-177]\n- Fix CVE-2026-15588: limit D-Bus auth line read length\n\n[2.56.4-176]\n- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking\n\n[2.56.4-175]\n- Fix CVE-2026-58011: range validation in g_date_time_add_full()\n- Resolves: RHEL-212187\n\n[2.56.4-174]\n- Fix CVE-2026-58012: buffer overflow in gregex case changing substitutions\n- Resolves: RHEL-212204\n\n[2.56.4-173]\n- Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators\n- Resolves: RHEL-212229\n\n[2.56.4-172]\n- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context\n- Resolves: RHEL-212254\n\n[2.56.4-171]\n- Fix one-byte heap under-read in g_key_file_get_locale_string_list()\n- Resolves: RHEL-190587","id":"ELSA-2026-61766-0","ovalId":"oval:com.oracle.elsa:def:2026617660","source":"oracle_linux","title":"ELSA-2026-61766-0:  glib2 security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-61766-0.html"}