{
  "cves": [
    "CVE-2026-15588",
    "CVE-2026-58010",
    "CVE-2026-58011",
    "CVE-2026-58012",
    "CVE-2026-58013",
    "CVE-2026-58014",
    "CVE-2026-58015"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "MODERATE"
  },
  "description": "[2.56.4-177]\n- Fix CVE-2026-15588: limit D-Bus auth line read length\n\n[2.56.4-176]\n- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking\n\n[2.56.4-175]\n- Fix CVE-2026-58011: range validation in g_date_time_add_full()\n- Resolves: RHEL-212187\n\n[2.56.4-174]\n- Fix CVE-2026-58012: buffer overflow in gregex case changing substitutions\n- Resolves: RHEL-212204\n\n[2.56.4-173]\n- Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators\n- Resolves: RHEL-212229\n\n[2.56.4-172]\n- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context\n- Resolves: RHEL-212254\n\n[2.56.4-171]\n- Fix one-byte heap under-read in g_key_file_get_locale_string_list()\n- Resolves: RHEL-190587",
  "id": "ELSA-2026-61766-0",
  "ovalId": "oval:com.oracle.elsa:def:2026617660",
  "source": "oracle_linux",
  "title": "ELSA-2026-61766-0:  glib2 security update (MODERATE)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-61766-0.html"
}