[CLSA-2026:1788819939] Fix CVE(s): CVE-2026-58016
Type:
security
Severity:
Critical
Release date:
2026-09-07 22:25:50 UTC
Description:
* SECURITY UPDATE: Out-of-bounds read in the D-Bus introspection XML parser - debian/patches/CVE-2026-58016.patch: fix the inverted nesting check in parser_start_element() in gio/gdbusintrospection.c, which accepted a element inside /// and left the parser reading X->pdata[X->len - 1] with len == 0 - CVE-2026-58016 * debian/rules: add arm to the qemu-buildd architecture list, raising test_timeout_multiplier from 5 to 20 on armel. Debian builds armel on real ARM hardware and so left it in the "slow architecture" tier, but this platform builds it under emulation, where the +slow suite exceeds the resulting 900s cap non-deterministically (gvariant 435s/262s/timeout, 642026 488s/501s/timeout across three runs of the same tree). No test is skipped and no other architecture is affected: arm64 and amd64 do not match the arm filter word.
CVEs fixed:
Updated packages:
  • libglib2.0-0_2.66.8-1+deb11u8+tuxcare.els1_amd64.deb
    sha:efba27915bb52bd7a49636fba236ab5c1690be6d
  • libglib2.0-bin_2.66.8-1+deb11u8+tuxcare.els1_amd64.deb
    sha:835998e6d8647c28870dc0235728c15ab51d2dca
  • libglib2.0-data_2.66.8-1+deb11u8+tuxcare.els1_all.deb
    sha:9d746e27c94ff2bc05476043b0f810f4f9fc47a8
  • libglib2.0-dev_2.66.8-1+deb11u8+tuxcare.els1_amd64.deb
    sha:c1e23e905efc203d4dfc63e47c15e52e132f1396
  • libglib2.0-dev-bin_2.66.8-1+deb11u8+tuxcare.els1_amd64.deb
    sha:2a8d0fd0e818e7805bc410849a6d6fcd2e6bdb97
  • libglib2.0-doc_2.66.8-1+deb11u8+tuxcare.els1_all.deb
    sha:fde2c53f15cc8cb0f9f19c7662e0bff3715beb24
  • libglib2.0-tests_2.66.8-1+deb11u8+tuxcare.els1_amd64.deb
    sha:cfc7e3f4138e52b155452a0384a3f85d8e762be6
  • libglib2.0-0_2.66.8-1+deb11u8+tuxcare.els1_arm64.deb
    sha:08d0095dc806cdccb2269fe979ce94259f749aee
  • libglib2.0-bin_2.66.8-1+deb11u8+tuxcare.els1_arm64.deb
    sha:972ec212b1641447efa516871d6bee0c763bdfc4
  • libglib2.0-dev_2.66.8-1+deb11u8+tuxcare.els1_arm64.deb
    sha:11673ca4f833c3c7b563da31b7fb6714ca54364d
  • libglib2.0-dev-bin_2.66.8-1+deb11u8+tuxcare.els1_arm64.deb
    sha:1c988925b8aee66f167b015a34a8c7d6d2ff2eee
  • libglib2.0-tests_2.66.8-1+deb11u8+tuxcare.els1_arm64.deb
    sha:6ae16fca16e0eaaba923d0cd060e2f58a75934f9
  • libglib2.0-0_2.66.8-1+deb11u8+tuxcare.els1_armel.deb
    sha:37379d18658f26f6577ba8be2bf5b016a4147c48
  • libglib2.0-bin_2.66.8-1+deb11u8+tuxcare.els1_armel.deb
    sha:ac0fa2279ba7f02fe0c0147d670466c45b9c6a3b
  • libglib2.0-dev_2.66.8-1+deb11u8+tuxcare.els1_armel.deb
    sha:0e7a16e0a73a03d18b1ef0fc6c2e961f4bdee96b
  • libglib2.0-dev-bin_2.66.8-1+deb11u8+tuxcare.els1_armel.deb
    sha:2281f91ffa0d985c47d77b26a04269c3febeb4b3
  • libglib2.0-tests_2.66.8-1+deb11u8+tuxcare.els1_armel.deb
    sha:1d5f70b19bd8416fd83f5bac5686eda5953ac8a2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.