ELSA-2026-55440

Описание

[2.68.4-19.9]

• Fix CVE-2026-15588: limit D-Bus auth line read length

[2.68.4-19.8]

• Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
• Resolves: RHEL-212157

[2.68.4-19.7]

• Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW
• Resolves: RHEL-212217

[2.68.4-19.6]

• Fix CVE-2026-58011: range validation in g_date_time_add_full()
• Resolves: RHEL-212194

[2.68.4-19.5]

• Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators
• Resolves: RHEL-212236

[2.68.4-19.4]

• Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list
• Resolves: RHEL-190589

[2.68.4-19.3]

• Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context
• Resolves: RHEL-212261