- CVE-2026-58010: fix one-byte heap over-read in gvs_tuple_is_normal() by changing the offset bounds check from '>' to '>=' (glib/gvariant-serialiser.c) - CVE-2026-58011: validate the days field in g_date_time_add_full() to prevent an out-of-bounds read in g_date_time_get_ymd() (glib/gdatetime.c) - CVE-2026-58012: fix buffer over-read in g_regex_replace() with G_REGEX_RAW by splitting UTF-8 vs raw code paths in string_append() (glib/gregex.c) - CVE-2026-58013: fix out-of-bounds read in g_io_channel_read_line_backend() by bounding memcmp() length to the remaining buffer (glib/giochannel.c)