[CLSA-2026:1789206553] glib2: Fix of CVE-2026-16118
Type:
security
Severity:
Important
Release date:
2026-09-12 09:49:25 UTC
Description:
- CVE-2026-16118: parenthesise (ptr + i) before the cast in the little-endian byte-swap loop of _xdg_mime_magic_parse_magic_line(), fixing a 2-byte out-of-bounds write in the bundled xdgmime - skip the upstream-flaky testfilemonitor test in %check; it aborts intermittently on aarch64 builders and blocks the build
CVEs fixed:
Updated packages:
  • glib2-2.68.4-6.el9.tuxcare.els11.i686.rpm
    sha:758a6661ac25e38409bbbdf0e8830bdbfac2263e3f9cac95eccba3913e4ed1b1
  • glib2-2.68.4-6.el9.tuxcare.els11.x86_64.rpm
    sha:fba13db37f5e4a4a9c74d611b4160175a58310d5c392eb6e916c6b41642d1fd6
  • glib2-devel-2.68.4-6.el9.tuxcare.els11.i686.rpm
    sha:8744371d9123b2bfa4b11d586edb55504982a52448a401cc257f635b38157531
  • glib2-devel-2.68.4-6.el9.tuxcare.els11.x86_64.rpm
    sha:ab20a0e8a7355f6bdf42f1bf1b2b878e277b76dbe0139d12e32d9e9e1dc3134a
  • glib2-doc-2.68.4-6.el9.tuxcare.els11.noarch.rpm
    sha:681c6b15bde2c2c85ee10382c44153830fc635971b0d7ca673b88bbe218cd726
  • glib2-static-2.68.4-6.el9.tuxcare.els11.i686.rpm
    sha:0a4c7f37a12c78cc9ca95c9192031e864bc6de294a983ea6798a3e0b3b236185
  • glib2-static-2.68.4-6.el9.tuxcare.els11.x86_64.rpm
    sha:f1efd4732c8b912fffd521fa134dc993c088a1eb3850fee97435770ae1052f40
  • glib2-tests-2.68.4-6.el9.tuxcare.els11.x86_64.rpm
    sha:e309283ed5c73cdcf61891f5495fa64517aa267973fcf16ed287d46d2a3209cd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.