[CLSA-2026:1789985854] glib2: Fix of CVE-2026-16118
Type:
security
Severity:
Important
Release date:
2026-09-21 10:17:43 UTC
Description:
- CVE-2026-16118: fix a heap out-of-bounds write in the little-endian byte-swap of MIME magic values in _xdg_mime_magic_parse_magic_line() (gio/xdgmime/xdgmimemagic.c) by parenthesizing (ptr + i) before the cast so the write side uses byte offsets instead of scaling by the word size
CVEs fixed:
Updated packages:
  • glib2-2.56.4-156.el8.tuxcare.els10.i686.rpm
    sha:f21b010fb64c15d4b34877564fabd4e260e12789b23e539e19254bc13a88e97b
  • glib2-2.56.4-156.el8.tuxcare.els10.x86_64.rpm
    sha:242f2b801f40d9ff85c3506b68f1024ee263ad8c8f583bee20abc91f21a1fbcb
  • glib2-devel-2.56.4-156.el8.tuxcare.els10.i686.rpm
    sha:9b0b54fbc66ce5927557139d386e794f28b37efa67327d36e2bdf09fa7df02aa
  • glib2-devel-2.56.4-156.el8.tuxcare.els10.x86_64.rpm
    sha:1059f7e48345bff378f0d90f15b02823485e58097a3c4519b0e81d17f805593f
  • glib2-doc-2.56.4-156.el8.tuxcare.els10.noarch.rpm
    sha:5452b7188cce9d720d5c769aeac10bf08652c31db981b7f08da31d358dce16ec
  • glib2-fam-2.56.4-156.el8.tuxcare.els10.x86_64.rpm
    sha:8f507c68e842ff5bc8ca340c85bcf9b5ce1ab42b4080a565984176a0a6f4500b
  • glib2-static-2.56.4-156.el8.tuxcare.els10.i686.rpm
    sha:b2ae6134f369a2d799794df6a75f10519f1d31da97ab6529ee0d3b93d558b7ba
  • glib2-static-2.56.4-156.el8.tuxcare.els10.x86_64.rpm
    sha:6900ebce95df593b6314404567f2c64769bc0d19cafbf65a0b3c39603634dabb
  • glib2-tests-2.56.4-156.el8.tuxcare.els10.x86_64.rpm
    sha:f357661156af963637d56964700bdbffa58811ede853f7194314ca8002f33830
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.