[CLSA-2026:1789602006] glib2: Fix of CVE-2026-16118
Type:
security
Severity:
Important
Release date:
2026-09-16 23:40:17 UTC
Description:
- CVE-2026-16118: fix a heap out-of-bounds write in the little-endian byte-swap of MIME magic values in _xdg_mime_magic_parse_magic_line() (gio/xdgmime/xdgmimemagic.c) by parenthesizing (ptr + i) before the cast so the write side uses byte offsets instead of scaling by the word size
CVEs fixed:
Updated packages:
  • glib2-2.56.4-156.el8.tuxcare.els10.i686.rpm
    sha:acfcc168d595e8ff9ef6a29faa5ac34fa320426f43cecc0f184f407951f5016a
  • glib2-2.56.4-156.el8.tuxcare.els10.x86_64.rpm
    sha:d2403cab79b41cb4d68f6f0dba5a9798024ffae84000ef48db9d5e1e6aed10c9
  • glib2-devel-2.56.4-156.el8.tuxcare.els10.i686.rpm
    sha:151f1d25837a36b6ab3280459be91f5b7bc87aa57364366dd8b8f18ef088e5a3
  • glib2-devel-2.56.4-156.el8.tuxcare.els10.x86_64.rpm
    sha:78be1e4731eb868d018e5c4be72d8a5784968fd077a2ec5e7a4cfc2daa19fb6a
  • glib2-doc-2.56.4-156.el8.tuxcare.els10.noarch.rpm
    sha:30c39cba85c7899b7d255abf80dc6bcb5a3a131b73b53404f8001a3376f01fe2
  • glib2-fam-2.56.4-156.el8.tuxcare.els10.x86_64.rpm
    sha:5fc4716ebe2d8caaa963cbb984c720e1558e5cce6cf04383c76c7b72aef01e36
  • glib2-static-2.56.4-156.el8.tuxcare.els10.i686.rpm
    sha:7b600a27fa635d4acc1ad7ad9bc5dccd82b2039af4d269719ef457deeb872e58
  • glib2-static-2.56.4-156.el8.tuxcare.els10.x86_64.rpm
    sha:186c7b117856e83d75d64f8b26378812a525b0d187575bff285d1423b25bbe1a
  • glib2-tests-2.56.4-156.el8.tuxcare.els10.x86_64.rpm
    sha:680ab3f5f34d7195929decc256c8c69f5f76383383a2a81170ad3a061f687a3b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.