{"id":"CLSA-2026-1789392191","summary":"glib2: Fix of CVE-2026-16118","details":"- CVE-2026-16118: fix a 2-byte out-of-bounds write in the little-endian byte-swap\n  of _xdg_mime_magic_parse_magic_line() by parenthesizing (ptr + i) before the\n  cast, so the write side uses byte offsets instead of scaling by the word size","modified":"2026-10-26T09:30:55.056361284Z","published":"2026-09-14T13:23:23Z","upstream":["CVE-2026-16118"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1789392191.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16118"}],"affected":[{"package":{"name":"glib2","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/glib2?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-163.el8.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1789392191.json"}},{"package":{"name":"glib2-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/glib2-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-163.el8.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1789392191.json"}},{"package":{"name":"glib2-doc","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/glib2-doc?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-163.el8.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1789392191.json"}},{"package":{"name":"glib2-fam","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/glib2-fam?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-163.el8.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1789392191.json"}},{"package":{"name":"glib2-static","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/glib2-static?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-163.el8.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1789392191.json"}},{"package":{"name":"glib2-tests","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/glib2-tests?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-163.el8.tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1789392191.json"}}],"schema_version":"1.9.0"}