{"id":"CLSA-2026-1789748257","summary":"Fix CVE(s): CVE-2026-16118","details":"   * SECURITY UPDATE: Heap buffer overflow in the little-endian byte-swap of MIME magic values\n     - debian/patches/CVE-2026-16118.patch: parenthesize (ptr + i) before the cast so the write side of the byte-swap uses byte offsets instead of scaling by the word size in _xdg_mime_magic_parse_magic_line() in gio/xdgmime/xdgmimemagic.c\n     - CVE-2026-16118","modified":"2026-10-26T09:31:53.419388378Z","published":"2026-09-18T16:17:49Z","upstream":["CVE-2026-16118"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1789748257.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16118"}],"affected":[{"package":{"name":"libglib2.0-0","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libglib2.0-0?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.58.3-2+deb10u6+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1789748257.json"}},{"package":{"name":"libglib2.0-bin","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libglib2.0-bin?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.58.3-2+deb10u6+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1789748257.json"}},{"package":{"name":"libglib2.0-data","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libglib2.0-data?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.58.3-2+deb10u6+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1789748257.json"}},{"package":{"name":"libglib2.0-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libglib2.0-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.58.3-2+deb10u6+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1789748257.json"}},{"package":{"name":"libglib2.0-dev-bin","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libglib2.0-dev-bin?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.58.3-2+deb10u6+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1789748257.json"}},{"package":{"name":"libglib2.0-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libglib2.0-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.58.3-2+deb10u6+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1789748257.json"}},{"package":{"name":"libglib2.0-tests","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libglib2.0-tests?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.58.3-2+deb10u6+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1789748257.json"}}],"schema_version":"1.9.0"}