{"id":"CLSA-2026-1789985854","summary":"glib2: Fix of CVE-2026-16118","details":"- CVE-2026-16118: fix a heap out-of-bounds write in the little-endian byte-swap of\n  MIME magic values in _xdg_mime_magic_parse_magic_line()\n  (gio/xdgmime/xdgmimemagic.c) by parenthesizing (ptr + i) before the cast so the\n  write side uses byte offsets instead of scaling by the word size","modified":"2026-10-26T09:31:43.855817705Z","published":"2026-09-21T10:17:43Z","upstream":["CVE-2026-16118"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1789985854.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16118"}],"affected":[{"package":{"name":"glib2","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/glib2?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-156.el8.tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1789985854.json"}},{"package":{"name":"glib2-devel","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/glib2-devel?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-156.el8.tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1789985854.json"}},{"package":{"name":"glib2-doc","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/glib2-doc?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-156.el8.tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1789985854.json"}},{"package":{"name":"glib2-fam","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/glib2-fam?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-156.el8.tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1789985854.json"}},{"package":{"name":"glib2-static","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/glib2-static?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-156.el8.tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1789985854.json"}},{"package":{"name":"glib2-tests","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/glib2-tests?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-156.el8.tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1789985854.json"}}],"schema_version":"1.9.0"}