[CLSA-2026:1789780826] Fix CVE(s): CVE-2026-16118
Type:
security
Severity:
Important
Release date:
2026-09-19 01:20:37 UTC
Description:
* SECURITY UPDATE: Out-of-bounds write in the bundled xdgmime magic parser - debian/patches/CVE-2026-16118.patch: parenthesize (ptr + i) before the cast in _xdg_mime_magic_parse_magic_line() in gio/xdgmime/xdgmimemagic.c, so the little-endian byte swap writes at byte offsets instead of scaling by sizeof(type) and writing past the end of matchlet->value and matchlet->mask - CVE-2026-16118
CVEs fixed:
Updated packages:
  • libglib2.0-0_2.66.8-1+deb11u8+tuxcare.els3_amd64.deb
    sha:cc3bec25ab14e540ee5f9b080569066a9f200aae
  • libglib2.0-bin_2.66.8-1+deb11u8+tuxcare.els3_amd64.deb
    sha:df048ea73820b00a2a735826acd99df583f0dc04
  • libglib2.0-data_2.66.8-1+deb11u8+tuxcare.els3_all.deb
    sha:f5cd8f0c6b6e811589e132ec0262fe3e2d877b1f
  • libglib2.0-dev_2.66.8-1+deb11u8+tuxcare.els3_amd64.deb
    sha:fc6dfc0f80aea47e49c4b0904fbec6dd9c718a02
  • libglib2.0-dev-bin_2.66.8-1+deb11u8+tuxcare.els3_amd64.deb
    sha:af8c422e37f0147d80b9ef3d1e71a9a782f2e509
  • libglib2.0-doc_2.66.8-1+deb11u8+tuxcare.els3_all.deb
    sha:c606a8f3fa0b579e43f507e3aecda3ecf2be2980
  • libglib2.0-tests_2.66.8-1+deb11u8+tuxcare.els3_amd64.deb
    sha:52af7851822185304cca8ab10afc3829fc24587e
  • libglib2.0-0_2.66.8-1+deb11u8+tuxcare.els3_arm64.deb
    sha:2d0f741842ba65813aff36ea6aa65d0943607a33
  • libglib2.0-bin_2.66.8-1+deb11u8+tuxcare.els3_arm64.deb
    sha:743628a1c2956e2b89d6bdda08bbecb1bf11f032
  • libglib2.0-dev_2.66.8-1+deb11u8+tuxcare.els3_arm64.deb
    sha:4db62656088e50c535a2fa87431b1cfd68d4b622
  • libglib2.0-dev-bin_2.66.8-1+deb11u8+tuxcare.els3_arm64.deb
    sha:a541da140b84b3d0e8fec4c7cfb9890b776a6cef
  • libglib2.0-tests_2.66.8-1+deb11u8+tuxcare.els3_arm64.deb
    sha:63980f45921e64d75f968cfe40b0c3b661073804
  • libglib2.0-0_2.66.8-1+deb11u8+tuxcare.els3_armel.deb
    sha:215f3c5de63e7e9a861d6b859c49c48dde5af56a
  • libglib2.0-bin_2.66.8-1+deb11u8+tuxcare.els3_armel.deb
    sha:66d9e7c644e681d8f251d4b7fd2fc79eebc50444
  • libglib2.0-dev_2.66.8-1+deb11u8+tuxcare.els3_armel.deb
    sha:36c7565b332a906ccbb60739060a2054103398e3
  • libglib2.0-dev-bin_2.66.8-1+deb11u8+tuxcare.els3_armel.deb
    sha:82fea5e6636f28747dae0ab6833a1f1666c82814
  • libglib2.0-tests_2.66.8-1+deb11u8+tuxcare.els3_armel.deb
    sha:74c582ec1340c5edf136bd327b3fabaa55990571
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.