Vulnerability Reportalmalinux:10.2-minimal-20260902

This base/runtime image is a reasonable foundation, but it ships vulnerabilities worth remediating in the images built on top of it. The main inherited risk is CVE-2026-16118 in glib2, a heap-based buffer overflow in xdgmime that can cause an application crash or memory corruption when an application parses an attacker-controlled MIME magic file. There are 20 exposed-surface findings and 47 post-exploit findings, but only one exposed finding is 6.0+ and none reach 7.0, so the risk is limited rather than critical. That finding only applies where MIME type detection processes an attacker-controlled XDG MIME magic file; otherwise the exposure is not exercised. Remediate glib2 in downstream images and avoid parsing untrusted MIME magic files. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.