Summary
The glib-networking packages provide modules that extend the networking support in Glib. In particular, the packages contain a libproxy-based implementation of the GProxyResolver class type and a gnutls-based implementation of the GTlsConnection class type.
Security Fix(es):
* glib-networking: Unbounded TLS 1.3 session ticket queue growth in glib-networking allows remote denial of service (CVE-2026-103963)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 10 | glib-networking | 0:2.80.0-3.el10_3.4 |
| Rocky Linux · 10 | glib-networking | 0:2.80.0-3.el10_3.4 |
| Rocky Linux · 10 | glib-networking | 0:2.80.0-3.el10_3.4 |
| Rocky Linux · 10 | glib-networking | 0:2.80.0-3.el10_3.4 |
| Rocky Linux · 10 | glib-networking-debuginfo | 0:2.80.0-3.el10_3.4 |
| Rocky Linux · 10 | glib-networking-debuginfo | 0:2.80.0-3.el10_3.4 |
| Rocky Linux · 10 | glib-networking-debuginfo | 0:2.80.0-3.el10_3.4 |
| Rocky Linux · 10 | glib-networking-debuginfo | 0:2.80.0-3.el10_3.4 |
| Rocky Linux · 10 | glib-networking-debugsource | 0:2.80.0-3.el10_3.4 |
| Rocky Linux · 10 | glib-networking-debugsource | 0:2.80.0-3.el10_3.4 |
| Rocky Linux · 10 | glib-networking-debugsource | 0:2.80.0-3.el10_3.4 |
| Rocky Linux · 10 | glib-networking-debugsource | 0:2.80.0-3.el10_3.4 |
Vulnerabilities 1
-
High 7.5
Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service
A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, the client-side session cache does not limit the number of session tickets retained for a single host. A malicious server can exploit this by …