PT-2026-133274

A flaw was found in glib-networking. When establishing connections using Transport Layer Security TLS version 1.3, the client-side session cache does not limit the number of session tickets retained for a single host. A malicious server can exploit this by sending excessive session ticket message...

PT-2026-134818

These are all security issues fixed in the glib-networking-2.90.1-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-103963

A flaw was found in glib-networking. When establishing connections using Transport Layer Security TLS version 1.3, the client-side session cache does not limit the number of session tickets retained for a single host. A malicious server can exploit this by sending excessive session ticket message...

CLEANSTART-2026-SB14639 file_copy_fallback in gio/gfile

Security vulnerability affects the glib package. filecopyfallback in gio/gfile...

CLEANSTART-2026-UL93208 GSocketClient in GNOME GLib through 2

Security vulnerability affects the glib package. GSocketClient in GNOME GLib through 2...

CLEANSTART-2026-VJ71474 issue was discovered in GNOME GLib before 2

Security vulnerability affects the glib package. An issue was discovered in GNOME GLib before 2...

PT-2026-135194

Security vulnerability affects the glib package. GSocketClient in GNOME GLib through 2...

PT-2026-135180

Security vulnerability affects the glib package. file copy fallback in gio/gfile...

PT-2026-135198

Security vulnerability affects the glib package. An issue was discovered in GNOME GLib before 2...

CVE-2026-85483

A flaw was found in Apache Thrift's C GLib bindings. Due to the use of an uninitialized resource and improper status code handling during request processing, the application can enter an inconsistent state. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS or...

CVE-2026-85476

A flaw was found in Apache Thrift. A remote attacker could cause a Denial of Service DoS by sending specially crafted input to an application using the C GLib bindings. Processing this malformed data triggers an infinite loop, consuming system resources and causing the application to become...

CVE-2026-66859

A flaw was found in Apache Thrift. A remote attacker can cause a Denial of Service DoS by triggering an application crash due to improper memory handling in the C GLib bindings. This vulnerability stems from an uninitialized variable and a null pointer dereference during data processing...

Astra Linux – Vulnerability in glib2.0

The gio/gsocks4aproxy.c file in GNOME GLib before version 2.82.1 contains an off-by-one error, leading to a buffer overflow. This issue arises because the SOCKS4CONNMSGLEN field is not sufficient to include a trailing '\0' character...

Astra Linux – Vulnerability in glib2.0

A issue was discovered in GNOME GLib before version 2.66.8. When the gfilereplace function is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly creates the target of the symlink as an empty file. This could potentially have security implications ...

Astra Linux – vulnerability in glib2.0

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, resulting in a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

Astra Linux – vulnerability in glib2.0

An issue was found in GNOME GLib prior to version 2.78.5, as well as in versions 2.79.x and 2.80.x prior to 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus...

Astra Linux – vulnerability in glib2.0

An issue was found in GNOME GLib prior to versions 2.66.7 and 2.67.x prior to version 2.67.4. If gbytearraynewtake is called with a buffer of 4GB or more on a 64-bit platform, the length is truncated modulo 232, resulting in unintended length truncation...

Astra Linux – Vulnerability in glib2.0

A flaw was discovered in glib. This vulnerability allows for a heap buffer overflow and a denial-of-service attack through an integer overflow in GLib’s GIO GLib Input/Output escapebytestring function, when processing malicious file or remote filesystem attribute values...

Astra Linux – Vulnerability in glib2.0

A flaw was discovered in GLib. The deserialization of GVariant is vulnerable to an exponential blowup issue, where a malicious GVariant can cause excessive processing, resulting in a denial of service...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities in system and open source components

Summary IBM Integrated Analytics System IIAS includes various open source packages, runtimes, and system libraries as part of its underlying platform. Multiple security vulnerabilities have been identified across components including Oracle Java SE, cryptography, Apache HttpComponents, libssh,...