CVE-2026-58015

CVE-2026-58015 (GLib) : A flaw in GLib’s D‑Bus client-side SASL (DBUS_COOKIE_SHA1) does not validate the server-provided cookie_context. A malicious D‑Bus server can supply a cookie_context with path traversal, causing the client to read an arbitrary file and exfiltrate sensitive data by verifyin...

EUVD-2026-40318

A flaw was found in GLib. The D-Bus client-side implementation of the DBUSCOOKIESHA1 SASL authentication mechanism does not validate the cookiecontext parameter received from the server. A malicious D-Bus server can supply a cookiecontext containing path traversal sequences, causing the client to...

new packages: python-dbus-client-gen

An update is available for python-dbus-client-gen. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...