RHSA-2026:99696: Important: glib-networking security update
The glib-networking packages provide modules that extend the networking support in Glib. In particular, the packages contain a libproxy-based implementation of the GProxyResolver class type and a gnutls-based implementation of the GTlsConnection class type.Security Fix(es): glib-networking: Unbounded TLS 1.3 session ticket queue growth in glib-networking allows remote denial of service (CVE-2026-103963) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/glib-networkingto a version that resolves this vulnerability.Fixed in 2.80.0-3.el10_3.4 - Upgrade
Upgrade
redhat/glib-networking-debuginfoto a version that resolves this vulnerability.Fixed in 2.80.0-3.el10_3.4 - Upgrade
Upgrade
redhat/glib-networking-debugsourceto a version that resolves this vulnerability.Fixed in 2.80.0-3.el10_3.4 - Upgrade
Upgrade
redhat/glib-networking-tests-debuginfoto a version that resolves this vulnerability.Fixed in 2.80.0-3.el10_3.4 - Upgrade
Upgrade
redhat/glib-networkingto a version that resolves this vulnerability.Fixed in 2.80.0-3.el10_3.4.aa - Upgrade
Upgrade
redhat/glib-networking-debuginfoto a version that resolves this vulnerability.Fixed in 2.80.0-3.el10_3.4.aa - Upgrade
Upgrade
redhat/glib-networking-debugsourceto a version that resolves this vulnerability.Fixed in 2.80.0-3.el10_3.4.aa - Upgrade
Upgrade
redhat/glib-networking-tests-debuginfoto a version that resolves this vulnerability.Fixed in 2.80.0-3.el10_3.4.aa
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
An attacker needs to interact remotely with an affected glib-networking TLS 1.3 implementation. The issue is described as unbounded growth of the TLS 1.3 session ticket queue, which can be used to cause denial of service.
Which components should be reviewed when applying this update?
Review installed glib-networking packages, including glib-networking, glib-networking-debuginfo, glib-networking-debugsource, and glib-networking-tests-debuginfo. The security-relevant functionality includes the GnuTLS-based GTlsConnection implementation.