RHSA-2026:99697: Important: glib-networking security update
Important: glib-networking security update
Other sources
The glib-networking packages provide modules that extend the networking support in Glib. In particular, the packages contain a libproxy-based implementation of the GProxyResolver class type and a gnutls-based implementation of the GTlsConnection class type.Security Fix(es): glib-networking: Unbounded TLS 1.3 session ticket queue growth in glib-networking allows remote denial of service (CVE-2026-103963) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
An attacker needs to be able to interact remotely with a glib-networking client using TLS 1.3 session tickets. The reported impact is denial of service through unbounded growth of the TLS 1.3 session ticket queue.
Which systems are covered by this advisory?
The advisory applies to listed Red Hat Enterprise Linux offerings for x86_64, IBM z Systems, and Power little endian, including Extended Update Support, Extended Life Cycle, SAP Solutions update services, and the IBM z Systems four-years-of-updates offering.