RLSA-2026:99695: Important: glib-networking security update
The glib-networking packages provide modules that extend the networking support in Glib. In particular, the packages contain a libproxy-based implementation of the GProxyResolver class type and a gnutls-based implementation of the GTlsConnection class type.
Security Fix(es):
glib-networking: Unbounded TLS 1.3 session ticket queue growth in glib-networking allows remote denial of service (CVE-2026-103963)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/glib-networkingto a version that resolves this vulnerability.Fixed in 0:2.68.3-3.el9_9.1 - Upgrade
Upgrade
rocky-linux/glib-networking-debuginfoto a version that resolves this vulnerability.Fixed in 0:2.68.3-3.el9_9.1 - Upgrade
Upgrade
rocky-linux/glib-networking-debugsourceto a version that resolves this vulnerability.Fixed in 0:2.68.3-3.el9_9.1
Event History
Frequently Asked Questions
What systems are realistically exposed to this denial-of-service issue?
Systems using the affected Rocky Linux glib-networking packages and establishing TLS 1.3 connections through its GnuTLS-based GTlsConnection implementation are exposed to remote denial of service.
What does an attacker need to exploit the issue?
The vulnerability is network-reachable and requires no privileges or user interaction, as reflected by AV:N/AC:L/PR:N/UI:N. An attacker can trigger unbounded TLS 1.3 session ticket queue growth remotely.
What is the expected impact if exploitation succeeds?
The stated impact is denial of service through unbounded growth of the TLS 1.3 session ticket queue. The supplied CVSS vector indicates high availability impact, with no stated confidentiality or integrity impact.