SUSE-SU-2026:4348-2: Security update for glib2

Q: Which systems are in scope for this update?

The affected software list includes glib2 and its associated GLib libraries, including libglib, libgio, libgmodule, libgthread, and libgobject. The advisory specifically lists SUSE Linux Enterprise Server 12 SP5 LTSS on aarch64, ppc64le, s390x, and x86_64.

Q: What condition is required for exploitation?

The issue is described as a pre-authentication denial of service in GDBusServer caused by unbounded SASL line buffering. This indicates an attacker can target a GDBusServer before completing authentication.

Q: What is the impact of the vulnerability?

The advisory identifies the impact as denial of service. It also includes a separate fix for a segfault when monitoring hard links, but does not state that this behavior is part of CVE-2026-15588.

Published Nov 10, 2026

Updated

This update for glib2 fixes the following issue:

- CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).

Changes for glib2:

- Fix segfault when monitoring hard links (bsc#1281419).

Other sources

This update for glib2 fixes the following issue: CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206). Changes for glib2: Fix segfault when monitoring hard links (bsc#1281419).

— SUSE

Affected Software

31 affected componentsFixes available

suse/glib2<2.48.2-12.64.1

2.48.2-12.64.1

All of the following

SUSE SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libglib<2_0-0-2.48.2-12.64.1

2_0-0-2.48.2-12.64.1

suse/libgio<2_0-0-debuginfo-2.48.2-12.64.1

2_0-0-debuginfo-2.48.2-12.64.1

suse/libglib<2_0-0-debuginfo-2.48.2-12.64.1

2_0-0-debuginfo-2.48.2-12.64.1

suse/glib2-devel-static<2.48.2-12.64.1

2.48.2-12.64.1

suse/libgmodule<2_0-0-2.48.2-12.64.1

2_0-0-2.48.2-12.64.1

suse/libgio<2_0-0-2.48.2-12.64.1

2_0-0-2.48.2-12.64.1

suse/libgthread<2_0-0-debuginfo-2.48.2-12.64.1

2_0-0-debuginfo-2.48.2-12.64.1

suse/glib2-tools-debuginfo<2.48.2-12.64.1

2.48.2-12.64.1

suse/libgthread<2_0-0-2.48.2-12.64.1

2_0-0-2.48.2-12.64.1

suse/glib2-devel-debuginfo<2.48.2-12.64.1

2.48.2-12.64.1

suse/glib2-devel<2.48.2-12.64.1

2.48.2-12.64.1

suse/glib2-debugsource<2.48.2-12.64.1

2.48.2-12.64.1

suse/glib2-tools<2.48.2-12.64.1

2.48.2-12.64.1

suse/libgmodule<2_0-0-debuginfo-2.48.2-12.64.1

2_0-0-debuginfo-2.48.2-12.64.1

suse/libgobject<2_0-0-2.48.2-12.64.1

2_0-0-2.48.2-12.64.1

suse/libgobject<2_0-0-debuginfo-2.48.2-12.64.1

2_0-0-debuginfo-2.48.2-12.64.1

All of the following

SUSE SUSE Linux Enterprise Server 12 SP5 LTSS (noarch)

suse/glib2-lang<2.48.2-12.64.1

2.48.2-12.64.1

All of the following

SUSE SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64)

Any of the following

suse/libgthread<2_0-0-32bit-2.48.2-12.64.1

2_0-0-32bit-2.48.2-12.64.1

suse/libglib<2_0-0-32bit-2.48.2-12.64.1

2_0-0-32bit-2.48.2-12.64.1

suse/libgthread<2_0-0-debuginfo-32bit-2.48.2-12.64.1

2_0-0-debuginfo-32bit-2.48.2-12.64.1

suse/libglib<2_0-0-debuginfo-32bit-2.48.2-12.64.1

2_0-0-debuginfo-32bit-2.48.2-12.64.1

suse/libgmodule<2_0-0-32bit-2.48.2-12.64.1

2_0-0-32bit-2.48.2-12.64.1

suse/libgobject<2_0-0-debuginfo-32bit-2.48.2-12.64.1

2_0-0-debuginfo-32bit-2.48.2-12.64.1

suse/libgobject<2_0-0-32bit-2.48.2-12.64.1

2_0-0-32bit-2.48.2-12.64.1

suse/libgio<2_0-0-debuginfo-32bit-2.48.2-12.64.1

2_0-0-debuginfo-32bit-2.48.2-12.64.1

suse/libgio<2_0-0-32bit-2.48.2-12.64.1

2_0-0-32bit-2.48.2-12.64.1

suse/libgmodule<2_0-0-debuginfo-32bit-2.48.2-12.64.1

2_0-0-debuginfo-32bit-2.48.2-12.64.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/glib2 to a version that resolves this vulnerability.
Fixed in 2.48.2-12.64.1
Upgrade
Upgrade suse/libglib to a version that resolves this vulnerability.
Fixed in 2_0-0-2.48.2-12.64.1
Upgrade
Upgrade suse/libgio to a version that resolves this vulnerability.
Fixed in 2_0-0-debuginfo-2.48.2-12.64.1
Upgrade
Upgrade suse/libglib to a version that resolves this vulnerability.
Fixed in 2_0-0-debuginfo-2.48.2-12.64.1
Upgrade
Upgrade suse/glib2-devel-static to a version that resolves this vulnerability.
Fixed in 2.48.2-12.64.1
Upgrade
Upgrade suse/libgmodule to a version that resolves this vulnerability.
Fixed in 2_0-0-2.48.2-12.64.1
Upgrade
Upgrade suse/libgio to a version that resolves this vulnerability.
Fixed in 2_0-0-2.48.2-12.64.1
Upgrade
Upgrade suse/libgthread to a version that resolves this vulnerability.
Fixed in 2_0-0-debuginfo-2.48.2-12.64.1
Upgrade
Upgrade suse/glib2-tools-debuginfo to a version that resolves this vulnerability.
Fixed in 2.48.2-12.64.1
Upgrade
Upgrade suse/libgthread to a version that resolves this vulnerability.
Fixed in 2_0-0-2.48.2-12.64.1
Upgrade
Upgrade suse/glib2-devel-debuginfo to a version that resolves this vulnerability.
Fixed in 2.48.2-12.64.1
Upgrade
Upgrade suse/glib2-devel to a version that resolves this vulnerability.
Fixed in 2.48.2-12.64.1
Upgrade
Upgrade suse/glib2-debugsource to a version that resolves this vulnerability.
Fixed in 2.48.2-12.64.1
Upgrade
Upgrade suse/glib2-tools to a version that resolves this vulnerability.
Fixed in 2.48.2-12.64.1
Upgrade
Upgrade suse/libgmodule to a version that resolves this vulnerability.
Fixed in 2_0-0-debuginfo-2.48.2-12.64.1
Upgrade
Upgrade suse/libgobject to a version that resolves this vulnerability.
Fixed in 2_0-0-2.48.2-12.64.1
Upgrade
Upgrade suse/libgobject to a version that resolves this vulnerability.
Fixed in 2_0-0-debuginfo-2.48.2-12.64.1
Upgrade
Upgrade suse/glib2-lang to a version that resolves this vulnerability.
Fixed in 2.48.2-12.64.1
Upgrade
Upgrade suse/libgthread to a version that resolves this vulnerability.
Fixed in 2_0-0-32bit-2.48.2-12.64.1
Upgrade
Upgrade suse/libglib to a version that resolves this vulnerability.
Fixed in 2_0-0-32bit-2.48.2-12.64.1
Upgrade
Upgrade suse/libgthread to a version that resolves this vulnerability.
Fixed in 2_0-0-debuginfo-32bit-2.48.2-12.64.1
Upgrade
Upgrade suse/libglib to a version that resolves this vulnerability.
Fixed in 2_0-0-debuginfo-32bit-2.48.2-12.64.1
Upgrade
Upgrade suse/libgmodule to a version that resolves this vulnerability.
Fixed in 2_0-0-32bit-2.48.2-12.64.1
Upgrade
Upgrade suse/libgobject to a version that resolves this vulnerability.
Fixed in 2_0-0-debuginfo-32bit-2.48.2-12.64.1
Upgrade
Upgrade suse/libgobject to a version that resolves this vulnerability.
Fixed in 2_0-0-32bit-2.48.2-12.64.1
Upgrade
Upgrade suse/libgio to a version that resolves this vulnerability.
Fixed in 2_0-0-debuginfo-32bit-2.48.2-12.64.1
Upgrade
Upgrade suse/libgio to a version that resolves this vulnerability.
Fixed in 2_0-0-32bit-2.48.2-12.64.1
Upgrade
Upgrade suse/libgmodule to a version that resolves this vulnerability.
Fixed in 2_0-0-debuginfo-32bit-2.48.2-12.64.1
Upgrade
Upgrade glib2 to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4348

Event History

Nov 10, 2026

Advisory Published

via OSV·12:33 AM

Data Sourced

via OSV·12:33 AM

DescriptionAffected Software

Advisory Published

via SUSE·12:33 AM

Data Sourced

via SUSE·12:33 AM

RemedyDescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-15588

Frequently Asked Questions

Which systems are in scope for this update?

The affected software list includes glib2 and its associated GLib libraries, including libglib, libgio, libgmodule, libgthread, and libgobject. The advisory specifically lists SUSE Linux Enterprise Server 12 SP5 LTSS on aarch64, ppc64le, s390x, and x86_64.

What condition is required for exploitation?

The issue is described as a pre-authentication denial of service in GDBusServer caused by unbounded SASL line buffering. This indicates an attacker can target a GDBusServer before completing authentication.

What is the impact of the vulnerability?

The advisory identifies the impact as denial of service. It also includes a separate fix for a segfault when monitoring hard links, but does not state that this behavior is part of CVE-2026-15588.

SUSE-SU-2026:4348-2: Security update for glib2

Other sources

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems are in scope for this update?

What condition is required for exploitation?

What is the impact of the vulnerability?

Company

Resources

Contact

Frequently Asked Questions

Which systems are in scope for this update?

What condition is required for exploitation?

What is the impact of the vulnerability?