Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3121-1

Опубликовано: 20 июл. 2026
Источник: suse-cvrf

Описание

Security update for glib-networking

This update for glib-networking fixes the following issue

  • CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).

Список пакетов

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
glib-networking-2.48.2-6.6.1
glib-networking-lang-2.48.2-6.6.1

Ссылки

Описание

A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain to an application that uses glib-networking with the GnuTLS backend enabled and performs certificate verification. This crafted chain, which contains circular issuer relationships, can cause an infinite loop during certificate verification. The unbounded traversal consumes excessive CPU resources, leading to a denial of service for the affected process or worker.

Затронутые продукты
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:glib-networking-2.48.2-6.6.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:glib-networking-lang-2.48.2-6.6.1
Ссылки