A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glib2-famUpgrade glib2-docUpgrade glib2Upgrade glib2-staticUpgrade glib2-testsUpgrade glib2-devel | Oct 11, 2026 | Aug 17, 2026 |
| Debian | — | Upgrade glib2.0 | Sep 21, 2026 | Jul 20, 2026 |
| Redhat_linux | — | Upgrade glib2-testsUpgrade glib2-devel-debuginfoUpgrade glib2-debuginfoNo solution existsUpgrade glib2-staticUpgrade glib2-fam-debuginfoUpgrade glib2-develUpgrade glib2Upgrade glib2-docUpgrade glib2-tests-debuginfoUpgrade glib2-debugsourceUpgrade glib2-fam | Jul 22, 2026 | Jul 12, 2026 |
| Rocky_linux | — | Upgrade glib2-debugsourceUpgrade glib2Upgrade glib2-devel-debuginfoUpgrade glib2-develUpgrade glib2-tests-debuginfoUpgrade glib2-fam-debuginfoUpgrade glib2-staticUpgrade glib2-testsUpgrade glib2-debuginfoUpgrade glib2-fam | Aug 20, 2026 | Aug 17, 2026 |
| Ubuntu | — | Upgrade libglib2.0-0Upgrade libglib2.0-0t64Upgrade libglib2.0-0 (Ubuntu Pro)Upgrade libglib2.0-binUpgrade libglib2.0-bin (Ubuntu Pro) | Sep 22, 2026 | Sep 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 2, 2026 | Jul 20, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub