https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:01:41.727775+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:55440 ALSA-2026:55440 — Moderate: glib2 security update 2026-10-02T13:01:42.099687+00:00

Affected: AlmaLinux:9: glib2, AlmaLinux:9: glib2-devel, AlmaLinux:9: glib2-doc, AlmaLinux:9: glib2-static, AlmaLinux:9: glib2-tests

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010) * glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011) * glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012) * glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013) * glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014) * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015) * GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-10233 bdu:2026-10233 2026-10-02T13:01:42.099808+00:00 bdu:2026-10233 https://cve.radiocsirt.org/vuln/bell-cve-2026-15588 BELL-CVE-2026-15588 2026-10-02T13:01:42.099827+00:00

Affected: Alpaquita:23: glib, Alpaquita:25: glib, Alpaquita:stream: glib

 https://cve.radiocsirt.org/vuln/euvd-2026-382032 EUVD-2026-382032 2026-10-02T13:01:42.099850+00:00 EUVD-2026-382032 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15588 fkie_cve-2026-15588 2026-10-02T13:01:42.099862+00:00

A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.

 https://cve.radiocsirt.org/vuln/ghsa-hrq7-vgh7-p534 GHSA-hrq7-vgh7-p534 2026-10-02T13:01:42.099884+00:00

A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-15588 msrc_CVE-2026-15588 — Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering 2026-10-02T13:01:42.099900+00:00 msrc_CVE-2026-15588 https://cve.radiocsirt.org/vuln/oesa-2026-3241 OESA-2026-3241 — glib2 security update 2026-10-02T13:01:42.099917+00:00

Affected: openEuler:24.03-LTS-SP1: glib2

GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fix(es):

A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.(CVE-2026-15588)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11415-1 openSUSE-SU-2026:11415-1 — gio-branding-upstream-2.88.3-1.1 on GA media 2026-10-02T13:01:42.099941+00:00

gio-branding-upstream-2.88.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:39985 RHSA-2026:39985 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-02T13:01:42.099957+00:00

GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

 https://cve.radiocsirt.org/vuln/rlsa-2026:55440 RLSA-2026:55440 — Moderate: glib2 security update 2026-10-02T13:01:42.099974+00:00

Affected: Rocky Linux:9: glib2

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.

Security Fix(es):

* glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVE-2026-58010)

* glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime (CVE-2026-58011)

* glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVE-2026-58012)

* glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVE-2026-58013)

* glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014)

* glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015)

* GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2026:23880-1 SUSE-SU-2026:23880-1 — Security update for glib2 2026-10-02T13:01:42.100004+00:00

Security update for glib2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-15588 UBUNTU-CVE-2026-15588 2026-10-02T13:01:42.100019+00:00

Affected: Ubuntu:Pro:14.04:LTS: glib2.0, Ubuntu:Pro:16.04:LTS: glib2.0, Ubuntu:Pro:18.04:LTS: glib2.0, Ubuntu:Pro:20.04:LTS: glib2.0, Ubuntu:22.04:LTS: glib2.0, Ubuntu:24.04:LTS: glib2.0, Ubuntu:26.04:LTS: glib2.0

A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2866 WID-SEC-W-2026-2866 — Red Hat Enterprise Linux (glib2): Mehrere Schwachstellen 2026-10-02T13:01:42.100047+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux (glib2) ausnutzen, um einen Denial of Service Angriff durchzuführen und um Informationen offenzulegen.