SZB-bf6738c194
EUVD lists glib-networking TLS 1.3 session ticket flaw (7.5 CVSS)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- glib-networking
- Product
- glib-networking
- First seen
Summary
An EUVD entry updated 2026-10-30 rates a glib-networking flaw at 7.5 under CVSS v3.1. It says the client-side TLS 1.3 session cache does not limit session tickets per host, so a malicious server could exploit it by sending excessive tickets.
If you use glib-networking
Update glib-networking to a patched release from your distribution
Check whether your applications use glib-networking for TLS connections
Monitor distribution advisories for the fix
What the sources say 1
· Mastodon: “A flaw was found in glib-networking.” Source