Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
glib2 can be crashed by malicious D‑Bus connection
published 1 month ago
Summary
The glib2 library used on SUSE systems may be forced to stop responding when an attacker sends specially crafted data over D‑Bus. This can disrupt services that rely on glib2, leading to temporary outages. Apply the latest glib2 update from SUSE as soon as possible to prevent this issue.
What to do
- Update suse glib2 to version 2.78.6-150600.4.41.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | suse | glib2 |
< 2.78.6-150600.4.41.1 Fix: upgrade to 2.78.6-150600.4.41.1
|
Original advisory text
Security update for glib2
This update for glib2 fixes the following issue:
- CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).
- CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-20264367-1/ Vendor Advisory
- https://bugzilla.suse.com/1272206 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-15588 URL
Timeline
Published28 Sep 2026
Updated29 Sep 2026
First seen29 Sep 2026
Sources
SUSE-SU-2026:4367-1 · OSV
Track software like this
Free during beta