OESA-2026-2561

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-2561

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-2561.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-2561

Upstream

CVE-2026-10028

Published

2026-06-05T11:11:30Z

Modified

2026-08-18T01:20:02Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVSS Calculator

Summary

glib-networking security update

Details

glib-networking contains the implementations of certain GLib networking features that cannot be implemented directly in GLib itself because of their dependencies.

Security Fix(es):

A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain to an application that uses glib-networking with the GnuTLS backend enabled and performs certificate verification. This crafted chain, which contains circular issuer relationships, can cause an infinite loop during certificate verification. The unbounded traversal consumes excessive CPU resources, leading to a denial of service for the affected process or worker.(CVE-2026-10028)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:24.03-LTS-SP3 / glib-networking

Package

Name: glib-networking
Purl: pkg:rpm/openEuler/glib-networking&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.78.0-4.oe2403sp3

Ecosystem specific

{
    "aarch64": [
        "glib-networking-2.78.0-4.oe2403sp3.aarch64.rpm",
        "glib-networking-debuginfo-2.78.0-4.oe2403sp3.aarch64.rpm",
        "glib-networking-debugsource-2.78.0-4.oe2403sp3.aarch64.rpm",
        "glib-networking-tests-2.78.0-4.oe2403sp3.aarch64.rpm"
    ],
    "src": [
        "glib-networking-2.78.0-4.oe2403sp3.src.rpm"
    ],
    "x86_64": [
        "glib-networking-2.78.0-4.oe2403sp3.x86_64.rpm",
        "glib-networking-debuginfo-2.78.0-4.oe2403sp3.x86_64.rpm",
        "glib-networking-debugsource-2.78.0-4.oe2403sp3.x86_64.rpm",
        "glib-networking-tests-2.78.0-4.oe2403sp3.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-2561.json"

openEuler:20.03-LTS-SP4 / glib-networking

Package

Name: glib-networking
Purl: pkg:rpm/openEuler/glib-networking&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.62.4-4.oe2003sp4

Ecosystem specific

{
    "aarch64": [
        "glib-networking-2.62.4-4.oe2003sp4.aarch64.rpm",
        "glib-networking-debuginfo-2.62.4-4.oe2003sp4.aarch64.rpm",
        "glib-networking-debugsource-2.62.4-4.oe2003sp4.aarch64.rpm",
        "glib-networking-tests-2.62.4-4.oe2003sp4.aarch64.rpm"
    ],
    "src": [
        "glib-networking-2.62.4-4.oe2003sp4.src.rpm"
    ],
    "x86_64": [
        "glib-networking-2.62.4-4.oe2003sp4.x86_64.rpm",
        "glib-networking-debuginfo-2.62.4-4.oe2003sp4.x86_64.rpm",
        "glib-networking-debugsource-2.62.4-4.oe2003sp4.x86_64.rpm",
        "glib-networking-tests-2.62.4-4.oe2003sp4.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-2561.json"

openEuler:22.03-LTS-SP4 / glib-networking

Package

Name: glib-networking
Purl: pkg:rpm/openEuler/glib-networking&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.68.1-8.oe2203sp4

Ecosystem specific

{
    "aarch64": [
        "glib-networking-2.68.1-8.oe2203sp4.aarch64.rpm",
        "glib-networking-debuginfo-2.68.1-8.oe2203sp4.aarch64.rpm",
        "glib-networking-debugsource-2.68.1-8.oe2203sp4.aarch64.rpm",
        "glib-networking-tests-2.68.1-8.oe2203sp4.aarch64.rpm"
    ],
    "src": [
        "glib-networking-2.68.1-8.oe2203sp4.src.rpm"
    ],
    "x86_64": [
        "glib-networking-2.68.1-8.oe2203sp4.x86_64.rpm",
        "glib-networking-debuginfo-2.68.1-8.oe2203sp4.x86_64.rpm",
        "glib-networking-debugsource-2.68.1-8.oe2203sp4.x86_64.rpm",
        "glib-networking-tests-2.68.1-8.oe2203sp4.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-2561.json"

openEuler:24.03-LTS-SP1 / glib-networking

Package

Name: glib-networking
Purl: pkg:rpm/openEuler/glib-networking&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.78.0-4.oe2403sp1

Ecosystem specific

{
    "aarch64": [
        "glib-networking-2.78.0-4.oe2403sp1.aarch64.rpm",
        "glib-networking-debuginfo-2.78.0-4.oe2403sp1.aarch64.rpm",
        "glib-networking-debugsource-2.78.0-4.oe2403sp1.aarch64.rpm",
        "glib-networking-tests-2.78.0-4.oe2403sp1.aarch64.rpm"
    ],
    "src": [
        "glib-networking-2.78.0-4.oe2403sp1.src.rpm"
    ],
    "x86_64": [
        "glib-networking-2.78.0-4.oe2403sp1.x86_64.rpm",
        "glib-networking-debuginfo-2.78.0-4.oe2403sp1.x86_64.rpm",
        "glib-networking-debugsource-2.78.0-4.oe2403sp1.x86_64.rpm",
        "glib-networking-tests-2.78.0-4.oe2403sp1.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-2561.json"