Backport upstream commit 407349aa255a5c2b49caa52847aca1b8311c98b2
("gdbusauth: Limit length of lines read from client") to fix
CVE-2026-15588. The patch adds a maximum line length limit to
GDBusAuth server-side reads during authentication, preventing
untrusted clients from exhausting server memory by sending
arbitrarily long lines. A unit test for the new limit is
included.
CVE: CVE-2026-15588
Upstream patches:
- 407349aa25.patch
Resolves: RHEL-219130
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
