Commit Graph

1 Commits

Author SHA1 Message Date
RHEL Packaging Agent
a06b1ba6d5 Fix CVE-2026-15588: limit D-Bus auth line read length
Backport upstream fix from GNOME/glib MR !5240 (commit 407349aa)
for CVE-2026-15588. The patch adds a line length limit in
GDBusAuth to prevent an untrusted D-Bus client from exhausting
server memory by sending arbitrarily long authentication lines.
A corresponding unit test is included.

CVE: CVE-2026-15588
Upstream patches:
 - https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5240.patch
Resolves: RHEL-219128

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-19 16:29:30 +00:00