rpm package
opensuse/glib-networking&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/glib-networking&distro=openSUSE%20Tumbleweed
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-10028 | Med | 4.3 | < 2.80.1-3.1 | 2.80.1-3.1 | May 28, 2026 | A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain to an application that uses glib-networking with the GnuTLS backend enabled and performs certificate verification. This crafted chain, which c | |
| CVE-2020-13645 | Med | 6.5 | < 2.68.1-1.3 | 2.68.1-1.3 | May 28, 2020 | In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the c |
- affected < 2.80.1-3.1fixed 2.80.1-3.1
A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain to an application that uses glib-networking with the GnuTLS backend enabled and performs certificate verification. This crafted chain, which c
- affected < 2.68.1-1.3fixed 2.68.1-1.3
In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the c