A vulnerability in glib-networking affects the client-side TLS 1.3 session cache, where it does not limit the number of session tickets retained per host. A malicious server can exploit this by sending excessive session ticket messages, causing unbounded memory growth on the client side. This can lead to system memory exhaustion and a denial of service (DoS). The issue is fixed in version 2.78.0-6.oe2403sp1.