[ALSA-2026:90523] Important: xdg-dbus-proxy security update
Type:
security
Severity:
important
Release date:
2026-10-27
Description:
xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalone module to facilitate using it in other contexts. Security Fix(es): * xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape (CVE-2026-94422) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 xdg-dbus-proxy-0.1.5-4.el10_2.1.aarch64.rpm 6b3bc6a3c80054dddef27a5e5c17a96c7ef1a8ace6c8bc5f57161a6ed7bfafa0
ppc64le xdg-dbus-proxy-0.1.5-4.el10_2.1.ppc64le.rpm ec9b2b7eaf50866e2ccc0c44afc164ec1b07c85cd6292c740134b5c66fad951d
s390x xdg-dbus-proxy-0.1.5-4.el10_2.1.s390x.rpm ff6d0f8451994323f85483172653c3b0c0531b0e19a113c35bcb1d554012b6cd
x86_64 xdg-dbus-proxy-0.1.5-4.el10_2.1.x86_64.rpm b965c2e1841ebf55e0bf863ca465bd03dc8999a8743f7b62e71361651534b644
x86_64_v2 xdg-dbus-proxy-0.1.5-4.el10_2.1.x86_64_v2.rpm 7092386b244c4d53ecfeb1be965f0304a949302fbfe8c69596b310a2e6946dc9
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.