[ALSA-2026:90522] Important: xdg-dbus-proxy security update
Type:
security
Severity:
important
Release date:
2026-10-27
Description:
xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalone module to facilitate using it in other contexts. Security Fix(es): * xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape (CVE-2026-94422) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 xdg-dbus-proxy-0.1.3-1.el9_8.1.aarch64.rpm 4c50b23b8746a84770f66169b7d6cd2f7cf67114b998e22eca6fb7dbb9527455
ppc64le xdg-dbus-proxy-0.1.3-1.el9_8.1.ppc64le.rpm 70ad9e81913181a65b0df9a854d774aa56d1542b098a14877e2600dea0661866
s390x xdg-dbus-proxy-0.1.3-1.el9_8.1.s390x.rpm 138da8cdc66a0fa8c35b4893287d8bcf7eeaf8c78bc3ac3655bb3ccecc141ce9
x86_64 xdg-dbus-proxy-0.1.3-1.el9_8.1.x86_64.rpm 64dbbe7ebb6034ad5775eb3072297ebf1bbe4de611013869092c4de9b94cfc07
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.