Описание
Security update for xdg-dbus-proxy
This update for xdg-dbus-proxy fixes the following issue:
- CVE-2026-34080: failure in the policy parser can lead to information disclosure (bsc#1261737).
Список пакетов
SUSE Linux Enterprise Module for Basesystem 15 SP7
xdg-dbus-proxy-0.1.5-150600.3.5.1
Ссылки
- Link for SUSE-SU-2026:2755-1
- E-Mail link for SUSE-SU-2026:2755-1
- SUSE Security Ratings
- SUSE Bug 1261737
- SUSE CVE CVE-2026-34080 page
Описание
xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' (with a space before the equals sign) and similar cases. Clients can intercept D-Bus messages they should not have access to. This vulnerability is fixed in 0.1.7.
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:xdg-dbus-proxy-0.1.5-150600.3.5.1
Ссылки
- CVE-2026-34080
- SUSE Bug 1261737