Описание
Security update for xdg-dbus-proxy
This update for xdg-dbus-proxy fixes the following issue:
- CVE-2026-34080: failure in the policy parser can lead to information disclosure (bsc#1261737).
Список пакетов
openSUSE Leap 16.0
xdg-dbus-proxy-0.1.6-160000.3.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1261737
- SUSE CVE CVE-2026-34080 page
Описание
xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' (with a space before the equals sign) and similar cases. Clients can intercept D-Bus messages they should not have access to. This vulnerability is fixed in 0.1.7.
Затронутые продукты
openSUSE Leap 16.0:xdg-dbus-proxy-0.1.6-160000.3.1
Ссылки
- CVE-2026-34080
- SUSE Bug 1261737