oss-sec mailing list archives

Re: xdg-dbus-proxy: GHSA-r7hp-698j-2h6c: broadcast message filtering bypass


From: Simon McVittie <smcv () debian org>
Date: Tue, 22 Sep 2026 22:53:29 +0100

On Tue, 11 Aug 2026 at 17:52:36 +0100, Simon McVittie wrote:
https://github.com/flatpak/xdg-dbus-proxy/security/advisories/GHSA-r7hp-698j-2h6c
xdg-dbus-proxy versions 0.1.6 and 0.1.7 had an incorrect implementation of broadcast message filtering

CVE-2026-93676 has been assigned.

    smcv


Current thread: