Synopsis
Important: xdg-dbus-proxy security update
Description
xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalone module to facilitate using it in other contexts.
Security Fix(es):
* xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape (CVE-2026-94422)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 10 aarch64
Rocky Linux 10 ppc64le
Rocky Linux 10 riscv64
Rocky Linux 10 s390x
Rocky Linux 10 x86_64
Fixes
2542235
CVEs
CVE-2026-94422
Affected packages
Rocky Linux 10 x86_64 - AppStream
xdg-dbus-proxy-0:0.1.5-4.el10_2.1.x86_64.rpm
xdg-dbus-proxy-0:0.1.5-4.el10_2.1.src.rpm
xdg-dbus-proxy-debuginfo-0:0.1.5-4.el10_2.1.x86_64.rpm
xdg-dbus-proxy-debugsource-0:0.1.5-4.el10_2.1.x86_64.rpm
Rocky Linux 10 ppc64le - AppStream
xdg-dbus-proxy-0:0.1.5-4.el10_2.1.ppc64le.rpm
xdg-dbus-proxy-0:0.1.5-4.el10_2.1.src.rpm
xdg-dbus-proxy-debugsource-0:0.1.5-4.el10_2.1.ppc64le.rpm
xdg-dbus-proxy-debuginfo-0:0.1.5-4.el10_2.1.ppc64le.rpm
Rocky Linux 10 aarch64 - AppStream
xdg-dbus-proxy-0:0.1.5-4.el10_2.1.src.rpm
xdg-dbus-proxy-debuginfo-0:0.1.5-4.el10_2.1.aarch64.rpm
xdg-dbus-proxy-debugsource-0:0.1.5-4.el10_2.1.aarch64.rpm
xdg-dbus-proxy-0:0.1.5-4.el10_2.1.aarch64.rpm
Rocky Linux 10 riscv64 - AppStream
xdg-dbus-proxy-0:0.1.5-4.el10_2.1.src.rpm
Rocky Linux 10 s390x - AppStream
xdg-dbus-proxy-0:0.1.5-4.el10_2.1.src.rpm
xdg-dbus-proxy-0:0.1.5-4.el10_2.1.s390x.rpm
xdg-dbus-proxy-debugsource-0:0.1.5-4.el10_2.1.s390x.rpm
xdg-dbus-proxy-debuginfo-0:0.1.5-4.el10_2.1.s390x.rpm