Release date:
2026-09-11 13:23:24 UTC
Description:
- Improve detection of eavesdrop=true in the D-Bus match-rule filter
to address the following vulnerability:
- CVE-2026-34080: the eavesdrop= match was located with a fixed-string
search, so whitespace between 'eavesdrop' and '=' was not recognised
and a client could install an eavesdropping match rule that the proxy
was supposed to reject
Updated packages:
-
xdg-dbus-proxy-0.1.3-1.el9.tuxcare.els1.x86_64.rpm
sha:c15e17340f075fd2c2635273d92a9e23bd9afc45b8cad2f2b44ddc81d6f5f68a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
