Release date:
2026-09-11 11:40:16 UTC
Description:
- Improve detection of eavesdrop=true in the D-Bus match-rule filter
to address the following vulnerability:
- CVE-2026-34080: the eavesdrop= match was located with a fixed-string
search, so whitespace between 'eavesdrop' and '=' was not recognised
and a client could install an eavesdropping match rule that the proxy
was supposed to reject
Updated packages:
-
xdg-dbus-proxy-0.1.3-1.el9.tuxcare.els1.x86_64.rpm
sha:8cf8fa347a0e1098e36f0fc3da090fe7051ca604235e50cb0ccbb7da0f5db776
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
