[CLSA-2026:1791316945] dbus-broker: Fix of CVE-2026-16730
Type:
security
Severity:
Moderate
Release date:
2026-10-06 20:02:37 UTC
Description:
- CVE-2026-16730: bump RLIMIT_NOFILE to the hard limit at startup. This raises the session bus file-descriptor headroom from 1024 to 524288; the system unit sets a single LimitNOFILE=16384, so soft equals hard there and the bump is a no-op. accept4() in src/bus/listener.c still treats EMFILE/ENFILE as fatal, as upstream does.
CVEs fixed:
Updated packages:
  • dbus-broker-28-7.el9_6.tuxcare.els1.aarch64.rpm
    sha:f617b8b64f024d07e73d65ccda05d813bcd781ae2027908691d2a455812460f2
  • dbus-broker-28-7.el9_6.tuxcare.els1.i686.rpm
    sha:7f083a47d61d185af4d67cc2ae09a25008e9d0cfacb4705abe0c6c1ec54afc8f
  • dbus-broker-28-7.el9_6.tuxcare.els1.x86_64.rpm
    sha:c698c5a47be51c5250c589316928a2740cfe23d41193eadfe304e7222c086c3e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.