Skip to content

xdg-dbus-proxy 0.1.9

Latest

Choose a tag to compare

@smcv smcv released this 23 Sep 13:55
  • Fix message filtering bypass vulnerabilities
    (CVE-2026-94422, GHSA-2cgv-pwcq-wvpq)
    • Don't allow method calls and signals to be treated as requested
      replies, even if they specify a reply serial number
    • Only allow replies that were sent to the appropriate destination
  • Improve automated tests to include attempts to exploit CVE-2026-94422
5450dda586ec3bb3ca709d311e845487883faa3b09cf562608d7e84f4311dced *xdg-dbus-proxy-0.1.9.tar.xz