Skip to content

[Deepin Integration]~[v25-Release] feat: update xdg-dbus-proxy to 0.1.8-1 by deepin-community-bot[bot]@deepin-community/xdg-dbus-proxy by deepin-community-ci-bot[bot] #13843

Description

@deepin-bot

Package information | 软件包信息

包名 版本
xdg-dbus-proxy 0.1.8-1

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4478/testing/ ./

Changelog | 更新信息

xdg-dbus-proxy (0.1.8-1) unstable; urgency=high

  • New upstream release
    • Fix a vulnerability in access control for receiving broadcasts.
      In 0.1.6 and 0.1.7, a malicious or compromised Flatpak app could
      receive any broadcast D-Bus message on the session bus or the AT-SPI
      bus, leading to unintended information disclosure.
      (GHSA-r7hp-698j-2h6c, Closes: #1144129)
  • Mention #1132939 in previous changelog entry

Metadata

Metadata

Type

No type

Projects

Status
In progress

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions