MGASA-2026-0446 Updated xdg-dbus-proxy packages fix security vulnerabilities

filtering for broadcast messages bypassing path/interface/member checks...

Updated xdg-dbus-proxy packages fix security vulnerabilities

filtering for broadcast messages bypassing path/interface/member checks...

PT-2026-105619

filtering for broadcast messages bypassing path/interface/member checks...

CVE-2026-93676

xdg-dbus-proxy incorrectly filters D-Bus broadcast messages , bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept broadcast signals on the D-Bus session bus and AT-SPI bus that should be restricted, potentially exposing sensitive...

CVE-2026-93676

xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept broadcast signals on the D-Bus session bus and AT-SPI bus that should be restricted, potentially exposing sensitive...

CVE-2026-93676

xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept broadcast signals on the D-Bus session bus and AT-SPI bus that should be restricted, potentially exposing sensitive...

SUSE CVE-2025-32901

In KDE Connect before 1.33.0 on Android, malicious device IDs sent via broadcast UDP could cause an application crash...

EUVD-2006-3929

Malware in sbrugna...

EUVD-2018-14345

Malware in sbrugna...

EUVD-2023-43435

Malicious code in bioql PyPI...

EUVD-2023-43433

Malicious code in bioql PyPI...

EUVD-2023-43432

Malicious code in bioql PyPI...

EUVD-2023-43434

Malicious code in bioql PyPI...

EUVD-2023-43437

Malicious code in bioql PyPI...

CVE-2023-39732

The leakage of the client secret in Tokueimaruwaiting Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

CVE-2023-39731

The leakage of the client secret in Kaibutsunosato v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

CVE-2023-39739

The leakage of the client secret in REGINA SWEETS Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

CVE-2023-39734

The leakage of the client secret in VISION MEAT WORKS TrackDiner10/10mc Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

CVE-2023-39737

The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

CVE-2024-47122

In the goTenna Pro App, the encryption keys are stored along with a static IV on the End User Device EUD. This allows for complete decryption of keys stored on the EUD if physically compromised. This allows an attacker to decrypt all encrypted broadcast communications based on encryption keys...