CVE-2026-18418

The zbus proxy agent IPC backend in Zephyr (specifically zbus_proxy_agent_ipc.c) is vulnerable to an out-of-bounds read when logging rejected inter-domain frames. The vulnerability occurs because the channel_name[] array in struct zbus_proxy_msg may lack NUL-termination, and the logging logic use...

PT-2026-83844

Subject::new for owner in the zbus polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit...

[SECURITY] Fedora 44 Update: rust-ashpd-0.13.12-2.fc44

XDG portals wrapper in Rust using zbus...