xdg-dbus-proxy (0.1.8-1)
[PTS] [DDPO]
OK: VCS matches the version in the archive
- Git: https://salsa.debian.org/debian/xdg-dbus-proxy.git
-
- Branch: debian/latest
- Path: debian/changelog
- Repo size: 454656
- Browser: https://salsa.debian.org/debian/xdg-dbus-proxy
- Last scan: 2026-08-11 15:18:01+00
- Error: https://salsa.debian.org/api/v4/projects/debian%2Fxdg-dbus-proxy API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.
- Next scan: 2026-08-19 10:09:00+00
- Debian changelog in Git:
xdg-dbus-proxy (0.1.8-1) unstable; urgency=high
* New upstream release
- Fix a vulnerability in access control for receiving broadcasts.
In 0.1.6 and 0.1.7, a malicious or compromised Flatpak app could
receive any broadcast D-Bus message on the session bus or the AT-SPI
bus, leading to unintended information disclosure.
(GHSA-r7hp-698j-2h6c, Closes: #1144129)
* Mention #1132939 in previous changelog entry
-- Simon McVittie <smcv@debian.org> Tue, 11 Aug 2026 13:32:52 +0100
- This branch is even with tag debian/0.1.8-1