DSA-6433-1 xdg-dbus-proxy - security update
It was discovered that incorrect validation of broadcast policy rules in xdg-dbus-proxy (a filtering proxy for D-Bus connections) allowed a malicious Flatpak application to monitor signals on the D-Bus session bus. https://security-tracker.debian.org/tracker/DSA-6433-1
CSIRTS triage
- What
- Incorrect validation of broadcast policy rules in xdg-dbus-proxy allows a malicious Flatpak application to monitor D-Bus session bus signals.
- Who is affected
- Flatpak applications and systems running affected xdg-dbus-proxy versions; primary risk to users running untrusted Flatpak applications.
- Urgency
- Moderate; information disclosure risk limited to Flatpak sandboxing bypass; requires malicious application installation.
- Action
- Apply DSA-6433-1 update to xdg-dbus-proxy.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch xdg-dbus-proxy
Get an email when a new xdg-dbus-proxy advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://lists.debian.org/debian-security-announce/2026/msg00346.html
More from Debian Security Advisories
- unknownDSA-6489-1 gst-plugins-base1.0 - security update2026-09-08
- unknownDSA-6488-1 jbig2dec - security update2026-09-07
- unknownDSA-6487-1 strongswan - security update2026-09-07
- unknownDSA-6485-1 tryton-server - security update2026-09-06
- unknownDSA-6486-1 libde265 - security update2026-09-06