ELSA-2026-90522

ELSA-2026-90522 - xdg-dbus-proxy security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-26

Description

[0.1.3-1.1]
- Message filtering bypass via reply serial allows sandbox escape (CVE-2026-94422)
Resolves: RHEL-271548

Related CVEs

CVE-2026-94422

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	xdg-dbus-proxy-0.1.3-1.el9_8.1.src.rpm	13b6b69036e2cc0b4a4bb7a702e85a112df45613f49c8aaf913ffb82e889108e	-	ol9_aarch64_appstream
	xdg-dbus-proxy-0.1.3-1.el9_8.1.aarch64.rpm	75d3ecff183998ec743ca14b1ced957ad11ef1cb9ae087ff8810110d81b74ff0	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	xdg-dbus-proxy-0.1.3-1.el9_8.1.src.rpm	13b6b69036e2cc0b4a4bb7a702e85a112df45613f49c8aaf913ffb82e889108e	-	ol9_x86_64_appstream
	xdg-dbus-proxy-0.1.3-1.el9_8.1.x86_64.rpm	d504f7e602a8dc36b39564af29e87391442f1663366b627c989859bbeda1dd15	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team