ELSA-2026-90523

ELSA-2026-90523 - xdg-dbus-proxy security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-26

Description

[0.1.5-4.1]
- Message filtering bypass via reply serial allows sandbox escape (CVE-2026-94422)
Resolves: RHEL-271542

Related CVEs

CVE-2026-94422

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	xdg-dbus-proxy-0.1.5-4.el10_2.1.src.rpm	53fe423fc37bab5058ea558dce284c12c4658017e0476c76f49cdd2d89df9ec8	-	ol10_aarch64_appstream
	xdg-dbus-proxy-0.1.5-4.el10_2.1.aarch64.rpm	a5df0e54c547d88ec8d636c28eac2fde058b0831ff2e5a30b9d7d17ad057823b	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	xdg-dbus-proxy-0.1.5-4.el10_2.1.src.rpm	53fe423fc37bab5058ea558dce284c12c4658017e0476c76f49cdd2d89df9ec8	-	ol10_x86_64_appstream
	xdg-dbus-proxy-0.1.5-4.el10_2.1.x86_64.rpm	2106fd9c07e954c0877dbc6d677240e170a701ebc919dcee26124baf55ed846e	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team