id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
24006	xdg-dbus-proxy-0.1.9	Joe Locash	SecurityAdvisory	"{{{
Changes in 0.1.9
================

Released: 2026-09-23

  * Fix message filtering bypass vulnerabilities
    (CVE-2026-94422, GHSA-2cgv-pwcq-wvpq)
      - Don't allow method calls and signals to be treated as requested
        replies, even if they specify a reply serial number
      - Only allow replies that were sent to the appropriate destination
  * Improve automated tests to include attempts to exploit CVE-2026-94422
}}}
"	enhancement	closed	elevated	98-Security	BOOK	git	high	fixed