Register | Log in

dbus-broker

Linux D-Bus Message Broker

Choose email to subscribe with

general

source: dbus-broker (main)
version: 37-5
maintainer: Utopia Maintenance Team (archive) (DMD)
uploaders: Luca Boccassi [DMD]
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 26-1+deb11u2
oldstable: 33-1
old-bpo: 37-2~bpo12+1
stable: 37-2
testing: 37-5
unstable: 37-5

versioned links

26-1+deb11u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
33-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
37-2~bpo12+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
37-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
37-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

dbus-broker

action needed

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2026-16730: A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.

Created: 2026-07-25 Last update: 2026-07-25 04:30

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2026-16730: A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.

Created: 2026-07-25 Last update: 2026-07-25 04:30

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2026-16730: A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.

Created: 2026-07-25 Last update: 2026-07-25 04:30

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2026-16730: A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.

Created: 2026-07-25 Last update: 2026-07-25 04:30

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2026-16730: A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and deny service to the desktop session. Flatpak applications can reach the host session bus through the dbus proxy.

Created: 2026-07-25 Last update: 2026-07-25 04:30

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 400de2759a2b40d3e8d159a43ae4d909c5b2d500
Merge: 3ef4109 8af3441
Author: Luca Boccassi <bluca@debian.org>
Date:   Wed Jun 17 13:42:44 2026 +0000

    Merge branch 'safe-uninstall' into 'debian/sid'
    
    d/dbus-broker.postrm: Disable unit on package removal
    
    See merge request utopia-team/dbus-broker!6

commit 8af3441b9c4c5d2252521d659d8a5a39c33e080a
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date:   Wed Jun 17 12:51:50 2026 +0200

    d/dbus-broker.postrm: Disable unit on package removal
    
    This stops aliasing the dbus.service name when dbus-broker is uninstalled,
    making it possible for other implementations to be started again.

https://salsa.debian.org/api/v4/projects/utopia-team%2Fdbus-broker API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.

Created: 2026-06-17 Last update: 2026-07-26 11:33

news

[2026-04-15] dbus-broker 37-5 MIGRATED to testing (Debian testing watch)
[2026-04-12] Accepted dbus-broker 37-5 (source) into unstable (Luca Boccassi)
[2025-12-26] dbus-broker 37-4 MIGRATED to testing (Debian testing watch)
[2025-12-24] Accepted dbus-broker 37-4 (source) into unstable (Luca Boccassi)
[2025-11-26] dbus-broker 37-3 MIGRATED to testing (Debian testing watch)
[2025-11-23] Accepted dbus-broker 37-3 (source) into unstable (Luca Boccassi)
[2025-07-20] Accepted dbus-broker 37-2~bpo12+1 (source) into stable-backports (Luca Boccassi)
[2025-07-20] dbus-broker 37-2 MIGRATED to testing (Debian testing watch)
[2025-07-14] Accepted dbus-broker 37-2 (source) into unstable (Luca Boccassi)
[2025-07-07] dbus-broker 37-1 MIGRATED to testing (Debian testing watch)
[2025-06-16] Accepted dbus-broker 37-1 (source) into unstable (Luca Boccassi)
[2025-05-06] Accepted dbus-broker 36-2~bpo12+1 (source) into stable-backports (Luca Boccassi)
[2025-05-06] dbus-broker 36-2 MIGRATED to testing (Debian testing watch)
[2025-04-25] Accepted dbus-broker 36-2 (source) into unstable (Luca Boccassi)
[2024-04-20] Accepted dbus-broker 36-1~bpo12+1 (source) into stable-backports (Luca Boccassi)
[2024-04-16] dbus-broker 36-1 MIGRATED to testing (Debian testing watch)
[2024-04-13] Accepted dbus-broker 36-1 (source) into unstable (Luca Boccassi)
[2024-02-18] dbus-broker 35-2 MIGRATED to testing (Debian testing watch)
[2024-02-16] Accepted dbus-broker 35-2 (source) into unstable (Luca Boccassi)
[2024-01-03] Accepted dbus-broker 35-1~bpo12+1 (source amd64) into stable-backports (Debian FTP Masters) (signed by: Luca Boccassi)
[2023-12-26] dbus-broker 35-1 MIGRATED to testing (Debian testing watch)
[2023-12-24] Accepted dbus-broker 35-1 (source) into unstable (Luca Boccassi)
[2023-12-16] dbus-broker 34-1 MIGRATED to testing (Debian testing watch)
[2023-12-14] Accepted dbus-broker 34-1 (source) into unstable (Luca Boccassi)
[2023-02-12] Accepted dbus-broker 33-1~bpo11+1 (source) into bullseye-backports (Luca Boccassi)
[2023-02-12] dbus-broker 33-1 MIGRATED to testing (Debian testing watch)
[2023-02-08] Accepted dbus-broker 33-1 (source) into unstable (Luca Boccassi)
[2023-01-23] dbus-broker 32-2 MIGRATED to testing (Debian testing watch)
[2023-01-15] Accepted dbus-broker 32-2 (source) into unstable (Luca Boccassi)
[2022-08-08] Accepted dbus-broker 32-1~bpo11+1 (source) into bullseye-backports (Luca Boccassi)

1
2

bugs [bug history graph]

all: 0

links

homepage
lintian
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 37-5ubuntu5
patches for 37-5ubuntu5

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing