[{"id":3678348,"web_url":"http://patchwork.ozlabs.org/comment/3678348/","msgid":"","list_archive_url":null,"date":"2026-04-16T19:43:34","subject":"Re: [Buildroot] [PATCH 1/1] package/xdg-dbus-proxy: security bump\n to version 0.1.7","submitter":{"id":80537,"url":"http://patchwork.ozlabs.org/api/people/80537/","name":"Julien Olivain","email":"ju.o@free.fr"},"content":"On 16/04/2026 13:42, Adrian Perez de Castro wrote:\n> While there is not a security advisory to go with the release,\n> it includes a patch to prevent message interception that may be\n> considered a security fix.\n> \n> Release notes:\n> \n> https://github.com/flatpak/xdg-dbus-proxy/releases/tag/0.1.7\n> \n> Signed-off-by: Adrian Perez de Castro \n\nApplied to master, thanks.","headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=ZIPmd+TL;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=140.211.166.136; helo=smtp3.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp3.osuosl.org (smtp3.osuosl.org [140.211.166.136])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fxT342nV7z1yG9\n\tfor ;\n Fri, 17 Apr 2026 05:43:44 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp3.osuosl.org (Postfix) with ESMTP id 836F86090B;\n\tThu, 16 Apr 2026 19:43:41 +0000 (UTC)","from smtp3.osuosl.org ([127.0.0.1])\n by localhost (smtp3.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id 0ZXOAsLeMsz2; Thu, 16 Apr 2026 19:43:39 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp3.osuosl.org (Postfix) with ESMTP id C618060A45;\n\tThu, 16 Apr 2026 19:43:39 +0000 (UTC)","from smtp2.osuosl.org (smtp2.osuosl.org [140.211.166.133])\n by lists1.osuosl.org (Postfix) with ESMTP id AF7DE2F4\n for ; Thu, 16 Apr 2026 19:43:38 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp2.osuosl.org (Postfix) with ESMTP id A11A840409\n for ; Thu, 16 Apr 2026 19:43:38 +0000 (UTC)","from smtp2.osuosl.org ([127.0.0.1])\n by localhost (smtp2.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id 99gBJuItsbEQ for ;\n Thu, 16 Apr 2026 19:43:38 +0000 (UTC)","from smtp2-g21.free.fr (smtp2-g21.free.fr [212.27.42.2])\n by smtp2.osuosl.org (Postfix) with ESMTPS id D3340403D6\n for ; Thu, 16 Apr 2026 19:43:37 +0000 (UTC)","from webmail.free.fr (unknown [172.20.246.1])\n (Authenticated sender: ju.o@free.fr)\n by smtp2-g21.free.fr (Postfix) with ESMTPA id D156420039C;\n Thu, 16 Apr 2026 21:43:34 +0200 (CEST)","from 2a01:e0a:1065:2100:52d9:65fe:2df3:c492\n via 2a01:e0a:1065:2100:52d9:65fe:2df3:c492 by webmail.free.fr\n with HTTP (HTTP/1.0 POST); Thu, 16 Apr 2026 21:43:34 +0200"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp3.osuosl.org C618060A45","OpenDKIM Filter v2.11.0 smtp2.osuosl.org D3340403D6"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1776368619;\n\tbh=bz1HrkFNMSmn+jbqlxqYLCTxFUOYDoJ4Zh8/xTOFgW4=;\n\th=Date:To:Cc:In-Reply-To:References:Subject:List-Id:\n\t List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:\n\t From:Reply-To:From;\n\tb=ZIPmd+TLaCcMdxnVPwPDBIrlRV1R6WUXZzfLhOeYtY2Fck700LR/nHS9Zu+YQ794F\n\t ddH41zuha2SW+Tv/6kVNlCFZzxOTDtWOgeyU83r7LwFJPdGzSs341BsY8c0wMporJR\n\t 8r2ZrswWSX+yWWcxNERE0Ty+9URhvHxiEHrmTJCGIC9QKakbSpaArjazunlV/p8/5i\n\t YwgNN9EOoSbM/axim8kUHLhSixkT3oYhBQa10xw0U5ODfhrF9gwqJxTmIs8O2WpP4+\n\t tIoREkeNfNFrNx4+/PtSkk644h9Bo8nbGyQ4jgg8qqEQD/T+pXru64xmVk6LZAGGR7\n\t uiA4v1x7g4SBw==","Received-SPF":"Pass (mailfrom) identity=mailfrom; client-ip=212.27.42.2;\n helo=smtp2-g21.free.fr; envelope-from=ju.o@free.fr; receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp2.osuosl.org D3340403D6","MIME-Version":"1.0","Date":"Thu, 16 Apr 2026 21:43:34 +0200","To":"Adrian Perez de Castro ","Cc":"buildroot@buildroot.org","In-Reply-To":"<20260416114256.969634-1-aperez@igalia.com>","References":"<20260416114256.969634-1-aperez@igalia.com>","User-Agent":"Webmail Free/1.6.14","Message-ID":"","X-Sender":"ju.o@free.fr","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/simple;\n d=free.fr; s=smtp-20201208; t=1776368616;\n bh=s5M0SaDQiTCHsX8VWluHxBb4F5I3+mN3v4MCgnDBIkg=;\n h=Date:From:To:Cc:Subject:In-Reply-To:References:From;\n b=Cby5N071dA4EdeBgC4r2FqiOOIAYyWXPEfYCdlRK3gfMmSxZcZvQiAfRKNzD/myPA\n sNf6xPw3d0MlJgHPZcSCk5azjzIWeGpV0zt8v29l2lwbQh0g/h25P2DTrVfvv+GD7e\n Qd9CnFWmt7UTpkDtiSThRuSIQ+7mVQi7oRXf85dzvzXFTHQx0aiz7yorNaKETqH3gj\n ScIpsXKOcsrbsBnqGGSpddT0wJlROJP3CDh+RSjN9xVuspLJ6zUfnXStT45nX0V7VO\n twsOSvE1SJnJ5bZIFMBY/q8HEZW/4ovxTXUUn/MfwRti7bgnlJCOIqg7FFrGwy32CS\n bB/DYR64NvejA==","X-Mailman-Original-Authentication-Results":["smtp2.osuosl.org;\n dmarc=pass (p=quarantine dis=none)\n header.from=free.fr","smtp2.osuosl.org;\n dkim=pass (2048-bit key) header.d=free.fr header.i=@free.fr\n header.a=rsa-sha256 header.s=smtp-20201208 header.b=Cby5N071"],"Subject":"Re: [Buildroot] [PATCH 1/1] package/xdg-dbus-proxy: security bump\n to version 0.1.7","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","From":"Julien Olivain via buildroot ","Reply-To":"Julien Olivain ","Content-Transfer-Encoding":"7bit","Content-Type":"text/plain; charset=\"us-ascii\"; Format=\"flowed\"","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "}},{"id":3682126,"web_url":"http://patchwork.ozlabs.org/comment/3682126/","msgid":"<20260424162724.162176-1-thomas.perale@mind.be>","list_archive_url":null,"date":"2026-04-24T16:27:24","subject":"Re: [Buildroot] [PATCH 1/1] package/xdg-dbus-proxy: security bump\n to version 0.1.7","submitter":{"id":87308,"url":"http://patchwork.ozlabs.org/api/people/87308/","name":"Thomas Perale","email":"thomas.perale@mind.be"},"content":"In reply of:\n> While there is not a security advisory to go with the release,\n> it includes a patch to prevent message interception that may be\n> considered a security fix.\n> \n> Release notes:\n> \n> https://github.com/flatpak/xdg-dbus-proxy/releases/tag/0.1.7\n> \n> Signed-off-by: Adrian Perez de Castro \n\nApplied to 2025.02.x & 2026.02.x. Thanks\n\n> ---\n> package/xdg-dbus-proxy/xdg-dbus-proxy.hash | 4 ++--\n> package/xdg-dbus-proxy/xdg-dbus-proxy.mk | 2 +-\n> 2 files changed, 3 insertions(+), 3 deletions(-)\n> \n> diff --git a/package/xdg-dbus-proxy/xdg-dbus-proxy.hash b/package/xdg-dbus-proxy/xdg-dbus-proxy.hash\n> index 93d4bc05ce..e5be1f0cd3 100644\n> --- a/package/xdg-dbus-proxy/xdg-dbus-proxy.hash\n> +++ b/package/xdg-dbus-proxy/xdg-dbus-proxy.hash\n> @@ -1,5 +1,5 @@\n> -# From https://github.com/flatpak/xdg-dbus-proxy/releases/tag/0.1.6\n> -sha256 131bf59fce7c7ee7ecbc5d9106d6750f4f597bfe609966573240f7e4952973a1 xdg-dbus-proxy-0.1.6.tar.xz\n> +# From https://github.com/flatpak/xdg-dbus-proxy/releases/tag/0.1.7\n> +sha256 3ad3d27ba574e178acb5e4d438ba36ace25e3564f899c36f31c56f82c7adbbe7 xdg-dbus-proxy-0.1.7.tar.xz\n> \n> # Hash for license files:\n> sha256 dc626520dcd53a22f727af3ee42c770e56c97a64fe3adb063799d8ab032fe551 COPYING\n> diff --git a/package/xdg-dbus-proxy/xdg-dbus-proxy.mk b/package/xdg-dbus-proxy/xdg-dbus-proxy.mk\n> index 0e92946915..6c3ef5c9d4 100644\n> --- a/package/xdg-dbus-proxy/xdg-dbus-proxy.mk\n> +++ b/package/xdg-dbus-proxy/xdg-dbus-proxy.mk\n> @@ -4,7 +4,7 @@\n> #\n> ################################################################################\n> \n> -XDG_DBUS_PROXY_VERSION = 0.1.6\n> +XDG_DBUS_PROXY_VERSION = 0.1.7\n> XDG_DBUS_PROXY_SITE = https://github.com/flatpak/xdg-dbus-proxy/releases/download/$(XDG_DBUS_PROXY_VERSION)\n> XDG_DBUS_PROXY_SOURCE = xdg-dbus-proxy-$(XDG_DBUS_PROXY_VERSION).tar.xz\n> XDG_DBUS_PROXY_DEPENDENCIES = host-pkgconf libglib2\n> -- \n> 2.53.0\n> \n> _______________________________________________\n> buildroot mailing list\n> buildroot@buildroot.org\n> https://lists.buildroot.org/mailman/listinfo/buildroot","headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=I+yU4jMC;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::138; helo=smtp1.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp1.osuosl.org (smtp1.osuosl.org [IPv6:2605:bc80:3010::138])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g2JKG2ZfBz1y2d\n\tfor ;\n Sat, 25 Apr 2026 02:27:46 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id BA8D384E20;\n\tFri, 24 Apr 2026 16:27:40 +0000 (UTC)","from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id 2lSi7I0X1EOM; Fri, 24 Apr 2026 16:27:37 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id C7DD584ECA;\n\tFri, 24 Apr 2026 16:27:37 +0000 (UTC)","from smtp1.osuosl.org (smtp1.osuosl.org [IPv6:2605:bc80:3010::138])\n by lists1.osuosl.org (Postfix) with ESMTP id 0EF74194\n for ; Fri, 24 Apr 2026 16:27:30 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp1.osuosl.org (Postfix) with ESMTP id 75F4F84EA2\n for ; Fri, 24 Apr 2026 16:27:29 +0000 (UTC)","from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id ikLcVVf4JBx5 for ;\n Fri, 24 Apr 2026 16:27:28 +0000 (UTC)","from mail-wm1-x333.google.com (mail-wm1-x333.google.com\n [IPv6:2a00:1450:4864:20::333])\n by smtp1.osuosl.org (Postfix) with ESMTPS id C31F584C49\n for ; Fri, 24 Apr 2026 16:27:27 +0000 (UTC)","by mail-wm1-x333.google.com with SMTP id\n 5b1f17b1804b1-488ad135063so72473795e9.0\n for ; Fri, 24 Apr 2026 09:27:27 -0700 (PDT)","from arch ([79.132.248.48]) by smtp.gmail.com with ESMTPSA id\n 5b1f17b1804b1-488fc1cfbf2sm622218425e9.15.2026.04.24.09.27.25\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Fri, 24 Apr 2026 09:27:25 -0700 (PDT)"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp1.osuosl.org C7DD584ECA","OpenDKIM Filter v2.11.0 smtp1.osuosl.org C31F584C49"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1777048057;\n\tbh=4Kotdt4AvKRp+85a7pAKMxUAK26xL5K2SQak/HVzxWo=;\n\th=To:Cc:Date:In-Reply-To:References:Subject:List-Id:\n\t List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:\n\t From:Reply-To:From;\n\tb=I+yU4jMCtM4FfoUol6u2ZY1mlzfPta+auMyb/eLW5YT0x7wmBrKkOvOa4VWewPZ94\n\t Z67ZYs3aACsQObe2GGncH820YjS3biinSIEiQrhGsYj5lAk4oRD9scZ8Awqj2+IeoN\n\t 5vVv7ehIo6iAcOIkndatG9bPHP8dOLAlOq+U/aeJtRXQ4QEvK1qTT1nzJd1myk7Cp4\n\t OXEEjQLC6sw5HfwZKlflf9SXX7WyfSUrYYIuuQ44zO/uBGJClY1sOv+217cci//Yp+\n\t ojejEuKOWfCdJee+G2SubzH2a8AV27EjTS0EAnPGsEWxxBGEYRb779LJmSvJM9A2f7\n\t pGP1YwLM4T7sw==","Received-SPF":"Pass (mailfrom) identity=mailfrom;\n client-ip=2a00:1450:4864:20::333; helo=mail-wm1-x333.google.com;\n envelope-from=thomas.perale@essensium.com; receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp1.osuosl.org C31F584C49","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1777048045; x=1777652845;\n h=content-transfer-encoding:mime-version:references:in-reply-to\n :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from\n :to:cc:subject:date:message-id:reply-to;\n bh=98f+kRSkRpTnwiW4sf8HXp1fGvMnMvLgVnyTFveoSdI=;\n b=fRKHWvyoxj81oigG+USASdnU4YHCaqAnEpJCgMxwl/xLf+WCoja9KOCyWJvmlaoM9V\n nRv1xarhBa0nybW6odtQX5VzPitn9KBRFsJlC88T/Li9waTRWPLV2LJu5Bdu/816CA1P\n jtXnQ0QDAZ6+ITW8b/0IyCUpGWda4hvJNQGmYjQz0NZKuMQxYeB5gR8N/UHuV8Rij3kP\n H7tWhPNJja1giH/hTae93hTVdG7LoeNYHzimmxIcaOyGLhIFvmtPn4YNVNY1F7S1t7Y4\n BSeDz/ZQyqlHfqzHQFX9bWRD3cuq5NO43AJ/0hD02SFWKUbTd851fRJR9N2kzaChnv3O\n DCVw==","X-Forwarded-Encrypted":"i=1;\n AFNElJ+B3k9FWrYwKDHx2z/KualbTd3WJuHeTCErjYhyM6elqGyfI5bRw484o2MrWIJ5DOZOEAOGBKPJ4mY=@buildroot.org","X-Gm-Message-State":"AOJu0Yym3M2TxYl6BZDgTEBSUfnrW7PMaVDruKMiO8Y+baz5kWVYqqQC\n BbeZ6yik6EAMfc3uox4NTFRYg2rtHFmrLdirpdbqJWZTPlCxDvgUBizcYTAi/bzpycE=","X-Gm-Gg":"AeBDieuy3fKFq7xwNfjW/9FB9vsZe4UOBKziP2U7WGf5zO4+zOjdars4hE+b9YQV8SB\n rBJK1wUFB6cB5ZkSEl5baPkIKVGzzukd4UJ3PhKTOe7/5ZNRQUtwHpb0oGViG3PQg6Ke0LnKdlH\n P7sAhSh1LSHwy0nqbMqzYnhiR9QafiPuhSlzgAM/v5yJcITEmPnGSikgBM+FIiMmlYprNoi4xbQ\n 7MQgrK1M0ih8Z2aRhuxI3ayJkgdpz3PiSpacmTXE1MwEG/qBTHLG72jmyvFdoetStdy2CA7MPxo\n kh81Fczkb3C9F0O4Q28hiyp2mgFqQLnI0QhCNd6mlGbWGb1aiuOXzThjD4B9CApyXrMiPPBCm/T\n gmRMCXonKs1m5DYp/DWpFKSCjZ/fvQLMztAXZ9eRvNAUsfVlFKGh81YelVxDYGo1YfKjwG8sGu5\n mQMrMmjIORvQW7CX3zGgj6BETg0w==","X-Received":"by 2002:a05:600c:8587:b0:485:3f30:6250 with SMTP id\n 5b1f17b1804b1-488fb7856b9mr354590055e9.20.1777048045521;\n Fri, 24 Apr 2026 09:27:25 -0700 (PDT)","To":"Adrian Perez de Castro ","Cc":"Thomas Perale ,\n\tbuildroot@buildroot.org","Date":"Fri, 24 Apr 2026 18:27:24 +0200","Message-ID":"<20260424162724.162176-1-thomas.perale@mind.be>","X-Mailer":"git-send-email 2.54.0","In-Reply-To":"<20260416114256.969634-1-aperez@igalia.com>","References":"<20260416114256.969634-1-aperez@igalia.com>","MIME-Version":"1.0","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=mind.be; s=google; t=1777048045; x=1777652845; darn=buildroot.org;\n h=content-transfer-encoding:mime-version:references:in-reply-to\n :message-id:date:subject:cc:to:from:from:to:cc:subject:date\n :message-id:reply-to;\n bh=98f+kRSkRpTnwiW4sf8HXp1fGvMnMvLgVnyTFveoSdI=;\n b=VTl+WvDfzrOwtx9NwUnpuXlV9+V+0wr/DzQ6vACWztyJRq6tTD9Gsutt9S6LMprao7\n E3MgWGgBRuSDaY44m4Y44np9qUHOQFplx5t+uyI3l4PpvswOJmq+IDwJOXVwODJ3ylMt\n e4v8VomMA13s4dZ8BJaXwYk2ndY1WGEAGn7EfjcWJhn9SoSyIhWRoLNyw88ovkfwvsCk\n 7riH3iAlFxutfFjaSq/lUCTGvRPzo4peqbw6VfWhSOratskytUKIoHuCwMjsuQgXtH5f\n UjL/58PogMo0SmGD7BumzztfJgwibc3i51LficqzKfKClFgyF42LX9+uMi4eqxmAkmy+\n iqBg==","X-Mailman-Original-Authentication-Results":["smtp1.osuosl.org;\n dmarc=pass (p=quarantine dis=none)\n header.from=mind.be","smtp1.osuosl.org;\n dkim=pass (2048-bit key) header.d=mind.be header.i=@mind.be\n header.a=rsa-sha256 header.s=google header.b=VTl+WvDf"],"Subject":"Re: [Buildroot] [PATCH 1/1] package/xdg-dbus-proxy: security bump\n to version 0.1.7","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","From":"Thomas Perale via buildroot ","Reply-To":"Thomas Perale ","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "}}]