RHSA-2026:61340: Moderate: dbus-broker security update
dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusively written for Linux systems, and makes use of many modern features provided by recent Linux kernel releases.Security Fix(es): dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup (CVE-2026-16730) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/dbus-brokerto a version that resolves this vulnerability.Fixed in 36-5.el10_2 - Upgrade
Upgrade
redhat/dbus-broker-debuginfoto a version that resolves this vulnerability.Fixed in 36-5.el10_2 - Upgrade
Upgrade
redhat/dbus-broker-debugsourceto a version that resolves this vulnerability.Fixed in 36-5.el10_2 - Upgrade
Upgrade
redhat/dbus-brokerto a version that resolves this vulnerability.Fixed in 36-5.el10_2.aa - Upgrade
Upgrade
redhat/dbus-broker-debuginfoto a version that resolves this vulnerability.Fixed in 36-5.el10_2.aa - Upgrade
Upgrade
redhat/dbus-broker-debugsourceto a version that resolves this vulnerability.Fixed in 36-5.el10_2.aa - Upgrade
Upgrade
dbus-brokerto a version that resolves this vulnerability.Patch CVE-2026-16730
Event History
Frequently Asked Questions
Which systems are in scope for this update?
The update applies to Linux systems using dbus-broker. The advisory describes dbus-broker as exclusively written for Linux systems.
What is the operational impact of the flaw?
The issue can cause a denial of service affecting the session bus during peer setup, through an EMFILE condition.
Which package artifacts are included in the advisory?
The listed software includes redhat/dbus-broker, redhat/dbus-broker-debuginfo, and redhat/dbus-broker-debugsource.