# dbus: multiple denial-of-service issues

Source: [Open Source Security](https://seclists.org/oss-sec/2026/q4/683) · 2026-11-12 · Security
Page: https://themorning.dev/story/dbus-multiple-denial-of-service-issues-a22c0e2a1100fadd
Kind: security · Impact: medium

## In brief

- dbus 1.16.4 was released with fixes for several denial-of-service issues.
- A further local denial-of-service issue, dbus#589, is known and not yet fixed.
- CVE IDs have been requested from Red Hat's CNA and were not yet allocated at publication.

## Why it matters

Systems running dbus can be made unavailable by these denial-of-service issues, so upgrading to 1.16.4 closes the fixed ones. dbus#589 remains open in this release.

## What to do

- Upgrade dbus to 1.16.4

## Versions

- dbus 1.16.4

## Timeline

- 2026-11-12: dbus 1.16.4 released with fixes for multiple denial-of-service issues, disclosed on oss-sec

## Coverage

- [dbus: multiple denial-of-service issues](https://seclists.org/oss-sec/2026/q4/683) — Open Source Security, 2026-11-12

Tags: dbus, security, denial-of-service, linux, vulnerability

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev