[Pkg-utopia-maintainers] Bug#1142850: dbus-broker: CVE-2026-16730 - both fix commits apply to 37-5 and 37-2

[Sumit Verma]

Hi,

The two commits listed in the security tracker:

aaa9fd6bbc2d "broker/main: bump RLIMIT_NOFILE to hard limit"
(src/broker/main.c, src/util/misc.c, src/util/misc.h)
c4a3c886366f "bus/peer: account peer-pidfd on peers" (src/bus/peer.c)

are on main and in no release tag yet. Applied in that order to
unstable 37-5 and trixie 37-2 (sources from
https://www.google.com/url?q=http://sources.debian.org&source=gmail&ust=1793800252912000&sa=E
):
aaa9fd6b applies with fuzz 1, c4a3c886 with offsets +3
on both versions.

Mechanical patch-applies check only; not built or tested. Because of
the fuzz on aaa9fd6b, the result is worth checking.

Regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-utopia-maintainers/attachments/20261103/b14b0559/attachment.htm>