0 releases 66 tags

RSS feed

• imports/c10s/udisks2-2.11.1-2.el10 2377271ea0

  Compare

  Fix CVE-2026-7867: as-user caller identity handling in udisks2

  Ghost released this 2026-08-13 14:41:55 +00:00 | -118 commits to c8 since this release

  Backport fix for CVE-2026-7867 to udisks2-2.11.1. The patch
  addresses improper caller identity handling when the 'as-user'
  option is used in filesystem mount/unmount operations. Four
  upstream commits are cherry-picked: separating real caller
  identity from the as-user target, using real caller identity
  for mount authorization and unmount checks, and adding an
  authorization check for the as-user option.

  CVE: CVE-2026-7867
  Upstream patches:

  • github.com/storaged-project/udisks@39891417ff.patch
  • github.com/storaged-project/udisks@fef8dbc465.patch
  • github.com/storaged-project/udisks@5d14b3846c.patch
  • github.com/storaged-project/udisks@a76016c118.patch
    Resolves: RHEL-173438

  This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

  Assisted-by: Ymir

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads