ELSA-2025-15020

ELSA-2025-15020 - udisks2 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-09-03

Description

[2.10.90-5.0.1.1]
- Enable btrfs support for OL supported arches [Orabug: 37464632]

[2.10.90-5.1]
- udisks: Out-of-bounds read in UDisks Daemon (CVE-2025-8067)

[2.10.90-5]
- mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012)

[2.10.90-4]
- Rebase to upstream 2.10.90 (pre-)release
- lvm2: Try opening for unused device detection harder (RHEL-39935)

[2.10.90-3.gitdb54112e]
- Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018

[2.10.90-2.gitdb54112e]
- Fix Requires: for modules
- Fix gating tests

[2.10.90-1.gitdb54112e]
- Rebase to git snapshot as of 2024-07-25

[2.10.1-5]
- Bump release for June 2024 mass rebuild

[2.10.1-4]
- Use SPDX license tags for subpackages

[2.10.1-3]
- Use a SPDX license tag
- udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
- udiskslinuxmanager: Fix use after free
- tests: Fix targetcli_config.json

[2.10.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[2.10.1-1]
- Version 2.10.1
- Default to ntfs-3g for stability reasons (#2182206)
- Use Recommends: for filesystem tools (#2169848)

[2.10.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[2.10.0-1]
- Version 2.10.0

[2.9.4-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

[2.9.4-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[2.9.4-4]
- Fix gtk-doc annotations

[2.9.4-3]
- Require ntfs-3g (#2058506)

[2.9.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[2.9.4-1]
- Version 2.9.4
- Fixes CVE-2021-3802 (#2003650)

[2.9.3-1]
- Version 2.9.3

[2.9.2-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[2.9.2-5]
- Switch the default encryption to LUKS2

[2.9.2-4]
- Fix a couple of issues found by Coverity
- Ignore systemd 'Extended Boot Loader' GPT partition

[2.9.2-3]
- Fix FAT mkfs with dosfstools >= 4.2
- udiskslinuxdriveata: Use GTask to apply configuration in a thread
- Limit allowed module names
- 80-udisks2.rules: Ignore Apple boot partition from livecd-tools

[2.9.2-2]
- Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.

[2.9.2-1]
- Version 2.9.2

[2.9.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[2.9.1-2]
- Fix conditional around polkit Recommends for building on EL7

[2.9.1-1]
- Version 2.9.1
- Renamed zram-setup@.service to udisks2-zram-setup@.service

[2.9.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[2.9.0-1]
- Version 2.9.0

[2.8.4-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[2.8.4-3]
- Don't trigger udev if socket is not accessible

[2.8.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[2.8.4-1]
- Version 2.8.4

[2.8.3-1]
- Version 2.8.3

[2.8.2-2]
- Update for tmpfiles.d snippet

[2.8.2-1]
- Version 2.8.2

[2.8.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[2.8.1-1]
- Version 2.8.1

[2.8.0-2]
- Backport PR #576 to fix udev multipath device check (see RHBZ#1628192)

[2.8.0-1]
- Version 2.8.0

[2.7.7-3]
- Rebuild for new libconfig

[2.7.7-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[2.7.7-1]
- Version 2.7.7

[2.7.6-1]
- Version 2.7.6

[2.7.5-2]
- Switch to %ldconfig_scriptlets

[2.7.5-1]
- Version 2.7.5

[2.7.4-1]
- Version 2.7.4

[2.7.3-1]
- Version 2.7.3

[2.7.2-1]
- Version 2.7.2

[2.7.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[2.7.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.7.1-1]
- Version 2.7.1

[2.7.0-3]
- Do not try to remove changed_blacklist hash table in finalize

[2.7.0-2]
- Fix how UDisksClient filters property changes

[2.7.0-1]
- Version 2.7.0

[2.6.5-1]
- Version 2.6.5

[2.6.4-1]
- Version 2.6.4

[2.6.3-1]
- Version 2.6.3

[2.6.2-1]
- Version 2.6.2; aimed to replace udisks2

[2.6.0-3]
- Add support for libblockdev-part plugin which replaces
parted calls

[2.6.0-2]
- Fix permissions set for storaged_lsm.conf so it is readable only by root

[2.6.0-1]
- Upgrade to 2.6.0

[2.5.0-3]
- Package template zram-setup@.service file

[2.5.0-2]
- Add udisksd configuration file and its man page

[2.5.0-1]
- UDisks2 drop-in replacement

[2.4.0-3]
- Redesign subpackage dependencies
- Make GTK documentation generation configurable

[2.4.0-2]
- Reload udev rules and trigger events when installed

[2.4.0-1]
- Upgrade to 2.4.0

[2.3.0-2]
- Add Fedora/RHEL package configuration options

[2.3.0-1]
- Change BuildRequires from pkgconfig macro to -devel packages
- Upgrade to 2.3.0

[2.2.0-1]
- Upgrade to 2.2.0

[2.1.1-1]
- Upgrade to 2.1.1

[2.1.0-4]
- Add Requires for storaged modules

[2.1.0-3]
- Changes for EPEL-7
- Lower systemd required version to 208
- Rewrite BuildRequires for systemd-devel

[2.1.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2.1.0-1]
- Update to upstream 2.1.0

[2.0.0-1]
- Rebase to the new Storaged implementation
- Upstream: https://storaged.org

[0.3.1-1]
- Update to upstream 0.3.1

[0.3.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[0.3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[0.3.0-1]
- Update to upstream 0.3.0

[0.2.0-1]
- Update to upstream 0.2.0

[0.1.0-2]
- Removed double systemd BuildRequire
- Rewritten summary and description

[0.1.0-1]
- Rename from udisks2-lvm

Related CVEs

CVE-2025-8067

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	udisks2-2.10.90-5.0.1.el10_0.1.src.rpm	81528b2b3df3a900961d2e951a6a3db1abc1acff7736c1dc17f2550c36b24033	-	ol10_aarch64_appstream
	udisks2-2.10.90-5.0.1.el10_0.1.src.rpm	81528b2b3df3a900961d2e951a6a3db1abc1acff7736c1dc17f2550c36b24033	-	ol10_aarch64_codeready_builder
	libudisks2-2.10.90-5.0.1.el10_0.1.aarch64.rpm	35611c54bffdeec1af61a6869bae6c7585f71c727578ae524a3766ceb0685f02	-	ol10_aarch64_appstream
	libudisks2-devel-2.10.90-5.0.1.el10_0.1.aarch64.rpm	627b5e9d7697c4f050c2766b0bddcc5a5a5b25ecbd618f9d3e8f580d888550d2	-	ol10_aarch64_codeready_builder
	udisks2-2.10.90-5.0.1.el10_0.1.aarch64.rpm	3b352fbda4861b36fd67a02a8428cde3e40383cbda789d709cc8e726111bd12a	-	ol10_aarch64_appstream
	udisks2-iscsi-2.10.90-5.0.1.el10_0.1.aarch64.rpm	7e73d17b368cc933e68ec79f2fcaa1c2c604967e5819e89270ab2850b0f0208e	-	ol10_aarch64_appstream
	udisks2-lsm-2.10.90-5.0.1.el10_0.1.aarch64.rpm	b5d9805b2005674cfe9f103346c46c3e94f519296d6788cdce3e634afd87d84f	-	ol10_aarch64_appstream
	udisks2-lvm2-2.10.90-5.0.1.el10_0.1.aarch64.rpm	194b16f458b361d7e31d96a4dd29c9329870c3f286b8182bec088ddbb1dc333d	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	udisks2-2.10.90-5.0.1.el10_0.1.src.rpm	81528b2b3df3a900961d2e951a6a3db1abc1acff7736c1dc17f2550c36b24033	-	ol10_x86_64_appstream
	udisks2-2.10.90-5.0.1.el10_0.1.src.rpm	81528b2b3df3a900961d2e951a6a3db1abc1acff7736c1dc17f2550c36b24033	-	ol10_x86_64_codeready_builder
	libudisks2-2.10.90-5.0.1.el10_0.1.x86_64.rpm	d437c0b6a2cbf386b7e92a8a362547c3b8f4020ab5b046fbdb68792ac098dd56	-	ol10_x86_64_appstream
	libudisks2-devel-2.10.90-5.0.1.el10_0.1.x86_64.rpm	2e38312fc4f97b42df603560bca8f82ba46b5565ea380100cbaa26d81dc458c9	-	ol10_x86_64_codeready_builder
	udisks2-2.10.90-5.0.1.el10_0.1.x86_64.rpm	43e5fad69c125415c8abde34573940c2140de03e5829c434b5ef05a7b0f38a75	-	ol10_x86_64_appstream
	udisks2-iscsi-2.10.90-5.0.1.el10_0.1.x86_64.rpm	6f112176cdfc75bb9a46e5d23751df99f7bfbb32fb51ffd85d57a1f781656ff1	-	ol10_x86_64_appstream
	udisks2-lsm-2.10.90-5.0.1.el10_0.1.x86_64.rpm	5a742eeb3ee516ab16590c5b92db8bc75aa6567c42b65b9eecf149ced4918936	-	ol10_x86_64_appstream
	udisks2-lvm2-2.10.90-5.0.1.el10_0.1.x86_64.rpm	dabfd8aa5c2da3c08dec1206b7083582c2c74adc79215ec615628e8122a371bf	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team