This update for udisks2 fixes the following issues:
- CVE-2025-8067: Fixed a missing bounds check that could lead to out-of-bounds
read in udisks daemon (bsc#1248502).
Patch instructions:
To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 16.0
zypper in -t patch openSUSE-Leap-16.0-226=1
- openSUSE Leap 16.0:
libudisks2-0-2.10.1-160000.3.1
libudisks2-0-devel-2.10.1-160000.3.1
libudisks2-0_btrfs-2.10.1-160000.3.1
libudisks2-0_lsm-2.10.1-160000.3.1
libudisks2-0_lvm2-2.10.1-160000.3.1
typelib-1_0-UDisks-2_0-2.10.1-160000.3.1
udisks2-2.10.1-160000.3.1
udisks2-bash-completion-2.10.1-160000.3.1
udisks2-docs-2.10.1-160000.3.1
udisks2-lang-2.10.1-160000.3.1
udisks2-zsh-completion-2.10.1-160000.3.1
* bsc#1248502
References:
* https://www.suse.com/security/cve/CVE-2025-8067.html
Get the latest Linux and open source security news straight to your inbox.