Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Stay Secure with the Latest Linux Advisories

Mageia Large Esm H800
Mageia

Mageia 10 Upower Security Advisory 2026-0261 - Important Update Alert

Calendar White Jul 17, 2026
Important
Mageia Large Esm H900
Mageia

Mageia Python-pydantic-settings Critical File Read Issue CVE-2026-58203

Calendar White Jul 17, 2026
Critical
Mageia Large Esm H900
Mageia

Mageia LibreOffice Important Buffer Overflow Issues Fix 2026-0259

Calendar White Jul 17, 2026
Important
Mageia Large Esm H800
Mageia

Mageia BIND 10 9 Critical Corrupted Data Issue 2026-0258

Calendar White Jul 17, 2026
Critical
Mageia Large Esm H900
Mageia

Mageia Node.js Critical Memory Growth and Identity Check Issues 2026-0257

Calendar White Jul 17, 2026
Critical
Mageia Large Esm H900
Mageia

Mageia 10 Sticky Bugfix Advisory 2026-0057 Unraveled and Explained

Calendar White Jul 17, 2026
Critical
Mageia Large Esm H800
Mageia

Mageia 10 Xfce Security Update Bugfix Advisory 2026-0056

Calendar White Jul 17, 2026
Informational
Mageia Large Esm H900
Mageia

Mageia 10 Rawtherapee Important Bug Fix Advisory 2026-0055

Calendar White Jul 17, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE go1.26-openssl Important Security Fixes Advisory 2026-3102-1

Calendar White Jul 17, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 34 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoraprivilege escalation

Fedora 44 udisks2 Important Auth Checks Advisory FEDORA-2026-b8847e1e2c

Rebase to latest upstream release. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-b8847e1e2c 2026-03-13 00:15:54.963665+00:00 -------------------------------------------------------------------------------- Name : udisks2 Product : Fedora 44 Version : 2.11.1 Release : 1.fc44 URL : https://github.com/storaged-project/udisks Summary : Disk Manager Description : The Udisks project provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies. -------------------------------------------------------------------------------- Update Information: Rebase to latest upstream release -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 25 2026 Tomas Bzatek - 2.11.1-1 - Version 2.11.1 (#2442584,#2442588) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2442584 - CVE-2026-26103 udisks2: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2442584 [ 2 ] Bug #2442588 - CVE-2026-26104 udisks2: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2442588 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-b8847e1e2c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Update to udisks2 for Fedora 44 addresses important authorization flaws enabling unprivileged users access capabilities.. udisks2 Fedora important security fix authorization. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Mar 13, 2026 •Important Fedora
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorylocal privilege escalationimportant

Oracle Linux 10 udisks2 Important Local Privilege Escalation ELSA-2026-3476

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-3476 http://linux.oracle.com/errata/ELSA-2026-3476.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: libudisks2-2.10.90-6.0.1.el10_1.1.x86_64.rpm libudisks2-devel-2.10.90-6.0.1.el10_1.1.x86_64.rpm udisks2-2.10.90-6.0.1.el10_1.1.x86_64.rpm udisks2-iscsi-2.10.90-6.0.1.el10_1.1.x86_64.rpm udisks2-lsm-2.10.90-6.0.1.el10_1.1.x86_64.rpm udisks2-lvm2-2.10.90-6.0.1.el10_1.1.x86_64.rpm aarch64: libudisks2-2.10.90-6.0.1.el10_1.1.aarch64.rpm libudisks2-devel-2.10.90-6.0.1.el10_1.1.aarch64.rpm udisks2-2.10.90-6.0.1.el10_1.1.aarch64.rpm udisks2-iscsi-2.10.90-6.0.1.el10_1.1.aarch64.rpm udisks2-lsm-2.10.90-6.0.1.el10_1.1.aarch64.rpm udisks2-lvm2-2.10.90-6.0.1.el10_1.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/udisks2-2.10.90-6.0.1.el10_1.1.src.rpm Related CVEs: CVE-2026-26103 CVE-2026-26104 Description of changes: [2.10.90-6.0.1.el10_1.1] - Enable btrfs support for OL supported arches [Orabug: 37464632] [2.10.90-6.1] - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148565) - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148588) _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Updated rpms for Oracle Linux 10 address important security issues in udisks2 related to polkit checks.. Oracle Linux udpates, udisks2 patch, polkit vulnerabilities, local privilege escalation, security advisories. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Mar 09, 2026 •Important Oracle
Banner 4 1028x280 1708121825 1771600306
219
Ls Advisories Rockylinux Esm H240
Price Tag%201security advisoryimportantbackdoor

Security Vulnerabilities Discovered in Ubuntu Server 22.04 RLSA-2026-5678

Important: udisks2 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:3476", "synopsis": "Important: udisks2 security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for udisks2.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.\n\nSecurity Fix(es):\n\n* udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API (CVE-2026-26104)\n\n* udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API (CVE-2026-26103)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2433719", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2433719", "description": ""}, {"ticket": "2433717", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2433717", "description": ""}], "cves": [{"name": "CVE-2026-26103", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2026-26103", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "cvss3BaseScore": "7.1", "cwe": "CWE-862"}, {"name": "CVE-2026-26104", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2026-26104", "cvss3ScoringVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cvss3BaseScore": "5.5", "cwe": "CWE-862"}], "references": [], "publishedAt": "2026-03-05T09:12:24.748134Z", "rpms": {"Rocky Linux 10": {"nvras": ["udisks2-lvm2-debuginfo-0:2.10.90-6.el10_1.1.x86_64.rpm","udisks2-lsm-0:2.10.90-6.el10_1.1.s390x.rpm", "udisks2-iscsi-0:2.10.90-6.el10_1.1.ppc64le.rpm", "udisks2-lvm2-debuginfo-0:2.10.90-6.el10_1.1.aarch64.rpm", "udisks2-0:2.10.90-6.el10_1.1.s390x.rpm", "libudisks2-debuginfo-0:2.10.90-6.el10_1.1.s390x.rpm", "libudisks2-devel-0:2.10.90-6.el10_1.1.ppc64le.rpm", "libudisks2-devel-0:2.10.90-6.el10_1.1.aarch64.rpm", "udisks2-debuginfo-0:2.10.90-6.el10_1.1.ppc64le.rpm", "libudisks2-devel-0:2.10.90-6.el10_1.1.s390x.rpm", "udisks2-lvm2-debuginfo-0:2.10.90-6.el10_1.1.ppc64le.rpm", "udisks2-debugsource-0:2.10.90-6.el10_1.1.s390x.rpm", "udisks2-iscsi-debuginfo-0:2.10.90-6.el10_1.1.aarch64.rpm", "udisks2-lsm-0:2.10.90-6.el10_1.1.ppc64le.rpm", "udisks2-0:2.10.90-6.el10_1.1.x86_64.rpm", "udisks2-debuginfo-0:2.10.90-6.el10_1.1.x86_64.rpm", "udisks2-0:2.10.90-6.el10_1.1.ppc64le.rpm", "udisks2-lsm-debuginfo-0:2.10.90-6.el10_1.1.s390x.rpm", "udisks2-iscsi-0:2.10.90-6.el10_1.1.x86_64.rpm", "udisks2-lsm-0:2.10.90-6.el10_1.1.x86_64.rpm", "udisks2-debugsource-0:2.10.90-6.el10_1.1.x86_64.rpm", "libudisks2-debuginfo-0:2.10.90-6.el10_1.1.x86_64.rpm", "udisks2-iscsi-debuginfo-0:2.10.90-6.el10_1.1.x86_64.rpm", "udisks2-lvm2-debuginfo-0:2.10.90-6.el10_1.1.s390x.rpm", "libudisks2-0:2.10.90-6.el10_1.1.ppc64le.rpm", "udisks2-debuginfo-0:2.10.90-6.el10_1.1.s390x.rpm", "libudisks2-devel-0:2.10.90-6.el10_1.1.x86_64.rpm", "udisks2-iscsi-0:2.10.90-6.el10_1.1.aarch64.rpm", "udisks2-0:2.10.90-6.el10_1.1.src.rpm", "udisks2-iscsi-0:2.10.90-6.el10_1.1.s390x.rpm", "udisks2-lvm2-0:2.10.90-6.el10_1.1.aarch64.rpm", "libudisks2-0:2.10.90-6.el10_1.1.aarch64.rpm", "udisks2-lsm-debuginfo-0:2.10.90-6.el10_1.1.aarch64.rpm", "libudisks2-debuginfo-0:2.10.90-6.el10_1.1.ppc64le.rpm", "udisks2-lvm2-0:2.10.90-6.el10_1.1.x86_64.rpm", "udisks2-lsm-debuginfo-0:2.10.90-6.el10_1.1.x86_64.rpm", "udisks2-lsm-0:2.10.90-6.el10_1.1.aarch64.rpm", "libudisks2-0:2.10.90-6.el10_1.1.s390x.rpm", "udisks2-lvm2-0:2.10.90-6.el10_1.1.s390x.rpm", "udisks2-iscsi-debuginfo-0:2.10.90-6.el10_1.1.s390x.rpm","udisks2-iscsi-debuginfo-0:2.10.90-6.el10_1.1.ppc64le.rpm", "libudisks2-debuginfo-0:2.10.90-6.el10_1.1.aarch64.rpm", "udisks2-lvm2-0:2.10.90-6.el10_1.1.ppc64le.rpm", "udisks2-0:2.10.90-6.el10_1.1.aarch64.rpm", "udisks2-lsm-debuginfo-0:2.10.90-6.el10_1.1.ppc64le.rpm", "libudisks2-0:2.10.90-6.el10_1.1.x86_64.rpm", "udisks2-debuginfo-0:2.10.90-6.el10_1.1.aarch64.rpm", "udisks2-debugsource-0:2.10.90-6.el10_1.1.ppc64le.rpm", "udisks2-debugsource-0:2.10.90-6.el10_1.1.aarch64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Critical udisks2 security update for Rocky Linux 10 addressing authorization issues. Ensure system integrity and protect data.. Rocky Linux, udisks2, security, important update, backdoor. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Mar 05, 2026 •Important Rocky Linux
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorysecurity issuefedora

Fedora 43 udisks2 Advisory FEDORA-2026-c6d7c9de1d Authorization Issues

Rebase to latest upstream release. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-c6d7c9de1d 2026-02-27 00:52:14.662444+00:00 -------------------------------------------------------------------------------- Name : udisks2 Product : Fedora 43 Version : 2.11.1 Release : 1.fc43 URL : https://github.com/storaged-project/udisks Summary : Disk Manager Description : The Udisks project provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies. -------------------------------------------------------------------------------- Update Information: Rebase to latest upstream release -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 25 2026 Tomas Bzatek - 2.11.1-1 - Version 2.11.1 (#2442584,#2442588) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2442584 - CVE-2026-26103 udisks2: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2442584 [ 2 ] Bug #2442588 - CVE-2026-26104 udisks2: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2442588 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-c6d7c9de1d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Rebase to latest upstream release for udisks2 in Fedora 43 addresses key authorization checks.. Fedora Update, Disk Manager, Unprivileged Access, Security Update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 27, 2026 •Important Fedora
Banner 4 1028x280 1708121825 1771600306
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

Red Hat Enterprise Linux 8.6 Release RHSA-2027-20420-1 CVE-2025-8145

An update that solves one vulnerability can now be installed.. # Security update for udisks2 Announcement ID: SUSE-SU-2026:20213-1 Release Date: 2026-01-30T14:30:57Z Rating: moderate References: * bsc#1248502 Cross-References: * CVE-2025-8067 CVSS scores: * CVE-2025-8067 ( SUSE ): 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H * CVE-2025-8067 ( NVD ): 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP Applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for udisks2 fixes the following issues: * CVE-2025-8067: Fixed a missing bounds check that could lead to out-of-bounds read in udisks daemon (bsc#1248502). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-226=1 * SUSE Linux Enterprise Server for SAP Applications 16.0 zypper in -t patch SUSE-SLES-16.0-226=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libudisks2-0_btrfs-debuginfo-2.10.1-160000.3.1 * libudisks2-0_lvm2-debuginfo-2.10.1-160000.3.1 * libudisks2-0_lvm2-2.10.1-160000.3.1 * libudisks2-0_btrfs-2.10.1-160000.3.1 * typelib-1_0-UDisks-2_0-2.10.1-160000.3.1 * udisks2-debuginfo-2.10.1-160000.3.1 * libudisks2-0-devel-2.10.1-160000.3.1 * udisks2-2.10.1-160000.3.1 * libudisks2-0_lsm-2.10.1-160000.3.1 * udisks2-debugsource-2.10.1-160000.3.1 * libudisks2-0_lsm-debuginfo-2.10.1-160000.3.1 * libudisks2-0-debuginfo-2.10.1-160000.3.1 * libudisks2-0-2.10.1-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * udisks2-zsh-completion-2.10.1-160000.3.1 * udisks2-lang-2.10.1-160000.3.1 *udisks2-docs-2.10.1-160000.3.1 * SUSE Linux Enterprise Server for SAP Applications 16.0 (ppc64le x86_64) * libudisks2-0_btrfs-debuginfo-2.10.1-160000.3.1 * libudisks2-0_lvm2-debuginfo-2.10.1-160000.3.1 * libudisks2-0_lvm2-2.10.1-160000.3.1 * libudisks2-0_btrfs-2.10.1-160000.3.1 * typelib-1_0-UDisks-2_0-2.10.1-160000.3.1 * udisks2-debuginfo-2.10.1-160000.3.1 * libudisks2-0-devel-2.10.1-160000.3.1 * udisks2-2.10.1-160000.3.1 * libudisks2-0_lsm-2.10.1-160000.3.1 * udisks2-debugsource-2.10.1-160000.3.1 * libudisks2-0_lsm-debuginfo-2.10.1-160000.3.1 * libudisks2-0-debuginfo-2.10.1-160000.3.1 * libudisks2-0-2.10.1-160000.3.1 * SUSE Linux Enterprise Server for SAP Applications 16.0 (noarch) * udisks2-zsh-completion-2.10.1-160000.3.1 * udisks2-lang-2.10.1-160000.3.1 * udisks2-docs-2.10.1-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-8067.html * https://bugzilla.suse.com/show_bug.cgi?id=1248502 . SUSE provides a moderate security advisory for udisks2, addressing an out-of-bounds issue with CVE-2025-8067.. SUSE Security Advisory, udisks2 Update, Moderate Severity Fix, Linux Security Update. . LinuxSecurity.com Team

Calendar%202 Feb 05, 2026 SuSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE Linux Micro 6.2 udisks2 Moderate Out-Of-Bounds CVE-2025-8067 2026-1

An update that solves one vulnerability can now be installed.. # Security update for udisks2 Announcement ID: SUSE-SU-2026:20206-1 Release Date: 2026-01-30T14:28:06Z Rating: moderate References: * bsc#1248502 Cross-References: * CVE-2025-8067 CVSS scores: * CVE-2025-8067 ( SUSE ): 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H * CVE-2025-8067 ( NVD ): 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for udisks2 fixes the following issues: * CVE-2025-8067: Fixed a missing bounds check that could lead to out-of-bounds read in udisks daemon (bsc#1248502). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-226=1 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libudisks2-0_btrfs-2.10.1-160000.3.1 * libudisks2-0-2.10.1-160000.3.1 * libudisks2-0_lvm2-2.10.1-160000.3.1 * libudisks2-0_lvm2-debuginfo-2.10.1-160000.3.1 * udisks2-debuginfo-2.10.1-160000.3.1 * udisks2-2.10.1-160000.3.1 * libudisks2-0-debuginfo-2.10.1-160000.3.1 * udisks2-debugsource-2.10.1-160000.3.1 * libudisks2-0_btrfs-debuginfo-2.10.1-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-8067.html * https://bugzilla.suse.com/show_bug.cgi?id=1248502 . SUSE has released a moderate security advisory for udisks2, addressing CVE-2025-8067 with critical patch instructions. Secure your systems!. SUSE Update, udisks2 Security Patch, CVE-2025-8067, Linux Security Update. . LinuxSecurity.com Team

Calendar%202 Feb 04, 2026 SuSE
Banner 4 1028x280 1708121825 1771600306
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorySuSEremote access

SUSE: udisks2 Important Out-of-Bounds Access Fix CVE-2025-8067

* bsc#1248502 Cross-References: * CVE-2025-8067 . # Security update for udisks2 Announcement ID: SUSE-SU-2025:20801-1 Release Date: 2025-09-26T09:12:30Z Rating: important References: * bsc#1248502 Cross-References: * CVE-2025-8067 CVSS scores: * CVE-2025-8067 ( SUSE ): 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H * CVE-2025-8067 ( NVD ): 8.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for udisks2 fixes the following issues: * CVE-2025-8067: Fixed missing bounds check that could lead to out-of-bounds read in udisks daemon (bsc#1248502) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-287=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * libudisks2-0-2.9.4-slfo.1.1_2.1 * libudisks2-0_btrfs-debuginfo-2.9.4-slfo.1.1_2.1 * libudisks2-0_btrfs-2.9.4-slfo.1.1_2.1 * udisks2-2.9.4-slfo.1.1_2.1 * udisks2-debuginfo-2.9.4-slfo.1.1_2.1 * libudisks2-0_lvm2-debuginfo-2.9.4-slfo.1.1_2.1 * libudisks2-0-debuginfo-2.9.4-slfo.1.1_2.1 * udisks2-debugsource-2.9.4-slfo.1.1_2.1 * libudisks2-0_lvm2-2.9.4-slfo.1.1_2.1 ## References: * https://www.suse.com/security/cve/CVE-2025-8067.html * https://bugzilla.suse.com/show_bug.cgi?id=1248502 . SUSE's security advisory fixes udisks2 with CVE-2025-8067, addressing an important issue with potential out-of-bounds access.. SUSE Linux Micro, udisks2, important update, out of bounds access, security advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 14, 2025 •Important SuSE
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorysecurity issueimportant

Oracle Linux 7: ELSA-2025-16130 udisks2 Important Index Underflow Fix

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-16130 http://linux.oracle.com/errata/ELSA-2025-16130.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: libudisks2-2.8.4-1.0.1.el7.i686.rpm libudisks2-2.8.4-1.0.1.el7.x86_64.rpm libudisks2-devel-2.8.4-1.0.1.el7.i686.rpm libudisks2-devel-2.8.4-1.0.1.el7.x86_64.rpm udisks2-2.8.4-1.0.1.el7.x86_64.rpm udisks2-iscsi-2.8.4-1.0.1.el7.x86_64.rpm udisks2-lsm-2.8.4-1.0.1.el7.x86_64.rpm udisks2-lvm2-2.8.4-1.0.1.el7.x86_64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/udisks2-2.8.4-1.0.1.el7.src.rpm Related CVEs: CVE-2025-8067 Description of changes: [2.8.4-1.0.1] - Fix index underflow in LoopSetup (CVE-2025-8067) [Orabug: 38444282] _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux 7 updates for udisks2 fix important index underflow issue related to CVE-2025-8067. Immediate action advised.. Oracle Linux,uDISKS2,Security Patch,ELSA,Index Underflow. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 09, 2025 •Important Oracle
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics