UbuntuUpdates.org

Package "libudisks2-0"

Name: libudisks2-0

Description:

GObject based library to access udisks2
Latest version: 2.10.91-1ubuntu2.1
Release: resolute (26.04)
Level: updates
Repository: main
Head package: udisks2
Homepage: https://www.freedesktop.org/wiki/Software/udisks

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libudisks2-0"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libudisks2-0" in Resolute

Repository Area Version
base main 2.10.91-1ubuntu2
security main 2.10.91-1ubuntu2.1

Changelog

Version: 2.10.91-1ubuntu2.1 2026-08-31 16:07:42 UTC

udisks2 (2.10.91-1ubuntu2.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Privilege escalation via mount point injection
    - debian/patches/CVE-2026-7867-1.patch: udiskslinuxfilesystem: Separate real
      caller identity from as-user target in src/udiskslinuxfilesystem.c.
    - debian/patches/CVE-2026-7867-2.patch: udiskslinuxfilesystem: Rework fstab
      mount authorization for as-user in data/org.freedesktop.UDisks2.xml,
      src/udiskslinuxfilesystem.c.
    - debian/patches/CVE-2026-7867-3.patch: udiskslinuxfilesystem: Log real
      caller uid for as-user mounts in src/udiskslinuxfilesystem.c.
    - debian/patches/CVE-2026-7867-4.patch: udisksdaemonutil: Pass as-user
      target to polkit details in src/udisksdaemonutil.c.
    - debian/patches/CVE-2026-7867-5.patch: tests: Add security tests for as-
      user mount authorization in src/tests/dbus-tests/test_80_filesystem.py.
    - CVE-2026-7867

 -- Marc Deslauriers Mon, 17 Aug 2026 10:41:39 -0400
CVE-2026-7867 A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option


About   -   Send Feedback to @ubuntu_updates