Summary
[2.9.4-11.0.1.1]
- Enable btrfs support for OL supported arches [Orabug: 37464632]
[2.9.4-11.1]
- udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109417)
[2.9.4-11]
- udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
- lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()
[2.9.4-10]
- tests: Fix targetcli_config.json (RHEL-16229)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libudisks2 | 0:2.9.4-11.0.1.el9_6.1 |
| Oracle Linux · 9 | libudisks2-devel | 0:2.9.4-11.0.1.el9_6.1 |
| Oracle Linux · 9 | udisks2 | 0:2.9.4-11.0.1.el9_6.1 |
| Oracle Linux · 9 | udisks2-iscsi | 0:2.9.4-11.0.1.el9_6.1 |
| Oracle Linux · 9 | udisks2-lsm | 0:2.9.4-11.0.1.el9_6.1 |
| Oracle Linux · 9 | udisks2-lvm2 | 0:2.9.4-11.0.1.el9_6.1 |
Vulnerabilities 1
-
High 8.5CVE-2025-8067 Public exploit
Udisks: out-of-bounds read in udisks daemon
A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this ha…