Summary
[2.10.90-6.0.1.el10_1.1]
- Enable btrfs support for OL supported arches [Orabug: 37464632]
[2.10.90-6.1]
- Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148565)
- Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148588)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | libudisks2 | 0:2.10.90-6.0.1.el10_1.1 |
| Oracle Linux · 10 | libudisks2-devel | 0:2.10.90-6.0.1.el10_1.1 |
| Oracle Linux · 10 | udisks2 | 0:2.10.90-6.0.1.el10_1.1 |
| Oracle Linux · 10 | udisks2-iscsi | 0:2.10.90-6.0.1.el10_1.1 |
| Oracle Linux · 10 | udisks2-lsm | 0:2.10.90-6.0.1.el10_1.1 |
| Oracle Linux · 10 | udisks2-lvm2 | 0:2.10.90-6.0.1.el10_1.1 |
Vulnerabilities 2
-
High 7.1
Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api
A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to over…
-
Medium 5.5
Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api
A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform…