Summary
[2.11.0-2.0.1.el10_2.1]
- Enable btrfs support for OL supported arches [Orabug: 37464632]
[2.11.0-2.1]
- Rework fstab mount authorization for as-user (CVE-2026-7867) (RHEL-173437)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | libudisks2 | 0:2.11.0-2.0.1.el10_2.1 |
| Oracle Linux · 10 | libudisks2-devel | 0:2.11.0-2.0.1.el10_2.1 |
| Oracle Linux · 10 | udisks2 | 0:2.11.0-2.0.1.el10_2.1 |
| Oracle Linux · 10 | udisks2-iscsi | 0:2.11.0-2.0.1.el10_2.1 |
| Oracle Linux · 10 | udisks2-lsm | 0:2.11.0-2.0.1.el10_2.1 |
| Oracle Linux · 10 | udisks2-lvm2 | 0:2.11.0-2.0.1.el10_2.1 |
Vulnerabilities 1
-
High 7.8CVE-2026-7867 Public exploit
Udisks2: udisks2: local privilege escalation via as-user option spoofing
A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker to spoof the 'as-user…