Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package udisks2 for openSUSE:Factory checked in at 2026-08-11 17:09:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/udisks2 (Old) and /work/SRC/openSUSE:Factory/.udisks2.new.17972 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "udisks2" Tue Aug 11 17:09:37 2026 rev:60 rq:1370481 version:2.11.2 Changes: -------- --- /work/SRC/openSUSE:Factory/udisks2/udisks2.changes 2026-06-16 13:47:12.553659368 +0200 +++ /work/SRC/openSUSE:Factory/.udisks2.new.17972/udisks2.changes 2026-08-11 17:09:56.011737962 +0200 @@ -1,0 +2,48 @@ +Sat Aug 8 07:21:24 UTC 2026 - Bjørn Lie <[email protected]> + +- Update to 2.11.2 (CVE-2026-7867): + * This is a bugfix release with a security fix, several crash and + memory leak fixes, and mount options update. + * Security fix: + - CVE-2026-7867: An unprivileged D-Bus caller could use the + 'as-user' Filesystem.Mount() option combined with fstab + entries containing 'user' or 'users' mount options to mount + on behalf of another user without polkit authorization. + * Changes from 2.11.1: + - udiskslinuxnvmenamespace: Report cancellation as error in + format job + - udiskslinuxprovider: Fix memory leak on spurious uevents + - udiskslinuxprovider: Initialize GError pointer in sleep + signal handler + - udisksdaemonutil: Fix missing NULL terminator in + resolve_links() + - udiskslinuxdriveata: Add missing D-Bus method completion for + SecurityEraseUnit + - udiskslinuxfilesystem: Fix missing goto after mount state + check in handle_resize + - udiskslinuxfilesystem: Fix missing goto after mount state + check in handle_repair + - udiskslinuxfilesystem: Fix missing goto after mount state + check in handle_check + - udiskslinuxfilesystem: Fix mounted check in filesystem update + - udiskslinuxmountoptions: Fix integer overflow in UID/GID + option parsing + - udiskslinuxmountoptions: Fix static buffer and hardcoded + limit in is_uid_in_gid + - doap: Update storaged.org https link + - udisksmodulemanager: Fix broken module error check + - lvm2: Fix NULL dereference in VG create uevent trigger loop + - mount options: Sync exfat allowed options with the latest + kernel + - udiskslinuxfilesystem: Separate real caller identity from + as-user target + - udiskslinuxfilesystem: Rework fstab mount authorization for + as-user + - udiskslinuxfilesystem: Log real caller uid for as-user mounts + - udisksdaemonutil: Pass as-user target to polkit details + - tests: Add security tests for as-user mount authorization + - tests: Trigger controller rescan after namespace re-attach in + test_ns_detach + - tests: Temporarily skip NTFS3 configurable mount options test + +------------------------------------------------------------------- Old: ---- udisks-2.11.1.tar.bz2 New: ---- udisks-2.11.2.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ udisks2.spec ++++++ --- /var/tmp/diff_new_pack.YR1dAX/_old 2026-08-11 17:09:57.019780687 +0200 +++ /var/tmp/diff_new_pack.YR1dAX/_new 2026-08-11 17:09:57.023780857 +0200 @@ -20,7 +20,7 @@ %define libblockdev_version 3.4 Name: udisks2 -Version: 2.11.1 +Version: 2.11.2 Release: 0 Summary: Disk Manager License: GPL-2.0-or-later AND LGPL-2.0-or-later ++++++ udisks-2.11.1.tar.bz2 -> udisks-2.11.2.tar.bz2 ++++++ ++++ 12839 lines of diff (skipped)
