git: 91756ff4e1a0 - main - security/vuxml: record security fixes in sysutils/libudisks 2.10.{2,91}
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 26 Sep 2025 16:18:06 UTC
The branch main has been updated by fernape:
URL: https://cgit.FreeBSD.org/ports/commit/?id=91756ff4e1a05f595e7fe61d8caf0edf03c2a4cc
commit 91756ff4e1a05f595e7fe61d8caf0edf03c2a4cc
Author: Pau Amma <pauamma@gundo.com>
AuthorDate: 2025-09-26 16:16:42 +0000
Commit: Fernando Apesteguía <fernape@FreeBSD.org>
CommitDate: 2025-09-26 16:17:33 +0000
security/vuxml: record security fixes in sysutils/libudisks 2.10.{2,91}
PR: 289689
Reported by: pauamma@gundo.com
---
security/vuxml/vuln/2025.xml | 38 ++++++++++++++++++++++++++++++++++++++
1 file changed, 38 insertions(+)
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index 31368328adc3..814b762baa8d 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -1,3 +1,41 @@
+ <vuln vid="3bf134f4-942d-11f0-95de-0800276af896">
+ <topic>libudisks -- Udisks: out-of-bounds read in udisks daemon</topic>
+ <affects>
+ <package>
+ <name>libudisks</name>
+ <range><lt>2.10.2</lt></range>
+ <range><ge>2.10.90</ge><lt>2.10.91</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>secalert@redhat.com reports:</p>
+ <blockquote cite="https://access.redhat.com/errata/RHSA-2025:15017">
+ <p>A flaw was found in the Udisks daemon, where it allows unprivileged
+ users to create loop devices using the D-BUS system. This is
+ achieved via the loop device handler, which handles requests sent
+ through the D-BUS interface. As two of the parameters of this
+ handle, it receives the file descriptor list and index specifying
+ the file where the loop device should be backed. The function
+ itself validates the index value to ensure it isn't bigger
+ than the maximum value allowed. However, it fails to validate the
+ lower bound, allowing the index parameter to be a negative value.
+ Under these circumstances, an attacker can cause the UDisks daemon
+ to crash or perform a local privilege escalation by gaining access
+ to files owned by privileged users.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2025-8067</cvename>
+ <url>https://nvd.nist.gov/vuln/detail/CVE-2025-8067</url>
+ </references>
+ <dates>
+ <discovery>2025-08-28</discovery>
+ <entry>2025-09-26</entry>
+ </dates>
+ </vuln>
+
<vuln vid="32bdeb94-9958-11f0-b6e2-6805ca2fa271">
<topic>quiche -- Infinite loop triggered by connection ID retirement</topic>
<affects>