Multiple vulnerabilities have been discovered in UDisks, libblockdev, the worst of which could result in privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-fs/udisks | * | < 2.10.1-r4 | >= 2.10.1-r4 |
| sys-libs/libblockdev | * | < 3.3.0 | >= 3.3.0 |
UDisks provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies. libblockdev is a library for manipulating block devices.
Multiple vulnerabilities have been discovered in UDisks and libblockdev. Please review the CVE identifiers referenced below for details.
A physical attacker with a local, unprivileged session can escalate privileges to root. Please review the referenced CVE identifier for details.
There is no known workaround at this time.
All UDisks users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-fs/udisks-2.10.1-r4"
All libblockdev users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-libs/libblockdev-3.3.0"