[Git][security-tracker-team/security-tracker][master] CVE-2026-7867: mark as fixed in udisks2 2.11.2-1

[Alberto Garcia (@berto)]

Alberto Garcia pushed to branch master at Debian Security Tracker / security-tracker


Commits:
07664783 by Alberto Garcia at 2026-08-06T18:38:54+02:00
CVE-2026-7867: mark as fixed in udisks2 2.11.2-1

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -423,8 +423,10 @@ CVE-2026-8029 (The ZTE Smart Life app contains an SQL injection vulnerability th
 CVE-2026-7869 (IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal  ...)
 	NOT-FOR-US: IBM
 CVE-2026-7867 [Local privilege escalation via as-user mount spoofing]
-	- udisks2 <unfixed>
-	NOTE: https://github.com/azqzazq1/CVE-2026-7867-disk2root
+	- udisks2 2.11.2-1
+	[bookworm] - udisks2 <not-affected> (udisks2 versions < 2.10.x are not affected)
+	[bullseye] - udisks2 <not-affected> (udisks2 versions < 2.10.x are not affected)
+	NOTE: https://github.com/storaged-project/udisks/security/advisories/GHSA-j42g-v9jw-6ph3
 CVE-2026-7726 (The Layouts for WPBakery plugin for WordPress is vulnerable to unautho ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-7693 (The Backup Migration plugin for WordPress is vulnerable to OS Command  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07664783db6bae9da651d223a9205c3f848a263f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07664783db6bae9da651d223a9205c3f848a263f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260806/f78fd1a5/attachment.htm>