[Git][security-tracker-team/security-tracker][master] Add references for udisks2 issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9e414281 by Salvatore Bonaccorso at 2026-08-06T19:48:12+02:00
Add references for udisks2 issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -428,6 +428,12 @@ CVE-2026-7867 [Local privilege escalation via as-user mount spoofing]
 	[bullseye] - udisks2 <not-affected> (udisks2 versions < 2.10.x are not affected)
 	NOTE: https://github.com/azqzazq1/CVE-2026-7867-disk2root
 	NOTE: https://github.com/storaged-project/udisks/security/advisories/GHSA-j42g-v9jw-6ph3
+	NOTE: https://github.com/storaged-project/udisks/commit/397eea88d58f77f6e02d537c4c961201b9245943
+	NOTE: https://github.com/storaged-project/udisks/commit/0050f51d40e468f6a3197ccdc77b5bd59c923a37
+	NOTE: https://github.com/storaged-project/udisks/commit/98e5a76c155640d155280cdb642791f00def736a
+	NOTE: https://github.com/storaged-project/udisks/commit/681d58a76f6aaa5045eb43e665c65f497d35b810
+	NOTE: https://github.com/storaged-project/udisks/commit/36231768dde088c8b4d4796ff2d311d089d84052
+	NOTE: Backport for 2.10.y: https://github.com/storaged-project/udisks/pull/1530
 CVE-2026-7726 (The Layouts for WPBakery plugin for WordPress is vulnerable to unautho ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-7693 (The Backup Migration plugin for WordPress is vulnerable to OS Command  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9e4142815eebcda3a110de12f35b03b0c2e4fafd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9e4142815eebcda3a110de12f35b03b0c2e4fafd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260806/64e53120/attachment-0001.htm>