| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
CVE-2025-6019:
A Local Privilege Escalation (LPE) vulnerability was found in
libblockdev. Generally, the "allow_active" setting in Polkit permits a
physically present user to take certain actions based on the session
type. Due to the way libblockdev interacts with the udisks daemon, an
"allow_active" user on a system may be able escalate to full root
privileges on the target host. Normally, udisks mounts user-provided
filesystem images with security flags like nosuid and nodev to prevent
privilege escalation. However, a local attacker can create a specially
crafted XFS image containing a SUID-root shell, then trick udisks into
resizing it. This mounts their malicious filesystem with root
privileges, allowing them to execute their SUID-root shell and gain
complete control of the system.
Refer:
https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
ChangeLog:
https://github.com/storaged-project/libblockdev/releases/tag/3.2.0
* Drop 0001-libext2fs-unused-parameters-fix.patch as the issue has been
fixed upstream.
* Add PACKAGECONFIG[smart] and PACKAGECONFIG[smartmontools].
* Add libyaml dependency for PACKAGECONFIG[lvm] and
PACKAGECONFIG[lvm-dbus].
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
| |
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fix the following QA error.
ERROR: QA Issue: libblockdev: Files/directories were installed but not shipped in any package:
/usr/lib
/usr/lib/python3.11
/usr/lib/python3.11/site-packages
/usr/lib/python3.11/site-packages/gi
/usr/lib/python3.11/site-packages/gi/overrides
/usr/lib/python3.11/site-packages/gi/overrides/BlockDev.py
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
0001-lvm-Do-not-include-duplicate-entries-in-bd_lvm_lvs-o.patch
removed since it's included in 2.27
Changelog:
=========
fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown filesystem
overrides: Fix translating exceptions in ErrorProxy
tests: Do not check that swap flag is not supported on DOS table
tests: Lower expected free space on newly created Ext filesystems
tests: Remove test for NTFS read-only mounting
vdo_stats: Default to 100 % savings for invalid savings values
lvm: Fix reading statistics for VDO pools with VDO 8
tests: Fix creating loop device for CryptoTestLuksSectorSize
tests: Use losetup to create 4k sector size loop device for testing
s390: Remove double fclose in bd_s390_dasd_online (#2045784)
lvm-dbus: Add support for changing compression and deduplication
tests: Skip test_lvcreate_type on CentOS/RHEL 9
tests: Fix expected extended partition flags with new parted
lvm: Do not set global config to and empty string
lvm: Do not include duplicate entries in bd_lvm_lvs output
lvm: Use correct integer type in for comparison
crypto: Remove useless comparison in progress report in luks_format
boilerplate_generator: Remove unused variable assignment
kbd: Add missing progress reporting to bd_kbd_bcache_create
kbd: Fix leaking error in bd_kbd_bcache_detach
kbd: Fix potential NULL pointer dereference in bd_kbd_bcache_create
crypto: Remove unused and leaking error in write_escrow_data_file
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We use "-o segtypes" for the "lvs" command which means multisegment
LVs will be twice in the output. [1]
...
$ lvs --noheadings --nosuffix --nameprefixes --unquoted --units=b -a -o
vg_name,lv_name,lv_uuid,lv_size,lv_attr,segtype,origin,pool_lv,data_lv,metadata_lv,role,move_pv,data_percent,metadata_percent,copy_percent,lv_tags
OUTPUT:
|LVM2_VG_NAME=rootvg LVM2_LV_NAME=RCSMW-ARM_CXP2020233_2_R20A154
LVM2_LV_UUID=TgjM5V-jhXX-tPTf-gPMa-c3w6-QEjo-7qkmVg
LVM2_LV_SIZE=71303168 LVM2_LV_ATTR=wi-ao--- LVM2_SEGTYPE=linear
LVM2_ORIGIN= LVM2_POOL_LV= LVM2_DATA_LV= LVM2_METADATA_LV=
LVM2_LV_ROLE=public LVM2_MOVE_PV= LVM2_DATA_PERCENT=
LVM2_METADATA_PERCENT= LVM2_COPY_PERCENT= LVM2_LV_TAGS=
|LVM2_VG_NAME=rootvg LVM2_LV_NAME=RCSMW-ARM_CXP2020233_2_R20A154
LVM2_LV_UUID=TgjM5V-jhXX-tPTf-gPMa-c3w6-QEjo-7qkmVg
LVM2_LV_SIZE=71303168 LVM2_LV_ATTR=wi-ao--- LVM2_SEGTYPE=linear
LVM2_ORIGIN= LVM2_POOL_LV= LVM2_DATA_LV= LVM2_METADATA_LV=
LVM2_LV_ROLE=public LVM2_MOVE_PV= LVM2_DATA_PERCENT=
LVM2_METADATA_PERCENT= LVM2_COPY_PERCENT= LVM2_LV_TAGS=
...
See [2]
[1] https://github.com/storaged-project/libblockdev/pull/671
[2] https://github.com/storaged-project/libblockdev/issues/667
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
| |
Since libblockdev is upgraded to 2.18, the local patch is obsolete.
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
| |
Since upgrading libblockdev to 2.18, these patches are
useless, remove them.
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
| |
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
I gave my best to rework patches:
* 0005-fix-a-clang-compiling-issue.patch: This was a bit challenging.
Because of I do not use clang I cannot test and confirm that no new breakers
were introduced.
* 0004-fix-compile-failure-against-musl-C-library.patch: Just tested to apply
properly.
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
[snip]
../../../git/src/plugins/fs.c:2617:26: error: missing field 'start'
initializer [-Werror,-Wmissing-field-initializers]
PedGeometry geom = {0};
^
../../../git/src/plugins/fs.c:2618:30: error: missing field 'start'
initializer [-Werror,-Wmissing-field-initializers]
PedGeometry new_geom = {0};
[snip]
Fix typo s/enum libvk_packet_format format/enum libvk_secret secret_type/
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
|
|
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
|