Security update for udisks2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:1919-1 Final 1 1 2022-06-02T10:04:18Z current 2022-06-02T10:04:18Z 2022-06-02T10:04:18Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for udisks2 This update for udisks2 fixes the following issues: - CVE-2021-3802: Fixed denial of service vulnerability caused by insecure defaults in user-accessible mount helpers (bsc#1190606). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-1919,SUSE-SLE-Module-Basesystem-15-SP4-2022-1919,openSUSE-SLE-15.4-2022-1919 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20221919-1/ Link for SUSE-SU-2022:1919-1 https://lists.suse.com/pipermail/sle-security-updates/2022-June/011221.html E-Mail link for SUSE-SU-2022:1919-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1190606 SUSE Bug 1190606 https://www.suse.com/security/cve/CVE-2021-3802/ SUSE CVE CVE-2021-3802 page SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Leap 15.4 libudisks2-0-2.9.2-150400.3.3.1 libudisks2-0-devel-2.9.2-150400.3.3.1 libudisks2-0_bcache-2.9.2-150400.3.3.1 libudisks2-0_btrfs-2.9.2-150400.3.3.1 libudisks2-0_lsm-2.9.2-150400.3.3.1 libudisks2-0_lvm2-2.9.2-150400.3.3.1 libudisks2-0_vdo-2.9.2-150400.3.3.1 libudisks2-0_zram-2.9.2-150400.3.3.1 typelib-1_0-UDisks-2_0-2.9.2-150400.3.3.1 udisks2-2.9.2-150400.3.3.1 udisks2-lang-2.9.2-150400.3.3.1 libudisks2-0-2.9.2-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libudisks2-0-devel-2.9.2-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 typelib-1_0-UDisks-2_0-2.9.2-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 udisks2-2.9.2-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 udisks2-lang-2.9.2-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libudisks2-0-2.9.2-150400.3.3.1 as a component of openSUSE Leap 15.4 libudisks2-0-devel-2.9.2-150400.3.3.1 as a component of openSUSE Leap 15.4 libudisks2-0_bcache-2.9.2-150400.3.3.1 as a component of openSUSE Leap 15.4 libudisks2-0_btrfs-2.9.2-150400.3.3.1 as a component of openSUSE Leap 15.4 libudisks2-0_lsm-2.9.2-150400.3.3.1 as a component of openSUSE Leap 15.4 libudisks2-0_lvm2-2.9.2-150400.3.3.1 as a component of openSUSE Leap 15.4 libudisks2-0_vdo-2.9.2-150400.3.3.1 as a component of openSUSE Leap 15.4 libudisks2-0_zram-2.9.2-150400.3.3.1 as a component of openSUSE Leap 15.4 typelib-1_0-UDisks-2_0-2.9.2-150400.3.3.1 as a component of openSUSE Leap 15.4 udisks2-2.9.2-150400.3.3.1 as a component of openSUSE Leap 15.4 udisks2-lang-2.9.2-150400.3.3.1 as a component of openSUSE Leap 15.4 A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability. CVE-2021-3802 SUSE Linux Enterprise Module for Basesystem 15 SP4:libudisks2-0-2.9.2-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libudisks2-0-devel-2.9.2-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-UDisks-2_0-2.9.2-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:udisks2-2.9.2-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:udisks2-lang-2.9.2-150400.3.3.1 openSUSE Leap 15.4:libudisks2-0-2.9.2-150400.3.3.1 openSUSE Leap 15.4:libudisks2-0-devel-2.9.2-150400.3.3.1 openSUSE Leap 15.4:libudisks2-0_bcache-2.9.2-150400.3.3.1 openSUSE Leap 15.4:libudisks2-0_btrfs-2.9.2-150400.3.3.1 openSUSE Leap 15.4:libudisks2-0_lsm-2.9.2-150400.3.3.1 openSUSE Leap 15.4:libudisks2-0_lvm2-2.9.2-150400.3.3.1 openSUSE Leap 15.4:libudisks2-0_vdo-2.9.2-150400.3.3.1 openSUSE Leap 15.4:libudisks2-0_zram-2.9.2-150400.3.3.1 openSUSE Leap 15.4:typelib-1_0-UDisks-2_0-2.9.2-150400.3.3.1 openSUSE Leap 15.4:udisks2-2.9.2-150400.3.3.1 openSUSE Leap 15.4:udisks2-lang-2.9.2-150400.3.3.1 moderate 6.3 AV:N/AC:M/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221919-1/ https://www.suse.com/security/cve/CVE-2021-3802.html CVE-2021-3802 https://bugzilla.suse.com/1190606 SUSE Bug 1190606