Astra Linux – Vulnerability in udisks2

A flaw was discovered in udisks2. A local attacker with an active console session can exploit insufficient authorization checking for the “as-user” option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. This allows the attacker to forge the “as-user” parameter, mounting file systems...

USN-8701-1 udisks2 vulnerability

It was discovered that UDisks did not correctly validate the caller identity when handling the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. A local attacker with an active console session could possibly use this issue to mount filesystems on behalf of arbitrary...

SUSE-SU-2026:23405-1 Security update for udisks2

This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method can lead to local privilege escalation bsc1274430...

OPENSUSE-SU-2026:21704-1 Security update for udisks2

This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method can lead to local privilege escalation bsc1274430...

SUSE CVE-2026-61898

The Ubuntu-specific language helper scripts save-to-pam-env, update-langlist shipped with accountsservice before 23.13.9-8ubuntu7 treat the user-controlled LANGUAGE entry in /.pamenvironment as trusted input. The value is interpolated unescaped into a GNU sed replacement expression, allowing an...

CVE-2026-61898

A flaw was found in accountsservice. A local attacker can exploit this by injecting arbitrary shell commands into the user-controlled LANGUAGE entry in the /.pamenvironment file. The Ubuntu-specific language helper scripts process this input unescaped, leading to arbitrary code execution with roo...

OESA-2026-3462 udisks2 security update

The Udisks project provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies. Security Fixes: A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the...

OESA-2026-3461 udisks2 security update

The Udisks project provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies. Security Fixes: A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the...

OESA-2026-3460 udisks2 security update

The Udisks project provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies. Security Fixes: A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the...

udisks2: udisks2: Local Privilege Escalation via as-user option spoofing

A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on...

[SECURITY] [DSA 6414-1] udisks2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6414-1 [email protected] https://www.debian.org/security/ Alberto Garcia August 06, 2026 https://www.debian.org/security/faq -...

CVE-2026-7867

A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on...

PT-2026-68821

Name of the Vulnerable Software and Affected Versions udisks2 affected versions not specified Description Insufficient authorization checking in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method allows a local attacker with an active console session to spoof the as-user parameter. This...

AZL-81959 CVE-2026-34933 affecting package avahi for versions less than 0.8-8

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version...

EUVD-2019-0112

Malware in sbrugna...

EUVD-2022-43944

Malicious code in bioql PyPI...

SUSE: Security Advisory (SUSE-SU-2024:2681-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:2681-1 Security update for gvfs

This update for gvfs fixes the following issues: - CVE-2019-12795: Fixed attack via local D-Bus method calls bsc1137930...

CVE-2023-50700

Insecure Permissions vulnerability in Deepin dde-file-manager 6.0.54 and earlier allows privileged operations to be called by unprivileged users via the D-Bus method...

CVE-2024-1930

No Limit on Number of Open Sessions / Bad Session Close Behaviour in dnf5daemon-server before 5.1.17 allows a malicious user to impact Availability via No Limit on Number of Open Sessions. There is no limit on how many sessions D-Bus clients may create using the opensession D-Bus method. For each...