Issued:
2019-08-06
Updated:
2019-08-06

RHSA-2019:2178 - Security Advisory

Synopsis

Moderate: udisks2 security, bug fix, and enhancement update

Type/Severity

Security Advisory: Moderate

Topic

An update for udisks2 is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.

Security Fix(es):

  • udisks: Format string vulnerability in udisks_log in udiskslogging.c (CVE-2018-17336)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le

Fixes

  • BZ - 1568269 - RFE - man page improvement for udisksctl
  • BZ - 1632828 - CVE-2018-17336 udisks: Format string vulnerability in udisks_log in udiskslogging.c
  • BZ - 1643350 - udisksd core dump
  • BZ - 1672664 - Package udisks2-lsm (libstoragemgmt modules for udisks2)

CVEs

References

Red Hat Enterprise Linux Server 7

SRPM
udisks2-2.7.3-9.el7.src.rpm SHA-256: fa834b18c31318b96cb9479250ad4b38a196a903bb7d8d64cede6447530dbd55
x86_64
libudisks2-2.7.3-9.el7.i686.rpm SHA-256: eed7cbde07abef71cc4eb23b5752a9997b2b3c429e78f4b62afc73d22d9e2f42
libudisks2-2.7.3-9.el7.x86_64.rpm SHA-256: 306608b96de9f860abcd265ad6f1e3c255b6024b494a168825ec9bc381ea7e71
libudisks2-devel-2.7.3-9.el7.i686.rpm SHA-256: 7128bbad51cec76180e2d149d26c3a8ad455f9912060d5318a0524eaa8638287
libudisks2-devel-2.7.3-9.el7.x86_64.rpm SHA-256: 831527dbd67b10b1bd1fd31ec40e027986008d7110b260c038419c2c495216e0
udisks2-2.7.3-9.el7.x86_64.rpm SHA-256: e9ee3114a6365c56ed66dc779472c820b4e6cc8315a681ff8fe4fe52d7757586
udisks2-debuginfo-2.7.3-9.el7.i686.rpm SHA-256: 3ef13f98c2fad1e81ea23c60227bc100a3842065ad2a896e1ef7bd72a0815ba5
udisks2-debuginfo-2.7.3-9.el7.i686.rpm SHA-256: 3ef13f98c2fad1e81ea23c60227bc100a3842065ad2a896e1ef7bd72a0815ba5
udisks2-debuginfo-2.7.3-9.el7.x86_64.rpm SHA-256: 47b4968014235971519eaac566c20d56b405249dfac4ff260019a3689bf0fd29
udisks2-debuginfo-2.7.3-9.el7.x86_64.rpm SHA-256: 47b4968014235971519eaac566c20d56b405249dfac4ff260019a3689bf0fd29
udisks2-iscsi-2.7.3-9.el7.x86_64.rpm SHA-256: 4c3e3493353c11b8bdd97935e8fdfe7d621dd2b538fe0e2d27b947cadb0257ce
udisks2-lsm-2.7.3-9.el7.x86_64.rpm SHA-256: 3e49b19b7b0c358099ed53b94e1257020ac9e1810e43524aa17990bcfe4eab8c
udisks2-lvm2-2.7.3-9.el7.x86_64.rpm SHA-256: 2ad4411fdfff619be8c78e56355a8a7f64f28cc669a27b1ac9dd6dc0c263bdf8

Red Hat Enterprise Linux Workstation 7

SRPM
udisks2-2.7.3-9.el7.src.rpm SHA-256: fa834b18c31318b96cb9479250ad4b38a196a903bb7d8d64cede6447530dbd55
x86_64
libudisks2-2.7.3-9.el7.i686.rpm SHA-256: eed7cbde07abef71cc4eb23b5752a9997b2b3c429e78f4b62afc73d22d9e2f42
libudisks2-2.7.3-9.el7.x86_64.rpm SHA-256: 306608b96de9f860abcd265ad6f1e3c255b6024b494a168825ec9bc381ea7e71
libudisks2-devel-2.7.3-9.el7.i686.rpm SHA-256: 7128bbad51cec76180e2d149d26c3a8ad455f9912060d5318a0524eaa8638287
libudisks2-devel-2.7.3-9.el7.x86_64.rpm SHA-256: 831527dbd67b10b1bd1fd31ec40e027986008d7110b260c038419c2c495216e0
udisks2-2.7.3-9.el7.x86_64.rpm SHA-256: e9ee3114a6365c56ed66dc779472c820b4e6cc8315a681ff8fe4fe52d7757586
udisks2-debuginfo-2.7.3-9.el7.i686.rpm SHA-256: 3ef13f98c2fad1e81ea23c60227bc100a3842065ad2a896e1ef7bd72a0815ba5
udisks2-debuginfo-2.7.3-9.el7.i686.rpm SHA-256: 3ef13f98c2fad1e81ea23c60227bc100a3842065ad2a896e1ef7bd72a0815ba5
udisks2-debuginfo-2.7.3-9.el7.x86_64.rpm SHA-256: 47b4968014235971519eaac566c20d56b405249dfac4ff260019a3689bf0fd29
udisks2-debuginfo-2.7.3-9.el7.x86_64.rpm SHA-256: 47b4968014235971519eaac566c20d56b405249dfac4ff260019a3689bf0fd29
udisks2-iscsi-2.7.3-9.el7.x86_64.rpm SHA-256: 4c3e3493353c11b8bdd97935e8fdfe7d621dd2b538fe0e2d27b947cadb0257ce
udisks2-lsm-2.7.3-9.el7.x86_64.rpm SHA-256: 3e49b19b7b0c358099ed53b94e1257020ac9e1810e43524aa17990bcfe4eab8c
udisks2-lvm2-2.7.3-9.el7.x86_64.rpm SHA-256: 2ad4411fdfff619be8c78e56355a8a7f64f28cc669a27b1ac9dd6dc0c263bdf8

Red Hat Enterprise Linux Desktop 7

SRPM
udisks2-2.7.3-9.el7.src.rpm SHA-256: fa834b18c31318b96cb9479250ad4b38a196a903bb7d8d64cede6447530dbd55
x86_64
libudisks2-2.7.3-9.el7.i686.rpm SHA-256: eed7cbde07abef71cc4eb23b5752a9997b2b3c429e78f4b62afc73d22d9e2f42
libudisks2-2.7.3-9.el7.x86_64.rpm SHA-256: 306608b96de9f860abcd265ad6f1e3c255b6024b494a168825ec9bc381ea7e71
libudisks2-devel-2.7.3-9.el7.i686.rpm SHA-256: 7128bbad51cec76180e2d149d26c3a8ad455f9912060d5318a0524eaa8638287
libudisks2-devel-2.7.3-9.el7.x86_64.rpm SHA-256: 831527dbd67b10b1bd1fd31ec40e027986008d7110b260c038419c2c495216e0
udisks2-2.7.3-9.el7.x86_64.rpm SHA-256: e9ee3114a6365c56ed66dc779472c820b4e6cc8315a681ff8fe4fe52d7757586
udisks2-debuginfo-2.7.3-9.el7.i686.rpm SHA-256: 3ef13f98c2fad1e81ea23c60227bc100a3842065ad2a896e1ef7bd72a0815ba5
udisks2-debuginfo-2.7.3-9.el7.i686.rpm SHA-256: 3ef13f98c2fad1e81ea23c60227bc100a3842065ad2a896e1ef7bd72a0815ba5
udisks2-debuginfo-2.7.3-9.el7.x86_64.rpm SHA-256: 47b4968014235971519eaac566c20d56b405249dfac4ff260019a3689bf0fd29
udisks2-debuginfo-2.7.3-9.el7.x86_64.rpm SHA-256: 47b4968014235971519eaac566c20d56b405249dfac4ff260019a3689bf0fd29
udisks2-iscsi-2.7.3-9.el7.x86_64.rpm SHA-256: 4c3e3493353c11b8bdd97935e8fdfe7d621dd2b538fe0e2d27b947cadb0257ce
udisks2-lsm-2.7.3-9.el7.x86_64.rpm SHA-256: 3e49b19b7b0c358099ed53b94e1257020ac9e1810e43524aa17990bcfe4eab8c
udisks2-lvm2-2.7.3-9.el7.x86_64.rpm SHA-256: 2ad4411fdfff619be8c78e56355a8a7f64f28cc669a27b1ac9dd6dc0c263bdf8

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
udisks2-2.7.3-9.el7.src.rpm SHA-256: fa834b18c31318b96cb9479250ad4b38a196a903bb7d8d64cede6447530dbd55
s390x
libudisks2-2.7.3-9.el7.s390.rpm SHA-256: 92c2d23ba1b9915ac04770745571e140171270360c64da68d10d0ec07afe14be
libudisks2-2.7.3-9.el7.s390x.rpm SHA-256: 5304566008899e3806863f08ca0ccb38542bade62ac05c86be6b7984e50c1628
libudisks2-devel-2.7.3-9.el7.s390.rpm SHA-256: 063217f24be9fa378246fc2cb62c034353f18eeea905d27f787f10ef244ed96f
libudisks2-devel-2.7.3-9.el7.s390x.rpm SHA-256: e16b0069968bc28e4de0085de6ef68764ac5ec1fa12dcae5f875a5437eadd851
udisks2-2.7.3-9.el7.s390x.rpm SHA-256: 8aa8e97fa5376e61c7df7694f1b59e7327a4cf70d9a0bd24fe3b583088c81535
udisks2-debuginfo-2.7.3-9.el7.s390.rpm SHA-256: 39c880988d78ab88decf2f75d73b64f0bf17748f6dcc6092d5e8b932902f2da2
udisks2-debuginfo-2.7.3-9.el7.s390.rpm SHA-256: 39c880988d78ab88decf2f75d73b64f0bf17748f6dcc6092d5e8b932902f2da2
udisks2-debuginfo-2.7.3-9.el7.s390x.rpm SHA-256: 2135d415f3d6ea12a93c06815066bf1cc20dcc6592edde675d8d9d4d60252c48
udisks2-debuginfo-2.7.3-9.el7.s390x.rpm SHA-256: 2135d415f3d6ea12a93c06815066bf1cc20dcc6592edde675d8d9d4d60252c48
udisks2-iscsi-2.7.3-9.el7.s390x.rpm SHA-256: 5e646ca4bf4cd54f9e9ce7bd6e695d0c4bff5cbe5bbdbd703b71cc821f7f7df9
udisks2-lsm-2.7.3-9.el7.s390x.rpm SHA-256: 1af06ae6017317b4ed5da750f65c097b758b0185faac3b7a9a57b57cad86b8c6
udisks2-lvm2-2.7.3-9.el7.s390x.rpm SHA-256: 134cfc6e32407b54da4817a262312eae73f8e81dcc9660bc92298239bdc61d75

Red Hat Enterprise Linux for Power, big endian 7

SRPM
udisks2-2.7.3-9.el7.src.rpm SHA-256: fa834b18c31318b96cb9479250ad4b38a196a903bb7d8d64cede6447530dbd55
ppc64
libudisks2-2.7.3-9.el7.ppc.rpm SHA-256: 4b29c93b49154b0f946e411ab8f4bd9f0f27f1e4231ef4d61b9e841490390956
libudisks2-2.7.3-9.el7.ppc64.rpm SHA-256: e0aaaa7c359b4b098eab909609647beca117d1c69356cdc6f0a302a9e6ea4d46
libudisks2-devel-2.7.3-9.el7.ppc.rpm SHA-256: 811e59fb46b2fdf94d96be7fb93b869d4fe5ceadececa94c0a8aa8f1fb2b97f4
libudisks2-devel-2.7.3-9.el7.ppc64.rpm SHA-256: 86f505897148f5b23f1f97908ecf909dd123f42ccfa4764f8fda73754c41d620
udisks2-2.7.3-9.el7.ppc64.rpm SHA-256: c2dc361a0b03dcfa478d3348d6997fcec5498468af12240ff4c69ad8dcad0fff
udisks2-debuginfo-2.7.3-9.el7.ppc.rpm SHA-256: 1eaf494ca913947814fcc8c6de06d4532d44387975e606c9663a1624019126a6
udisks2-debuginfo-2.7.3-9.el7.ppc.rpm SHA-256: 1eaf494ca913947814fcc8c6de06d4532d44387975e606c9663a1624019126a6
udisks2-debuginfo-2.7.3-9.el7.ppc64.rpm SHA-256: 4913ce374c00895fa617c86d63723e040dc8aab526344bac05d273cb85449772
udisks2-debuginfo-2.7.3-9.el7.ppc64.rpm SHA-256: 4913ce374c00895fa617c86d63723e040dc8aab526344bac05d273cb85449772
udisks2-iscsi-2.7.3-9.el7.ppc64.rpm SHA-256: 91588425cd464255d31684d6a6e7bd29827d74e45a0ecf68f46925ca01d74477
udisks2-lsm-2.7.3-9.el7.ppc64.rpm SHA-256: 6610ce528f376cb01dafdf42fd31c9f7dcd3f2ffc52ba77bea9e805331980018
udisks2-lvm2-2.7.3-9.el7.ppc64.rpm SHA-256: 54ee06090bed0f0427a98e0d76794d17f778089b6ec66597baac7a238d50bf5e

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
udisks2-2.7.3-9.el7.src.rpm SHA-256: fa834b18c31318b96cb9479250ad4b38a196a903bb7d8d64cede6447530dbd55
x86_64
libudisks2-2.7.3-9.el7.i686.rpm SHA-256: eed7cbde07abef71cc4eb23b5752a9997b2b3c429e78f4b62afc73d22d9e2f42
libudisks2-2.7.3-9.el7.x86_64.rpm SHA-256: 306608b96de9f860abcd265ad6f1e3c255b6024b494a168825ec9bc381ea7e71
libudisks2-devel-2.7.3-9.el7.i686.rpm SHA-256: 7128bbad51cec76180e2d149d26c3a8ad455f9912060d5318a0524eaa8638287
libudisks2-devel-2.7.3-9.el7.x86_64.rpm SHA-256: 831527dbd67b10b1bd1fd31ec40e027986008d7110b260c038419c2c495216e0
udisks2-2.7.3-9.el7.x86_64.rpm SHA-256: e9ee3114a6365c56ed66dc779472c820b4e6cc8315a681ff8fe4fe52d7757586
udisks2-debuginfo-2.7.3-9.el7.i686.rpm SHA-256: 3ef13f98c2fad1e81ea23c60227bc100a3842065ad2a896e1ef7bd72a0815ba5
udisks2-debuginfo-2.7.3-9.el7.i686.rpm SHA-256: 3ef13f98c2fad1e81ea23c60227bc100a3842065ad2a896e1ef7bd72a0815ba5
udisks2-debuginfo-2.7.3-9.el7.x86_64.rpm SHA-256: 47b4968014235971519eaac566c20d56b405249dfac4ff260019a3689bf0fd29
udisks2-debuginfo-2.7.3-9.el7.x86_64.rpm SHA-256: 47b4968014235971519eaac566c20d56b405249dfac4ff260019a3689bf0fd29
udisks2-iscsi-2.7.3-9.el7.x86_64.rpm SHA-256: 4c3e3493353c11b8bdd97935e8fdfe7d621dd2b538fe0e2d27b947cadb0257ce
udisks2-lsm-2.7.3-9.el7.x86_64.rpm SHA-256: 3e49b19b7b0c358099ed53b94e1257020ac9e1810e43524aa17990bcfe4eab8c
udisks2-lvm2-2.7.3-9.el7.x86_64.rpm SHA-256: 2ad4411fdfff619be8c78e56355a8a7f64f28cc669a27b1ac9dd6dc0c263bdf8

Red Hat Enterprise Linux for Power, little endian 7

SRPM
udisks2-2.7.3-9.el7.src.rpm SHA-256: fa834b18c31318b96cb9479250ad4b38a196a903bb7d8d64cede6447530dbd55
ppc64le
libudisks2-2.7.3-9.el7.ppc64le.rpm SHA-256: 0325bef6449779744d2fa8e723a4f595f28c1a1575588b09ee378f17bc8a3655
libudisks2-devel-2.7.3-9.el7.ppc64le.rpm SHA-256: 531adaf04e3bec18583e91feeeb6ccac8a3573a9be6f3cbb3055838a653a41dd
udisks2-2.7.3-9.el7.ppc64le.rpm SHA-256: 7cd3e1324abe390e5cf904eae8c9397955f5a2ebee98a1ae1e88b021d55ec7be
udisks2-debuginfo-2.7.3-9.el7.ppc64le.rpm SHA-256: 2ae2e858d9f3802e0cb54a887f42235121d5cfa3558dfb0553b1f1e939cadbd0
udisks2-debuginfo-2.7.3-9.el7.ppc64le.rpm SHA-256: 2ae2e858d9f3802e0cb54a887f42235121d5cfa3558dfb0553b1f1e939cadbd0
udisks2-iscsi-2.7.3-9.el7.ppc64le.rpm SHA-256: 75159829b81af5c03ade7078a761f2d817ccf3ff8f08918df4fefc552f81aa37
udisks2-lsm-2.7.3-9.el7.ppc64le.rpm SHA-256: 0e88d9daac1025be75eacd4053803c3346666a76972fcbd27f8aff02263c8aec
udisks2-lvm2-2.7.3-9.el7.ppc64le.rpm SHA-256: 73c7d4896bafd16462ec6eb35ba7ef2f47caff36c84cbe1652ff9c269a7c8022

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.