Florian Weimer discovered a buffer overflow in udisks's mount path parsing code which may result in privilege escalation.

For the oldstable distribution (squeeze), this problem has been fixed in version 1.0.1+git20100614-3squeeze1. For the stable distribution (wheezy), this problem has been fixed in version 1.0.4-7wheezy1. For the unstable distribution (sid), this problem has been fixed in version 1.0.5-1. We recommend that you upgrade your udisks packages.

udisks is an abstraction for enumerating block devices and performing operations on them. Any application can access the org.freedesktop.UDisks service on the system message bus. Some operations (such as formatting disks etc.) are restricted using PolicyKit.

udisks on Debian Linux

This check tests the installed software version using the apt package manager.

• http://www.debian.org/security/2014/dsa-2872.html

---

Updated on 2015-03-25