debcrafters-packages team mailing list archive

[Lena Voytek <2130110@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Scheduled-For: ubuntu-25.11
Ubuntu: 2.10.1-12.1ubuntu2
Debian Unstable: 2.10.91-1

A new release of udisks2 is available for merging from Debian Unstable.

If it turns out this needs a sync rather than a merge, please change the
tagging from ['dcr-merge'] to ['dcr-sync'], and (optionally) update the
title as desired.

If this merge pulls in a new upstream version, also consider adding an
entry to the resolute Release Notes:
https://discourse.ubuntu.com/t/resolute-raccoon-release-notes/

### New Debian Changes ###

udisks2 (2.10.91-1) unstable; urgency=medium

  * New upstream version 2.10.91
  * Drop patches, merged upstream
  * Use /run/media instead of /media as mountpoint for removable media.
    This has several benefits like
    - Better support for r/o root file systems
    - Better alignment with other distros and upstream defaults
    - Not requiring special cleanup routines as /run is hosted on a tmpfs
    (Closes: #1074568)
  * tests: Do not use "echo -e" in tests.
    Patch cherry-picked from upstream Git.

 -- Michael Biebl <biebl@xxxxxxxxxx>  Wed, 03 Sep 2025 12:11:21 +0200

udisks2 (2.10.90-3.1) unstable; urgency=medium

  * Non-maintainer upload by the Security Team.
  * udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067)

 -- Salvatore Bonaccorso <carnil@xxxxxxxxxx>  Wed, 20 Aug 2025 20:20:35
+0200

udisks2 (2.10.90-3) unstable; urgency=medium

  * Upload to unstable

 -- Michael Biebl <biebl@xxxxxxxxxx>  Fri, 15 Aug 2025 19:36:16 +0200

udisks2 (2.10.90-2) experimental; urgency=medium

  * Merge changes from debian/unstable
  * Rename debian-branch to debian/experimental
  * Drop Build-Depends on libgirepository1.0-dev.
    Bump the Build-Depends on gobject-introspection to (>= 1.80) and also
    drop the hard-coded gir1.2-* dependencies and rely on ${gir:Depends}
    instead.
    See https://lists.debian.org/debian-devel/2025/08/msg00150.html
  * Bump Standards-Version to 4.7.2

 -- Michael Biebl <biebl@xxxxxxxxxx>  Fri, 15 Aug 2025 13:29:11 +0200

udisks2 (2.10.90-1) experimental; urgency=medium

  * New upstream version 2.10.90
  * Drop patches, merged upstream
  * Add (Build-)Depends on libblockdev-smart.
    ATA SMART handling has been ported over to libblockdev.
  * Update symbols file for libudisks2-0
  * Add Build-Depends on gir1.2-gio-2.0-dev as suggested by dh_girepository
  * Add ${gir:Depends} and ${gir:Provides} to libudisks2-dev

 -- Michael Biebl <biebl@xxxxxxxxxx>  Thu, 03 Oct 2024 18:32:23 +0200


### Old Ubuntu Delta ###

udisks2 (2.10.1-12.1ubuntu2) questing; urgency=medium

  * SECURITY UPDATE: DoS and possible information disclosure via OOB read
    - debian/patches/CVE-2025-8067.patch: add lower bounds check to
      fd_index in src/udiskslinuxmanager.c.
    - CVE-2025-8067

 -- Hlib Korzhynskyy <hlib.korzhynskyy@xxxxxxxxxxxxx>  Tue, 26 Aug 2025
09:45:41 -0230

udisks2 (2.10.1-12.1ubuntu1) questing; urgency=medium

  * Merge with Debian unstable. Remaining changes:
  * d/p/nvme-disk-size.patch:
    - use upstream candidate fix for getting the size of nvme drives

 -- Marc Deslauriers <marc.deslauriers@xxxxxxxxxx>  Wed, 18 Jun 2025
07:49:17 -0400

** Affects: udisks2 (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: dcr-merge

** Changed in: udisks2 (Ubuntu)
    Milestone: None => ubuntu-25.11

-- 
You received this bug notification because you are a member of
Debcrafters packages, which is subscribed to udisks2 in Ubuntu.
https://bugs.launchpad.net/bugs/2130110

Title:
  Merge udisks2 from Debian Unstable for resolute

Status in udisks2 package in Ubuntu:
  New

Bug description:
  Scheduled-For: ubuntu-25.11
  Ubuntu: 2.10.1-12.1ubuntu2
  Debian Unstable: 2.10.91-1

  A new release of udisks2 is available for merging from Debian
  Unstable.

  If it turns out this needs a sync rather than a merge, please change
  the tagging from ['dcr-merge'] to ['dcr-sync'], and (optionally)
  update the title as desired.

  If this merge pulls in a new upstream version, also consider adding an
  entry to the resolute Release Notes:
  https://discourse.ubuntu.com/t/resolute-raccoon-release-notes/

  ### New Debian Changes ###

  udisks2 (2.10.91-1) unstable; urgency=medium

    * New upstream version 2.10.91
    * Drop patches, merged upstream
    * Use /run/media instead of /media as mountpoint for removable media.
      This has several benefits like
      - Better support for r/o root file systems
      - Better alignment with other distros and upstream defaults
      - Not requiring special cleanup routines as /run is hosted on a tmpfs
      (Closes: #1074568)
    * tests: Do not use "echo -e" in tests.
      Patch cherry-picked from upstream Git.

   -- Michael Biebl <biebl@xxxxxxxxxx>  Wed, 03 Sep 2025 12:11:21 +0200

  udisks2 (2.10.90-3.1) unstable; urgency=medium

    * Non-maintainer upload by the Security Team.
    * udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067)

   -- Salvatore Bonaccorso <carnil@xxxxxxxxxx>  Wed, 20 Aug 2025
  20:20:35 +0200

  udisks2 (2.10.90-3) unstable; urgency=medium

    * Upload to unstable

   -- Michael Biebl <biebl@xxxxxxxxxx>  Fri, 15 Aug 2025 19:36:16 +0200

  udisks2 (2.10.90-2) experimental; urgency=medium

    * Merge changes from debian/unstable
    * Rename debian-branch to debian/experimental
    * Drop Build-Depends on libgirepository1.0-dev.
      Bump the Build-Depends on gobject-introspection to (>= 1.80) and also
      drop the hard-coded gir1.2-* dependencies and rely on ${gir:Depends}
      instead.
      See https://lists.debian.org/debian-devel/2025/08/msg00150.html
    * Bump Standards-Version to 4.7.2

   -- Michael Biebl <biebl@xxxxxxxxxx>  Fri, 15 Aug 2025 13:29:11 +0200

  udisks2 (2.10.90-1) experimental; urgency=medium

    * New upstream version 2.10.90
    * Drop patches, merged upstream
    * Add (Build-)Depends on libblockdev-smart.
      ATA SMART handling has been ported over to libblockdev.
    * Update symbols file for libudisks2-0
    * Add Build-Depends on gir1.2-gio-2.0-dev as suggested by dh_girepository
    * Add ${gir:Depends} and ${gir:Provides} to libudisks2-dev

   -- Michael Biebl <biebl@xxxxxxxxxx>  Thu, 03 Oct 2024 18:32:23 +0200


  ### Old Ubuntu Delta ###

  udisks2 (2.10.1-12.1ubuntu2) questing; urgency=medium

    * SECURITY UPDATE: DoS and possible information disclosure via OOB read
      - debian/patches/CVE-2025-8067.patch: add lower bounds check to
        fd_index in src/udiskslinuxmanager.c.
      - CVE-2025-8067

   -- Hlib Korzhynskyy <hlib.korzhynskyy@xxxxxxxxxxxxx>  Tue, 26 Aug
  2025 09:45:41 -0230

  udisks2 (2.10.1-12.1ubuntu1) questing; urgency=medium

    * Merge with Debian unstable. Remaining changes:
    * d/p/nvme-disk-size.patch:
      - use upstream candidate fix for getting the size of nvme drives

   -- Marc Deslauriers <marc.deslauriers@xxxxxxxxxx>  Wed, 18 Jun 2025
  07:49:17 -0400

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/udisks2/+bug/2130110/+subscriptions