Linux · Security advisory · June 30, 2025

ELSA-2025-9878: Security update for 28 packages

ELSA-2025-9878, released June 30, 2025, fixes 1 CVE across 28 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0048
41st percentile

Fixed package versions

ProductReleaseFixed in
libblockdevol 80:2.28-7.0.1.el8_10
libblockdev-btrfsol 80:2.28-7.0.1.el8_10
libblockdev-cryptool 80:2.28-7.0.1.el8_10
libblockdev-crypto-develol 80:2.28-7.0.1.el8_10
libblockdev-develol 80:2.28-7.0.1.el8_10
libblockdev-dmol 80:2.28-7.0.1.el8_10
libblockdev-fsol 80:2.28-7.0.1.el8_10
libblockdev-fs-develol 80:2.28-7.0.1.el8_10
libblockdev-kbdol 80:2.28-7.0.1.el8_10
libblockdev-loopol 80:2.28-7.0.1.el8_10
libblockdev-loop-develol 80:2.28-7.0.1.el8_10
libblockdev-lvmol 80:2.28-7.0.1.el8_10
libblockdev-lvm-dbusol 80:2.28-7.0.1.el8_10
libblockdev-lvm-develol 80:2.28-7.0.1.el8_10
libblockdev-mdraidol 80:2.28-7.0.1.el8_10
libblockdev-mdraid-develol 80:2.28-7.0.1.el8_10
libblockdev-mpathol 80:2.28-7.0.1.el8_10
libblockdev-nvdimmol 80:2.28-7.0.1.el8_10
libblockdev-partol 80:2.28-7.0.1.el8_10
libblockdev-part-develol 80:2.28-7.0.1.el8_10
libblockdev-plugins-allol 80:2.28-7.0.1.el8_10
libblockdev-swapol 80:2.28-7.0.1.el8_10
libblockdev-swap-develol 80:2.28-7.0.1.el8_10
libblockdev-utilsol 80:2.28-7.0.1.el8_10
libblockdev-utils-develol 80:2.28-7.0.1.el8_10
libblockdev-vdool 80:2.28-7.0.1.el8_10
libblockdev-vdo-develol 80:2.28-7.0.1.el8_10
python3-blockdevol 80:2.28-7.0.1.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-6019 gir1.2-blockdev-3.0: A Local Privilege Escalation (LPE) vulnerability was found in libblockdev.Generally, the "allow_active" setting in Po... 7.0 0.0048 None reported
Showing 1 to 1 of 1 1