Sync from SUSE:SLFO:Main libblockdev revision 2b0feddc90d427e0614ae909df2a66bc

0001-dont-allow-suid-and-dev-set-on-fs-resize.patch

@@ -0,0 +1,27 @@
+From 8e072f794744bd17c57cceabb3884d3f0f6a1602 Mon Sep 17 00:00:00 2001
+From: Thomas Blume <Thomas.Blume@suse.com>
+Date: Fri, 16 May 2025 14:27:10 +0200
+Subject: [PATCH] dont allow suid and dev set on fs resize
+
+---
+ src/plugins/fs/generic.c | 4 +++-
+ 1 file changed, 3 insertions(+), 1 deletion(-)
+
+diff --git a/src/plugins/fs/generic.c b/src/plugins/fs/generic.c
+index 69333944..1a6dd960 100644
+--- a/src/plugins/fs/generic.c
++++ b/src/plugins/fs/generic.c
+@@ -683,7 +683,9 @@ static gchar* fs_mount (const gchar *device, gchar *fstype, gboolean read_only,
+                              "Failed to create temporary directory for mounting '%s'.", device);
+                 return NULL;
+             }
+-            ret = bd_fs_mount (device, mountpoint, fstype, read_only ? "ro" : NULL, NULL, &l_error);
++
++            ret = bd_fs_mount (device, mountpoint, fstype, read_only ? "nosuid,nodev,ro" : "nosuid,nodev", NULL, &l_error);
++
+             if (!ret) {
+                 g_propagate_prefixed_error (error, l_error, "Failed to mount '%s': ", device);
+                 g_rmdir (mountpoint);
+-- 
+2.48.1
+

libblockdev.changes

@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Mon Jun 23 14:54:35 UTC 2025 - Thomas Blume <thomas.blume@suse.com>
+
+- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
+  (bsc#1243285)
+  * add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch
+
 -------------------------------------------------------------------
 Fri Feb 14 12:17:27 UTC 2025 - Thomas Blume <thomas.blume@suse.com>
 

libblockdev.spec

@@ -49,6 +49,7 @@ Group:          Development/Libraries/C and C++
 URL:            https://github.com/storaged-project/libblockdev
 Source0:        %{url}/releases/download/%{version}-1/libblockdev-%{version}.tar.gz
 Source1:        %{url}/raw/%{version}-1/NEWS.rst
+Patch0:         0001-dont-allow-suid-and-dev-set-on-fs-resize.patch
 
 ###############################################################################
 #                          M A I N  P A C K A G E