diff --git a/0007-udiskslinuxloop-Fix-GError-use-after-free.patch b/0007-udiskslinuxloop-Fix-GError-use-after-free.patch new file mode 100644 index 0000000000000000000000000000000000000000..fec6604c537d89fa746a25a7627da14b7f05251b --- /dev/null +++ b/0007-udiskslinuxloop-Fix-GError-use-after-free.patch @@ -0,0 +1,27 @@ +From 2a28ac8ff924ca673800d3f2b69c12c3e79327bc Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Mon, 10 Jun 2024 16:54:13 +0200 +Subject: [PATCH] udiskslinuxloop: Fix GError use-after-free + +https://bugzilla.redhat.com/show_bug.cgi?id=2290953 +--- + src/udiskslinuxloop.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/udiskslinuxloop.c b/src/udiskslinuxloop.c +index 5d7e355..91082b7 100644 +--- a/src/udiskslinuxloop.c ++++ b/src/udiskslinuxloop.c +@@ -274,8 +274,8 @@ handle_delete (UDisksLoop *loop, + if (!bd_loop_teardown (device_file, &error)) + { + g_prefix_error (&error, "Error deleting '%s': ", device_file); +- g_dbus_method_invocation_take_error (invocation, error); + udisks_simple_job_complete (UDISKS_SIMPLE_JOB (job), FALSE, error->message); ++ g_dbus_method_invocation_take_error (invocation, error); + goto out; + } + +-- +2.43.0 + diff --git a/udisks2.spec b/udisks2.spec index cde09f6424060e7e747a7245c2110498e2005285..227b3ce2a309766fea0e56115739eb86ac7cc742 100644 --- a/udisks2.spec +++ b/udisks2.spec @@ -58,7 +58,7 @@ Name: udisks2 Summary: Disk Manager Version: 2.9.4 -Release: 9 +Release: 10 License: GPL-2.0+ and LGPL-2.0+ Group: System Environment/Libraries URL: https://github.com/storaged-project/udisks @@ -69,6 +69,7 @@ Patch3: 0003-udiskslinuxmanager-use-dbus-interface-after-free.patch Patch4: 0004-fix-CVE-2025-6019-udiskslinuxfilesystemhelpers-mount-with-nosuid-nodev.patch Patch5: 0005-udisksctl-fix-segfault.patch Patch6: 0006-CVE-2025-8067.patch +Patch7: 0007-udiskslinuxloop-Fix-GError-use-after-free.patch BuildRequires: glib2-devel >= %{glib2_version} BuildRequires: gobject-introspection-devel >= %{gobject_introspection_version} @@ -441,6 +442,9 @@ udevadm trigger %endif %changelog +* Mon Nov 10 2025 liuh - 2.9.4-10 +- udiskslinuxloop: Fix GError use-after-free + * Wed Sep 03 2025 wangmian - 2.9.4-9 - fix cve-2025-8067