diff --git a/0007-udiskslinuxloop-Fix-GError-use-after-free.patch b/0007-udiskslinuxloop-Fix-GError-use-after-free.patch new file mode 100644 index 0000000000000000000000000000000000000000..d7c1d38eb7e5bc397cc346bcf6f7205cec2fe77c --- /dev/null +++ b/0007-udiskslinuxloop-Fix-GError-use-after-free.patch @@ -0,0 +1,27 @@ +From 2a28ac8ff924ca673800d3f2b69c12c3e79327bc Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Mon, 10 Jun 2024 16:54:13 +0200 +Subject: [PATCH] udiskslinuxloop: Fix GError use-after-free + +https://bugzilla.redhat.com/show_bug.cgi?id=2290953 +--- + src/udiskslinuxloop.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/udiskslinuxloop.c b/src/udiskslinuxloop.c +index 5f162f1..500df6e 100644 +--- a/src/udiskslinuxloop.c ++++ b/src/udiskslinuxloop.c +@@ -263,8 +263,8 @@ handle_delete (UDisksLoop *loop, + if (!bd_loop_teardown (device_file, &error)) + { + g_prefix_error (&error, "Error deleting '%s': ", device_file); +- g_dbus_method_invocation_take_error (invocation, error); + udisks_simple_job_complete (UDISKS_SIMPLE_JOB (job), FALSE, error->message); ++ g_dbus_method_invocation_take_error (invocation, error); + goto out; + } + +-- +2.43.0 + diff --git a/udisks2.spec b/udisks2.spec index 0ff38e71fd0290e90f9b29328af4798ece8099a9..aa90ae85573660d30a5c9a821ac0c3dadc68865f 100644 --- a/udisks2.spec +++ b/udisks2.spec @@ -19,7 +19,7 @@ Name: udisks2 Summary: Disk Manager Version: 2.10.1 -Release: 7 +Release: 8 License: GPL-2.0+ and LGPL-2.0+ Group: System Environment/Libraries URL: https://github.com/storaged-project/udisks @@ -31,6 +31,7 @@ Patch0003: 0003-udiskslinuxblock-Fix-leaking-string.patch Patch0004: 0004-fix-CVE-2025-6019-udiskslinuxfilesystemhelpers-mount-with-nosuid-nodev.patch Patch0005: 0005-helpers-fixed-memleak-and-misprint-check-for-creating-second-BDCrypto-context.patch Patch0006: 0006-CVE-2025-8067.patch +Patch0007: 0007-udiskslinuxloop-Fix-GError-use-after-free.patch BuildRequires: make BuildRequires: glib2-devel >= %{glib2_version} @@ -321,6 +322,9 @@ fi %changelog +* Mon Nov 10 2025 liuh - 2.10.1-8 +- udiskslinuxloop: Fix GError use-after-free + * Wed Sep 03 2025 wangmian - 2.10.1-7 - fix CVE-2025-8067