pyrox.dev
udisks2: Fix CVE-2025-6019 (#417763)
+9
pkgs/by-name/li/libblockdev/package.nix
+9
pkgs/by-name/li/libblockdev/package.nix
···
2
2
lib,
3
3
stdenv,
4
4
fetchFromGitHub,
5
+
fetchpatch,
5
6
autoreconfHook,
6
7
pkg-config,
7
8
gtk-doc,
···
43
44
rev = finalAttrs.version;
44
45
hash = "sha256-Q7610i+2PQi+Oza3c2SwPneljrb+1cuFA4K4DQTpt8A=";
45
46
};
47
+
48
+
patches = [
49
+
# CVE-2025-6019: https://www.openwall.com/lists/oss-security/2025/06/17/5
50
+
(fetchpatch {
51
+
url = "https://github.com/storaged-project/libblockdev/commit/4e35eb93e4d2672686789b9705623cc4f9f85d02.patch";
52
+
hash = "sha256-3pQxvbFX6jmT5LCaePoVfvPTNPoTPPhT0GcLaGkVVso=";
53
+
})
54
+
];
46
55
47
56
outputs = [
48
57
"out"
+8
pkgs/os-specific/linux/udisks/2-default.nix
+8
pkgs/os-specific/linux/udisks/2-default.nix
···
2
2
lib,
3
3
stdenv,
4
4
fetchFromGitHub,
5
+
fetchpatch,
5
6
replaceVars,
6
7
pkg-config,
7
8
gnused,
···
78
79
parted
79
80
util-linux
80
81
];
82
+
})
83
+
84
+
# CVE-2025-6019: https://www.openwall.com/lists/oss-security/2025/06/17/5
85
+
(fetchpatch {
86
+
name = "CVE-2025-6019-2.patch";
87
+
url = "https://www.openwall.com/lists/oss-security/2025/06/17/5/2";
88
+
hash = "sha256-pgTA6yxQ1o9OU3qBeV1lh2O6mBkaUcc9md4uwFwz+AM=";
81
89
})
82
90
];
83
91