- bundled pyasn1: upgrade to v0.6.3 to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157188, RHEL-155669
This commit is contained in:
Oyvind Albrigtsen
parent
53bfd45bb4
commit
da912ce18c
@ -13,7 +13,7 @@
|
||||
Name: fence-agents
|
||||
Summary: Set of unified programs capable of host isolation ("fencing")
|
||||
Version: 4.16.0
|
||||
Release: 21%{?alphatag:.%{alphatag}}%{?dist}
|
||||
Release: 22%{?alphatag:.%{alphatag}}%{?dist}
|
||||
License: GPL-2.0-or-later AND LGPL-2.0-or-later
|
||||
URL: https://github.com/ClusterLabs/fence-agents
|
||||
Source0: https://fedorahosted.org/releases/f/e/fence-agents/%{name}-%{version}.tar.gz
|
||||
@ -28,7 +28,7 @@ Source104: requirements-google.txt
|
||||
## pip download --no-binary :all: -r requirements-<name>.txt
|
||||
# common
|
||||
Source1000: pycurl-7.45.3.tar.gz
|
||||
Source1001: suds-community-1.1.2.tar.gz
|
||||
Source1001: suds_community-1.2.0.tar.gz
|
||||
# aliyun
|
||||
Source1100: aliyun-python-sdk-ecs-4.24.71.tar.gz
|
||||
Source1101: aliyun-python-sdk-core-2.14.0.tar.gz
|
||||
@ -62,7 +62,9 @@ Source1310: adal-1.2.7.tar.gz
|
||||
Source1311: certifi-2025.1.31.tar.gz
|
||||
Source1312: isodate-0.6.1.tar.gz
|
||||
Source1313: portalocker-2.10.1.tar.gz
|
||||
Source1314: pyjwt-2.10.1.tar.gz
|
||||
Source1314: pyjwt-2.12.1.tar.gz
|
||||
## azure buildreq
|
||||
Source1315: setuptools-82.0.1.tar.gz
|
||||
# google
|
||||
Source1400: google-api-python-client-1.12.8.tar.gz
|
||||
Source1401: chardet-3.0.4.tar.gz
|
||||
@ -73,8 +75,8 @@ Source1405: httplib2-0.22.0.tar.gz
|
||||
Source1406: uritemplate-3.0.1.tar.gz
|
||||
Source1407: cachetools-5.3.2.tar.gz
|
||||
Source1408: googleapis-common-protos-1.62.0.tar.gz
|
||||
Source1409: pyasn1-0.5.1.tar.gz
|
||||
Source1410: pyasn1_modules-0.3.0.tar.gz
|
||||
Source1409: pyasn1-0.6.3.tar.gz
|
||||
Source1410: pyasn1_modules-0.4.2.tar.gz
|
||||
Source1411: pyroute2-0.7.12.tar.gz
|
||||
Source1412: pyroute2.core-0.6.13.tar.gz
|
||||
Source1413: pyroute2.ethtool-0.6.13.tar.gz
|
||||
@ -119,12 +121,6 @@ Patch18: RHEL-128925-fence_gce-fix-node-list-limit.patch
|
||||
Patch19: RHEL-125959-fence_virt-print-errors-to-stderr.patch
|
||||
Patch20: RHEL-145086-fence_ibm_vpc-fix-missing-statuses.patch
|
||||
|
||||
### HA support libs/utils ###
|
||||
# all archs
|
||||
Patch1000: RHEL-142445-1-kubevirt-fix-bundled-pyasn1-CVE-2026-23490.patch
|
||||
# cloud (x86_64 only)
|
||||
Patch2000: RHEL-142445-2-google-fix-bundled-pyasn1-CVE-2026-23490.patch
|
||||
|
||||
%global supportedagents amt_ws apc apc_snmp bladecenter brocade cisco_mds cisco_ucs drac5 eaton_snmp emerson eps hpblade ibmblade ibm_powervs ibm_vpc ifmib ilo ilo_moonshot ilo_mp ilo_ssh intelmodular ipdu ipmilan kdump kubevirt lpar mpath nutanix_ahv redfish rhevm rsa rsb sbd scsi vmware_rest vmware_soap wti
|
||||
%ifarch x86_64
|
||||
%global testagents virsh heuristics_ping aliyun aws azure_arm gce openstack virt
|
||||
@ -281,7 +277,8 @@ popd
|
||||
%endif
|
||||
|
||||
# support libs
|
||||
%{__python3} -m pip install --no-build-isolation --user --no-index --find-links %{_sourcedir} poetry-core
|
||||
## setuptools upgrade needed due to old dual license format not working with the distro provided version
|
||||
%{__python3} -m pip install --no-build-isolation --user --upgrade --no-index --find-links %{_sourcedir} poetry-core setuptools
|
||||
|
||||
%ifarch x86_64
|
||||
LIBS="%{_sourcedir}/requirements-*.txt"
|
||||
@ -306,15 +303,6 @@ done
|
||||
|
||||
sed -i -e "s/#PYTHON3_VERSION#/%{python3_version}/" lib/*.py agents/*/*.py
|
||||
|
||||
# regular patch doesnt work in build-section
|
||||
sed -i -e "s/#PYTHON3_VERSION#/%{python3_version}/" %{PATCH1000} %{PATCH2000}
|
||||
pushd support
|
||||
/usr/bin/patch --no-backup-if-mismatch -p1 --fuzz=2 < %{PATCH1000}
|
||||
%ifarch x86_64
|
||||
/usr/bin/patch --no-backup-if-mismatch -p1 --fuzz=2 < %{PATCH2000}
|
||||
%endif
|
||||
popd
|
||||
|
||||
export PYTHONPATH="%{_builddir}/%{name}-%{version}/support/common/lib/python%{python3_version}/site-packages:%{_builddir}/%{name}-%{version}/support/common/lib64/python%{python3_version}/site-packages:%{_builddir}/%{name}-%{version}/support/aliyun/lib/python%{python3_version}/site-packages:%{_builddir}/%{name}-%{version}/support/aws/lib/python%{python3_version}/site-packages:%{_builddir}/%{name}-%{version}/support/azure/lib/python%{python3_version}/site-packages:%{_builddir}/%{name}-%{version}/support/google/lib/python%{python3_version}/site-packages:%{_builddir}/%{name}-%{version}/support/kubevirt/lib/python%{python3_version}/site-packages:%{_builddir}/%{name}-%{version}/support/kubevirt/lib64/python%{python3_version}/site-packages"
|
||||
./autogen.sh
|
||||
%{configure} \
|
||||
@ -396,7 +384,7 @@ License: GPL-2.0-or-later AND LGPL-2.0-or-later AND LGPL-3.0-or-later AND LGPL-2
|
||||
Summary: Common base for Fence Agents
|
||||
Requires: python3-pexpect python3-ptyprocess
|
||||
Provides: bundled(python3-pycurl) = 7.45.3
|
||||
Provides: bundled(python3-suds-community) = 1.1.2
|
||||
Provides: bundled(python3-suds-community) = 1.2.0
|
||||
%description common
|
||||
A collection of executables to handle isolation ("fencing") of possibly
|
||||
misbehaving hosts by the means of remote power management, blocking
|
||||
@ -457,7 +445,7 @@ Provides: bundled(python3-adal) = 1.2.7
|
||||
Provides: bundled(python3-certifi) = 2025.1.31
|
||||
Provides: bundled(python3-isodate) = 0.6.1
|
||||
Provides: bundled(python3-portalocker) = 2.10.1
|
||||
Provides: bundled(python3-PyJWT) = 2.10.1
|
||||
Provides: bundled(python3-PyJWT) = 2.12.1
|
||||
# google
|
||||
Provides: bundled(python3-google-api-python-client) = 1.12.8
|
||||
Provides: bundled(python3-chardet) = 3.0.4
|
||||
@ -468,8 +456,8 @@ Provides: bundled(python3-httplib2) = 0.22.0
|
||||
Provides: bundled(python3-uritemplate) = 3.0.1
|
||||
Provides: bundled(python3-cachetools) = 5.3.2
|
||||
Provides: bundled(python3-googleapis-common-protos) = 1.62.0
|
||||
Provides: bundled(python3-pyasn1) = 0.5.1
|
||||
Provides: bundled(python3-pyasn1_modules) = 0.3.0
|
||||
Provides: bundled(python3-pyasn1) = 0.6.3
|
||||
Provides: bundled(python3-pyasn1_modules) = 0.4.2
|
||||
Provides: bundled(python-pyroute2) = 0.7.12
|
||||
Provides: bundled(python-pyroute2-core) = 0.6.13
|
||||
Provides: bundled(python-pyroute2-ethtool) = 0.6.13
|
||||
@ -1234,6 +1222,11 @@ are located on corosync cluster nodes.
|
||||
%endif
|
||||
|
||||
%changelog
|
||||
* Fri Apr 24 2026 Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-22
|
||||
- bundled pyasn1: upgrade to v0.6.3 to fix CVE-2026-30922
|
||||
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
|
||||
Resolves: RHEL-157188, RHEL-155669
|
||||
|
||||
* Mon Feb 16 2026 Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-21
|
||||
- bundled pyasn1: fix CVE-2026-23490
|
||||
Resolves: RHEL-142445
|
||||
|
||||
9
sources
9
sources
@ -5,7 +5,7 @@ SHA512 (requirements-aws.txt) = ca39604d09f4b05589ddaa437be13b7f5d1868218745df10
|
||||
SHA512 (requirements-azure.txt) = 8071c96bb3e2b82852b10fd68b77b69a7fce6153ab315298ceb07456fe66f3aca056d3273f11eb87ff30049759e8b4fddf62e39acb91953d36e933e44dce8c9b
|
||||
SHA512 (requirements-google.txt) = d916eb72588e55f5243b9e5391ab07d65eaafe583e073ef79d0e865f4c5e911d7b10310f7ccb98b5fdc1383c2214cc0cc082fa3c5fac6aa3d1931e4779149241
|
||||
SHA512 (pycurl-7.45.3.tar.gz) = 12a55070602a1fd22b160ad582a4001bdd28531d2b2ccd365ff0136bc13dd23af80b19488bdbbc60a902a3a362b64383b9ae6acce6ed328c74dcffc8a6a3f4ad
|
||||
SHA512 (suds-community-1.1.2.tar.gz) = 9f26ebbf36fcbd915281f3c3afd4ea776ca409ede4ba9e487b746ef4e527171ee2fdb44075100d52b5bba0658fafec817eea2cbf64b8d2851bdc974aee430d57
|
||||
SHA512 (suds_community-1.2.0.tar.gz) = 8955ad288fbd9d472b8aa4b4a016da66616436bb41b44d7935f4c14ae897c127e0d6c14457f2303ead671f92edc51454701c9658aec32f6af44882526ed86aeb
|
||||
SHA512 (aliyun-python-sdk-ecs-4.24.71.tar.gz) = 53fad1945f920121b6ea61ea522a8774b1ff46bf940892419887b67566a7a94da8c911a1ebb96ebf00e61ac97d09d61ca48f903d353afd5bc97fda1e4a98c2e9
|
||||
SHA512 (aliyun-python-sdk-core-2.14.0.tar.gz) = a1c8668980fd5db2401228d7853686fefd2ec6e489f6633bf62650258bfbadc9f693053cb154ebcbfcb1112f2efdda2c40f5ff39413d4ca76fbfead457183aa3
|
||||
SHA512 (jmespath-0.10.0.tar.gz) = 9e229b5809d2dd74eb7dbf518953f848175743fb0ee91ffc901777be2f4809cc0c4f4ba40890746533e344f64e900ec189d6a8c847c864fa47fbf67e5106a7bc
|
||||
@ -29,8 +29,8 @@ SHA512 (adal-1.2.7.tar.gz) = b46dd3ebb72123e9c2d2eb75eae17b1175f09908b4443013125
|
||||
SHA512 (certifi-2025.1.31.tar.gz) = 0923260200cb191ca10e9cfc7114a399f0dc87c7acbb833f950abaa6d4876805abe12838194809689f92424dd65e6e79f955f114b0acb00f8bd28e04a97ef555
|
||||
SHA512 (isodate-0.6.1.tar.gz) = 437e420ec7ee68dedded825f30d3289eeb0da526208443e5a8e50fe70f12309515e1285b21132d26e6d4c1683f90dfa1d401582042b5e4381fe7ab0e34af26b6
|
||||
SHA512 (portalocker-2.10.1.tar.gz) = 417d2b59c3cde6968b583d3e86153b85048354c9eb02fbd329a4d79b17abb47f3a07fe88af6b290d50111bb8534c8b2997633a93914e602c9312d4395af7407c
|
||||
SHA512 (pyasn1-0.5.1.tar.gz) = 19478d810d000fb4435f6a1776f290b1618a693539ff8ffad8c41f9ac316938f1c0ae988db8571a838443407d312b5566887e20284a779ccf427888739f13833
|
||||
SHA512 (pyjwt-2.10.1.tar.gz) = 2ae530750b59ef692ab31bf8bf3506e553b0199f346ddd06afed12304683f254cc924ff7190c5c911af72237dd794c345097de306e79e0fbcfb59958cb8cfbe5
|
||||
SHA512 (pyjwt-2.12.1.tar.gz) = ad1e925b9aa39017bd83863233b39de06a919daed664d5835e58def47f6fb4435fab057a37a5fa8a7543f691f5fc9f82e6d879ef0ad60960f982a214b305078a
|
||||
SHA512 (setuptools-82.0.1.tar.gz) = 5d70e9efd818245fb8119a4eed64d776078469ed884facc188f141ea491efd9fde5c10c928d3236ea5e2e431b16616f18ed14870b867f95e6320251707332395
|
||||
SHA512 (google-api-python-client-1.12.8.tar.gz) = e6aafb165d12c0f38b26326320f6f4dfebd4eef8401cda0a915fbf04bfff91e39cc4572979324808a71b863711b4fab2a9b397da9f933fb12867e8453e17354f
|
||||
SHA512 (chardet-3.0.4.tar.gz) = 61a03b23447a2bfe52ceed4dd1b9afdb5784da1933a623776883ee9f297e341f633e27f0ce0230bd5fdc5fdb5382105ab42736a74a417ddeb9f83af57455dba5
|
||||
SHA512 (google-api-core-1.34.1.tar.gz) = 3714ec8e380003da8cecd5a0de832027b2ca6564bc407cce5b5fc8780fde294141bf6313c7335e54cb8b3ed5af7a53547641c1216529a636104a19fceac668f4
|
||||
@ -40,7 +40,8 @@ SHA512 (httplib2-0.22.0.tar.gz) = 25fabeef422b1f7cdc79960db93a2442d1281c310b1925
|
||||
SHA512 (uritemplate-3.0.1.tar.gz) = 260da5901d28ca2354d972e00ed468c9bcf2901f948cb7759ff3e9d3a7b67da90ba754e555d6695c5095801b106ffd422459f0860b901a75e01575e159eb8f48
|
||||
SHA512 (cachetools-5.3.2.tar.gz) = 1a6e32acefdd6165b3348dc32df300c5d3cd5bcff23c5f8eae5d7b6bc40a9aab7b5d6dee4bf23ebb49dea9a434570e854e24325028680a581f2b359d16e5d836
|
||||
SHA512 (googleapis-common-protos-1.62.0.tar.gz) = 13612ed20fdb0f7f1310a8c727d5b833286237f9470fd5b183a0a92463b043a7aa14b4e06188d8bd3e1aa9f1d6e468e96b06a448a8a76f85de3aea7d9bc734f0
|
||||
SHA512 (pyasn1_modules-0.3.0.tar.gz) = fedcf95e0452e133fc0735a1be29fb5e7df563243203463c66b85d9af6194a550c78a96fec2d915be1aa6b98428f51b6ed4feb7ed3838c515d044fbafeb2cb46
|
||||
SHA512 (pyasn1-0.6.3.tar.gz) = c58962b3f11f486da3e73c09dbe2aff7500879b29c4a7be4295878e4edbcaaa2680d608720ad5af86a2457de7da50471ab7a9e925f717db5c467553fc552e6d6
|
||||
SHA512 (pyasn1_modules-0.4.2.tar.gz) = 2128b6c45132a639894dc69413613bd0ab20ba7f929f1a0b190686a607c254315d320782c1527b7c3cc1f6cb30a18dd1bc864a29576d2fd7c6bf348966321dd5
|
||||
SHA512 (pyroute2-0.7.12.tar.gz) = 928e7f45569d43c1849d9c8d5972b38343ed8dd79137d6bfc757557d3bde23526af6baea61acc720b7e2d5d26731066b93f180138a6227b7d76d094e04111df7
|
||||
SHA512 (pyroute2.core-0.6.13.tar.gz) = 6b7472eb830f4b7f28dd5a9182300859440cefdd75cac2a88b9e15cfabb1d6edf7e2eb454fd50e985f6b6de16f076b59c227d0059448e6cf2ae41b1cc7133a1c
|
||||
SHA512 (pyroute2.ethtool-0.6.13.tar.gz) = 6abd1c529109ba330d11c213d22bd10a6aa34497d6f2db0064b14df4325196a057a45e5bc86ec14c9189107c6604aeb17f6b47053000bb53c51f84749cc362e3
|
||||
|
||||
Loading…
Reference in New Issue
Block a user