diff --git a/fence-agents.spec b/fence-agents.spec index 091b226..8d8b614 100644 --- a/fence-agents.spec +++ b/fence-agents.spec @@ -13,7 +13,7 @@ Name: fence-agents Summary: Set of unified programs capable of host isolation ("fencing") Version: 4.16.0 -Release: 21%{?alphatag:.%{alphatag}}%{?dist} +Release: 22%{?alphatag:.%{alphatag}}%{?dist} License: GPL-2.0-or-later AND LGPL-2.0-or-later URL: https://github.com/ClusterLabs/fence-agents Source0: https://fedorahosted.org/releases/f/e/fence-agents/%{name}-%{version}.tar.gz @@ -28,7 +28,7 @@ Source104: requirements-google.txt ## pip download --no-binary :all: -r requirements-.txt # common Source1000: pycurl-7.45.3.tar.gz -Source1001: suds-community-1.1.2.tar.gz +Source1001: suds_community-1.2.0.tar.gz # aliyun Source1100: aliyun-python-sdk-ecs-4.24.71.tar.gz Source1101: aliyun-python-sdk-core-2.14.0.tar.gz @@ -62,7 +62,9 @@ Source1310: adal-1.2.7.tar.gz Source1311: certifi-2025.1.31.tar.gz Source1312: isodate-0.6.1.tar.gz Source1313: portalocker-2.10.1.tar.gz -Source1314: pyjwt-2.10.1.tar.gz +Source1314: pyjwt-2.12.1.tar.gz +## azure buildreq +Source1315: setuptools-82.0.1.tar.gz # google Source1400: google-api-python-client-1.12.8.tar.gz Source1401: chardet-3.0.4.tar.gz @@ -73,8 +75,8 @@ Source1405: httplib2-0.22.0.tar.gz Source1406: uritemplate-3.0.1.tar.gz Source1407: cachetools-5.3.2.tar.gz Source1408: googleapis-common-protos-1.62.0.tar.gz -Source1409: pyasn1-0.5.1.tar.gz -Source1410: pyasn1_modules-0.3.0.tar.gz +Source1409: pyasn1-0.6.3.tar.gz +Source1410: pyasn1_modules-0.4.2.tar.gz Source1411: pyroute2-0.7.12.tar.gz Source1412: pyroute2.core-0.6.13.tar.gz Source1413: pyroute2.ethtool-0.6.13.tar.gz @@ -119,12 +121,6 @@ Patch18: RHEL-128925-fence_gce-fix-node-list-limit.patch Patch19: RHEL-125959-fence_virt-print-errors-to-stderr.patch Patch20: RHEL-145086-fence_ibm_vpc-fix-missing-statuses.patch -### HA support libs/utils ### -# all archs -Patch1000: RHEL-142445-1-kubevirt-fix-bundled-pyasn1-CVE-2026-23490.patch -# cloud (x86_64 only) -Patch2000: RHEL-142445-2-google-fix-bundled-pyasn1-CVE-2026-23490.patch - %global supportedagents amt_ws apc apc_snmp bladecenter brocade cisco_mds cisco_ucs drac5 eaton_snmp emerson eps hpblade ibmblade ibm_powervs ibm_vpc ifmib ilo ilo_moonshot ilo_mp ilo_ssh intelmodular ipdu ipmilan kdump kubevirt lpar mpath nutanix_ahv redfish rhevm rsa rsb sbd scsi vmware_rest vmware_soap wti %ifarch x86_64 %global testagents virsh heuristics_ping aliyun aws azure_arm gce openstack virt @@ -281,7 +277,8 @@ popd %endif # support libs -%{__python3} -m pip install --no-build-isolation --user --no-index --find-links %{_sourcedir} poetry-core +## setuptools upgrade needed due to old dual license format not working with the distro provided version +%{__python3} -m pip install --no-build-isolation --user --upgrade --no-index --find-links %{_sourcedir} poetry-core setuptools %ifarch x86_64 LIBS="%{_sourcedir}/requirements-*.txt" @@ -306,15 +303,6 @@ done sed -i -e "s/#PYTHON3_VERSION#/%{python3_version}/" lib/*.py agents/*/*.py -# regular patch doesnt work in build-section -sed -i -e "s/#PYTHON3_VERSION#/%{python3_version}/" %{PATCH1000} %{PATCH2000} -pushd support -/usr/bin/patch --no-backup-if-mismatch -p1 --fuzz=2 < %{PATCH1000} -%ifarch x86_64 -/usr/bin/patch --no-backup-if-mismatch -p1 --fuzz=2 < %{PATCH2000} -%endif -popd - export PYTHONPATH="%{_builddir}/%{name}-%{version}/support/common/lib/python%{python3_version}/site-packages:%{_builddir}/%{name}-%{version}/support/common/lib64/python%{python3_version}/site-packages:%{_builddir}/%{name}-%{version}/support/aliyun/lib/python%{python3_version}/site-packages:%{_builddir}/%{name}-%{version}/support/aws/lib/python%{python3_version}/site-packages:%{_builddir}/%{name}-%{version}/support/azure/lib/python%{python3_version}/site-packages:%{_builddir}/%{name}-%{version}/support/google/lib/python%{python3_version}/site-packages:%{_builddir}/%{name}-%{version}/support/kubevirt/lib/python%{python3_version}/site-packages:%{_builddir}/%{name}-%{version}/support/kubevirt/lib64/python%{python3_version}/site-packages" ./autogen.sh %{configure} \ @@ -396,7 +384,7 @@ License: GPL-2.0-or-later AND LGPL-2.0-or-later AND LGPL-3.0-or-later AND LGPL-2 Summary: Common base for Fence Agents Requires: python3-pexpect python3-ptyprocess Provides: bundled(python3-pycurl) = 7.45.3 -Provides: bundled(python3-suds-community) = 1.1.2 +Provides: bundled(python3-suds-community) = 1.2.0 %description common A collection of executables to handle isolation ("fencing") of possibly misbehaving hosts by the means of remote power management, blocking @@ -457,7 +445,7 @@ Provides: bundled(python3-adal) = 1.2.7 Provides: bundled(python3-certifi) = 2025.1.31 Provides: bundled(python3-isodate) = 0.6.1 Provides: bundled(python3-portalocker) = 2.10.1 -Provides: bundled(python3-PyJWT) = 2.10.1 +Provides: bundled(python3-PyJWT) = 2.12.1 # google Provides: bundled(python3-google-api-python-client) = 1.12.8 Provides: bundled(python3-chardet) = 3.0.4 @@ -468,8 +456,8 @@ Provides: bundled(python3-httplib2) = 0.22.0 Provides: bundled(python3-uritemplate) = 3.0.1 Provides: bundled(python3-cachetools) = 5.3.2 Provides: bundled(python3-googleapis-common-protos) = 1.62.0 -Provides: bundled(python3-pyasn1) = 0.5.1 -Provides: bundled(python3-pyasn1_modules) = 0.3.0 +Provides: bundled(python3-pyasn1) = 0.6.3 +Provides: bundled(python3-pyasn1_modules) = 0.4.2 Provides: bundled(python-pyroute2) = 0.7.12 Provides: bundled(python-pyroute2-core) = 0.6.13 Provides: bundled(python-pyroute2-ethtool) = 0.6.13 @@ -1234,6 +1222,11 @@ are located on corosync cluster nodes. %endif %changelog +* Fri Apr 24 2026 Oyvind Albrigtsen - 4.16.0-22 +- bundled pyasn1: upgrade to v0.6.3 to fix CVE-2026-30922 +- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 + Resolves: RHEL-157188, RHEL-155669 + * Mon Feb 16 2026 Oyvind Albrigtsen - 4.16.0-21 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 diff --git a/sources b/sources index 6c1238e..dd761be 100644 --- a/sources +++ b/sources @@ -5,7 +5,7 @@ SHA512 (requirements-aws.txt) = ca39604d09f4b05589ddaa437be13b7f5d1868218745df10 SHA512 (requirements-azure.txt) = 8071c96bb3e2b82852b10fd68b77b69a7fce6153ab315298ceb07456fe66f3aca056d3273f11eb87ff30049759e8b4fddf62e39acb91953d36e933e44dce8c9b SHA512 (requirements-google.txt) = d916eb72588e55f5243b9e5391ab07d65eaafe583e073ef79d0e865f4c5e911d7b10310f7ccb98b5fdc1383c2214cc0cc082fa3c5fac6aa3d1931e4779149241 SHA512 (pycurl-7.45.3.tar.gz) = 12a55070602a1fd22b160ad582a4001bdd28531d2b2ccd365ff0136bc13dd23af80b19488bdbbc60a902a3a362b64383b9ae6acce6ed328c74dcffc8a6a3f4ad -SHA512 (suds-community-1.1.2.tar.gz) = 9f26ebbf36fcbd915281f3c3afd4ea776ca409ede4ba9e487b746ef4e527171ee2fdb44075100d52b5bba0658fafec817eea2cbf64b8d2851bdc974aee430d57 +SHA512 (suds_community-1.2.0.tar.gz) = 8955ad288fbd9d472b8aa4b4a016da66616436bb41b44d7935f4c14ae897c127e0d6c14457f2303ead671f92edc51454701c9658aec32f6af44882526ed86aeb SHA512 (aliyun-python-sdk-ecs-4.24.71.tar.gz) = 53fad1945f920121b6ea61ea522a8774b1ff46bf940892419887b67566a7a94da8c911a1ebb96ebf00e61ac97d09d61ca48f903d353afd5bc97fda1e4a98c2e9 SHA512 (aliyun-python-sdk-core-2.14.0.tar.gz) = a1c8668980fd5db2401228d7853686fefd2ec6e489f6633bf62650258bfbadc9f693053cb154ebcbfcb1112f2efdda2c40f5ff39413d4ca76fbfead457183aa3 SHA512 (jmespath-0.10.0.tar.gz) = 9e229b5809d2dd74eb7dbf518953f848175743fb0ee91ffc901777be2f4809cc0c4f4ba40890746533e344f64e900ec189d6a8c847c864fa47fbf67e5106a7bc @@ -29,8 +29,8 @@ SHA512 (adal-1.2.7.tar.gz) = b46dd3ebb72123e9c2d2eb75eae17b1175f09908b4443013125 SHA512 (certifi-2025.1.31.tar.gz) = 0923260200cb191ca10e9cfc7114a399f0dc87c7acbb833f950abaa6d4876805abe12838194809689f92424dd65e6e79f955f114b0acb00f8bd28e04a97ef555 SHA512 (isodate-0.6.1.tar.gz) = 437e420ec7ee68dedded825f30d3289eeb0da526208443e5a8e50fe70f12309515e1285b21132d26e6d4c1683f90dfa1d401582042b5e4381fe7ab0e34af26b6 SHA512 (portalocker-2.10.1.tar.gz) = 417d2b59c3cde6968b583d3e86153b85048354c9eb02fbd329a4d79b17abb47f3a07fe88af6b290d50111bb8534c8b2997633a93914e602c9312d4395af7407c -SHA512 (pyasn1-0.5.1.tar.gz) = 19478d810d000fb4435f6a1776f290b1618a693539ff8ffad8c41f9ac316938f1c0ae988db8571a838443407d312b5566887e20284a779ccf427888739f13833 -SHA512 (pyjwt-2.10.1.tar.gz) = 2ae530750b59ef692ab31bf8bf3506e553b0199f346ddd06afed12304683f254cc924ff7190c5c911af72237dd794c345097de306e79e0fbcfb59958cb8cfbe5 +SHA512 (pyjwt-2.12.1.tar.gz) = ad1e925b9aa39017bd83863233b39de06a919daed664d5835e58def47f6fb4435fab057a37a5fa8a7543f691f5fc9f82e6d879ef0ad60960f982a214b305078a +SHA512 (setuptools-82.0.1.tar.gz) = 5d70e9efd818245fb8119a4eed64d776078469ed884facc188f141ea491efd9fde5c10c928d3236ea5e2e431b16616f18ed14870b867f95e6320251707332395 SHA512 (google-api-python-client-1.12.8.tar.gz) = e6aafb165d12c0f38b26326320f6f4dfebd4eef8401cda0a915fbf04bfff91e39cc4572979324808a71b863711b4fab2a9b397da9f933fb12867e8453e17354f SHA512 (chardet-3.0.4.tar.gz) = 61a03b23447a2bfe52ceed4dd1b9afdb5784da1933a623776883ee9f297e341f633e27f0ce0230bd5fdc5fdb5382105ab42736a74a417ddeb9f83af57455dba5 SHA512 (google-api-core-1.34.1.tar.gz) = 3714ec8e380003da8cecd5a0de832027b2ca6564bc407cce5b5fc8780fde294141bf6313c7335e54cb8b3ed5af7a53547641c1216529a636104a19fceac668f4 @@ -40,7 +40,8 @@ SHA512 (httplib2-0.22.0.tar.gz) = 25fabeef422b1f7cdc79960db93a2442d1281c310b1925 SHA512 (uritemplate-3.0.1.tar.gz) = 260da5901d28ca2354d972e00ed468c9bcf2901f948cb7759ff3e9d3a7b67da90ba754e555d6695c5095801b106ffd422459f0860b901a75e01575e159eb8f48 SHA512 (cachetools-5.3.2.tar.gz) = 1a6e32acefdd6165b3348dc32df300c5d3cd5bcff23c5f8eae5d7b6bc40a9aab7b5d6dee4bf23ebb49dea9a434570e854e24325028680a581f2b359d16e5d836 SHA512 (googleapis-common-protos-1.62.0.tar.gz) = 13612ed20fdb0f7f1310a8c727d5b833286237f9470fd5b183a0a92463b043a7aa14b4e06188d8bd3e1aa9f1d6e468e96b06a448a8a76f85de3aea7d9bc734f0 -SHA512 (pyasn1_modules-0.3.0.tar.gz) = fedcf95e0452e133fc0735a1be29fb5e7df563243203463c66b85d9af6194a550c78a96fec2d915be1aa6b98428f51b6ed4feb7ed3838c515d044fbafeb2cb46 +SHA512 (pyasn1-0.6.3.tar.gz) = c58962b3f11f486da3e73c09dbe2aff7500879b29c4a7be4295878e4edbcaaa2680d608720ad5af86a2457de7da50471ab7a9e925f717db5c467553fc552e6d6 +SHA512 (pyasn1_modules-0.4.2.tar.gz) = 2128b6c45132a639894dc69413613bd0ab20ba7f929f1a0b190686a607c254315d320782c1527b7c3cc1f6cb30a18dd1bc864a29576d2fd7c6bf348966321dd5 SHA512 (pyroute2-0.7.12.tar.gz) = 928e7f45569d43c1849d9c8d5972b38343ed8dd79137d6bfc757557d3bde23526af6baea61acc720b7e2d5d26731066b93f180138a6227b7d76d094e04111df7 SHA512 (pyroute2.core-0.6.13.tar.gz) = 6b7472eb830f4b7f28dd5a9182300859440cefdd75cac2a88b9e15cfabb1d6edf7e2eb454fd50e985f6b6de16f076b59c227d0059448e6cf2ae41b1cc7133a1c SHA512 (pyroute2.ethtool-0.6.13.tar.gz) = 6abd1c529109ba330d11c213d22bd10a6aa34497d6f2db0064b14df4325196a057a45e5bc86ec14c9189107c6604aeb17f6b47053000bb53c51f84749cc362e3