oalbrigt
da0b6789d1
- Fix NVR
...
Resolves: RHEL-178594
2026-07-28 09:04:07 +02:00
RHEL Packaging Agent
1aeb5ce2a5
Fix bundled urllib3 CVE-2026-44431 in fence-agents
...
Backport upstream fix for CVE-2026-44431 (GHSA-qccp-gfcp-xxvc)
to the bundled urllib3 1.26.18 in fence-agents. The fix strips
sensitive headers (Authorization, Proxy-Authorization, Cookie)
when following redirects to a different host through proxy pools.
Two patches added following existing conventions:
- Patch1011 for kubevirt/urllib3 (all architectures)
- Patch2008 for aws/urllib3 and azure/urllib3 (x86_64 only)
CVE: CVE-2026-44431
Upstream patches:
- 5ec0de499b .patch
Resolves: RHEL-178594
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
2026-07-15 08:41:23 +00:00
Oyvind Albrigtsen
d02921fe39
- bundled httplib2: fix CVE-2026-59939
...
Resolves: RHEL-193803
2026-07-14 11:14:46 +02:00
Arslan Ahmad
a2ac39ae5a
- fence_openstack: fix list-action to avoid timeout when
...
there are 100+ VMs on the hypervisor
Resolves: RHEL-186317
2026-06-19 14:55:53 +05:30
Oyvind Albrigtsen
7d905bba04
- bundled cryptography: replace with dependency to fix CVE-2026-26007
...
- bundled PyJWT: replace with dependency to fix CVE-2026-32597
- bundled pyasn1: fix CVE-2026-30922
Resolves: RHEL-148431, RHEL-155670, RHEL-157189
2026-04-27 10:18:48 +02:00
Oyvind Albrigtsen
3206aa028c
- bundled urllib3: fix CVE-2025-66418, CVE-2025-66471, CVE-2026-21441,
...
and pyasn1 CVE-2026-23490 on all archs
Resolves: RHEL-148156
2026-02-11 12:57:10 +01:00
Oyvind Albrigtsen
e5144fbc70
- bundled urllib3: fix issue with CVE-2026-21441 patch
...
Resolves: RHEL-146288
2026-02-05 10:44:51 +01:00
Oyvind Albrigtsen
5354cffb63
- fence_ibm_vpc: fix missing statuses
...
Resolves: RHEL-145087
2026-01-29 11:18:22 +01:00
Oyvind Albrigtsen
c1d8b4594e
- bundled pyasn1: fix CVE-2026-23490
...
Resolves: RHEL-142447
2026-01-27 13:28:03 +01:00
Oyvind Albrigtsen
168ce3031a
- bundled urllib3: fix CVE-2025-66471
...
- bundled urllib3: fix CVE-2026-21441
Resolves: RHEL-139756, RHEL-140783
2026-01-20 11:02:36 +01:00
Oyvind Albrigtsen
0b85f6cd8a
- bundled urllib3: fix CVE-2025-66471
...
- bundled urllib3: fix CVE-2026-21441
Resolves: RHEL-139756, RHEL-140783
2026-01-16 13:30:25 +01:00
Oyvind Albrigtsen
9b4b0aac93
- bundled urllib3: fix CVE-2025-66471
...
- bundled urllib3: fix CVE-2026-21441
Resolves: RHEL-139756, RHEL-140783
2026-01-14 14:17:46 +01:00
Oyvind Albrigtsen
24b54bef7c
- bundled urllib3: fix CVE-2025-66418
...
Resolves: RHEL-136027
2026-01-06 09:54:09 +01:00
Oyvind Albrigtsen
0fb6608935
- fence_nutanix_ahv: new fence agent
...
Resolves: RHEL-110964
2025-11-03 13:11:24 +01:00
Oyvind Albrigtsen
890e1aa765
- fence_kubevirt: use hard poweroff
...
Resolves: RHEL-96179
2025-09-12 09:57:22 +02:00
Oyvind Albrigtsen
d96e9a88fd
- fence_aws: add skip_os_shutdown parameter
...
Resolves: RHEL-109814
2025-08-21 09:21:29 +02:00
Oyvind Albrigtsen
4d46b33394
- bundled requests: fix CVE-2024-47081
...
Resolves: RHEL-104741
2025-08-18 10:11:40 +02:00
Oyvind Albrigtsen
43708a522a
- fence_ibm_vpc: add apikey file support
...
Resolves: RHEL-107506
2025-08-12 15:41:09 +02:00
Oyvind Albrigtsen
13197d6073
- Revert "- fence_kubevirt: use hard poweroff"
...
Reverts: RHEL-96179
2025-08-05 09:46:37 +02:00
Oyvind Albrigtsen
d72be1e434
- fence_aliyun: add credentials file support
...
Resolves: RHEL-99338
2025-06-23 12:14:51 +02:00
Oyvind Albrigtsen
bb9ebd89b8
- fence_kubevirt: use hard poweroff
...
Resolves: RHEL-96179
2025-06-13 13:39:25 +02:00
Oyvind Albrigtsen
ff9079e863
- fence_ibm_powervs: add private endpoint and token file support
...
Resolves: RHEL-65025
2025-04-25 09:46:52 +02:00
Oyvind Albrigtsen
0677f63bac
- fence_azure_arm: fix MSI issue
...
Resolves: RHEL-76492
2025-01-30 15:34:13 +01:00
Oyvind Albrigtsen
7bcee5217a
- fence_azure_arm: use azure-identity instead of msrestazure, which has
...
been deprecated
Resolves: RHEL-76492
2025-01-29 09:42:01 +01:00
Oyvind Albrigtsen
66e91ae3f5
- fence_scsi: preempt clears all devices on the mpath device, so only
...
run it for the first device
Resolves: RHEL-56840
2024-09-24 11:59:33 +02:00
Oyvind Albrigtsen
f7f37faee7
- bundled setuptools: fix CVE-2024-6345
...
Resolves: RHEL-50223
2024-07-24 15:09:11 +02:00
Oyvind Albrigtsen
ab409ca678
- bundled urllib3: fix CVE-2024-37891
...
Resolves: RHEL-43568
2024-06-25 11:44:29 +02:00
Oyvind Albrigtsen
5a83386c35
- fence_eps: add fence_epsr2 for ePowerSwitch R2 and newer
...
Resolves: RHEL-7734
2024-05-30 10:22:10 +02:00
Oyvind Albrigtsen
5964adea8c
- fence_eps: add fence_epsr2 for ePowerSwitch R2 and newer
...
Resolves: RHEL-7734
- bundled jinja2: fix CVE-2024-34064
Resolves: RHEL-35655
2024-05-30 09:22:53 +02:00
Oyvind Albrigtsen
04d736fb67
- bundled urllib3: fix CVE-2023-45803
...
Resolves: RHEL-18132
- bundled pycryptodome: fix CVE-2023-52323
Resolves: RHEL-20915
- bundled jinja2: fix CVE-2024-22195
Resolves: RHEL-22174
2024-01-19 16:46:24 +01:00
Oyvind Albrigtsen
350e395199
- bundled urllib3: fix CVE-2023-45803
...
Resolves: RHEL-18132
- bundled pycryptodome: fix CVE-2023-52323
Resolves: RHEL-20915
2024-01-18 09:34:52 +01:00
Oyvind Albrigtsen
dd1654c7bd
- fence_scsi: fix registration handling if ISID conflicts
...
Resolves: RHEL-5397
- fence_zvmip: document required user permissions in metadata/manpage
Resolves: RHEL-14343
2024-01-03 14:18:19 +01:00
Oyvind Albrigtsen
381f73b986
- fence_scsi: fix registration handling if ISID conflicts
...
Resolves: RHEL-5397
2023-10-24 12:17:30 +02:00
Oyvind Albrigtsen
1fb091fbe0
- all agents: update metadata in non-I/O agents to Power or Network
...
fencing
Resolves: RHEL-14031
2023-10-23 11:40:38 +02:00
Oyvind Albrigtsen
c4856d5d50
- fence_zvmip: document required user permissions in metadata/manpage
...
Resolves: RHEL-14343
- all agents: update metadata in non-I/O agents to Power or Network
fencing
Resolves: RHEL-14031
2023-10-20 14:36:40 +02:00
Oyvind Albrigtsen
afa5fa38bc
- bundled urllib3: fix CVE-2023-43804
...
Resolves: RHEL-11988
2023-10-12 16:29:42 +02:00
Oyvind Albrigtsen
c708e005dc
- bundled certifi: fix CVE-2023-37920
...
Resolves: RHEL-6972
2023-09-26 16:53:55 +02:00
Oyvind Albrigtsen
f3489c3891
- bundled dateutil: fix tarfile CVE-2007-4559
...
Resolves: rhbz#2218234
2023-08-03 11:32:35 +02:00
Oyvind Albrigtsen
6ce82bf34c
- bundled dateutil: fix tarfile CVE-2007-4559
...
Resolves: rhbz#2218234
2023-07-20 15:07:28 +02:00
Oyvind Albrigtsen
8a918a13d7
- fence_ibm_powervs: performance improvements
...
Resolves: rhbz#2155453
2023-07-11 12:16:44 +02:00
Oyvind Albrigtsen
acc7086b1d
- fence_azure_arm: add Stack Hub support
...
Resolves: rhbz#2211460
2023-07-03 12:32:35 +02:00
Oyvind Albrigtsen
a3675e4fcd
- fence_azure_arm: add Stack Hub support
...
Resolves: rhbz#2211460
2023-06-20 16:17:53 +02:00
Oyvind Albrigtsen
370371f084
- fence_azure_arm: add Stack Hub support
...
Resolves: rhbz#2211460
2023-06-20 15:10:22 +02:00
Oyvind Albrigtsen
8175c20d4c
- fence_scsi: detect devices in shared VGs
...
Resolves: rhbz#2187329
2023-05-04 13:52:10 +02:00
Oyvind Albrigtsen
e795dfbd98
- fence_aws: add --skip-race-check parameter to allow running outside
...
of AWS network
Resolves: rhbz#2183158
2023-05-03 12:32:14 +02:00
Oyvind Albrigtsen
871c7791c6
- fence_scsi: detect devices in shared VGs
...
Resolves: rhbz#2187329
2023-04-20 12:01:48 +02:00
Oyvind Albrigtsen
8fdbde907e
- Add CI tests
...
- Update gitignore
2023-03-21 12:18:49 +01:00
Troy Dawson
5cbb9c28c0
Bring rpminspect.yaml over from Brew dist-git
...
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2023-03-10 10:36:31 -08:00
Troy Dawson
6371f86063
Bring gating.yaml over from Brew dist-git
...
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2023-03-10 10:36:31 -08:00
James Antill
61e385827d
Import rpm: c8s
2023-02-27 12:58:07 -05:00