Backport upstream fix for CVE-2026-55995, a double-free
vulnerability in attrs.c. The patch sets freed pointers to
NULL in the error paths of isns_attr_type_string_decode and
isns_attr_type_opaque_decode to prevent double-free conditions
that could lead to denial of service.
CVE: CVE-2026-55995
Upstream patches:
- 56718d4e9d.patch
Resolves: RHEL-219462
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
add explicit requires for library subpackage (rpminspect)
fix test as installed changes, tests were failing to find the compiled
test binaries
update test metadata to tmt/fmf
do not run security tests, we stopped compiling with security support
Related: RHEL-219462
Signed-off-by: Chris Leech <cleech@redhat.com>
disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
Resolves: #1958038
Signed-off-by: Chris Leech <cleech@redhat.com>
