From 9a162b54d2907851bdd1be62481e123953abc48f Mon Sep 17 00:00:00 2001 From: eabdullin Date: Tue, 10 Feb 2026 06:43:08 +0000 Subject: [PATCH] import OL keylime-7.12.1-11.el10_1.4 --- 0015-CVE-2026-1709.patch | 20 ++++++++++++++++++++ keylime.spec | 8 +++++++- 2 files changed, 27 insertions(+), 1 deletion(-) create mode 100644 0015-CVE-2026-1709.patch diff --git a/0015-CVE-2026-1709.patch b/0015-CVE-2026-1709.patch new file mode 100644 index 0000000..b494256 --- /dev/null +++ b/0015-CVE-2026-1709.patch @@ -0,0 +1,20 @@ +diff --git a/keylime/web/base/server.py b/keylime/web/base/server.py +index 1d9a9c2..859b23a 100644 +--- a/keylime/web/base/server.py ++++ b/keylime/web/base/server.py +@@ -2,7 +2,6 @@ import asyncio + import multiprocessing + from abc import ABC, abstractmethod + from functools import wraps +-from ssl import CERT_OPTIONAL + from typing import TYPE_CHECKING, Any, Callable, Optional + + import tornado +@@ -252,7 +251,6 @@ class Server(ABC): + self._https_port = config.getint(component, "tls_port", fallback=0) + self._max_upload_size = config.getint(component, "max_upload_size", fallback=104857600) + self._ssl_ctx = web_util.init_mtls(component) +- self._ssl_ctx.verify_mode = CERT_OPTIONAL + + def _get(self, pattern: str, controller: type["Controller"], action: str, allow_insecure: bool = False) -> None: + """Creates a new route to handle incoming GET requests issued for paths which match the given diff --git a/keylime.spec b/keylime.spec index 88bb78b..f9b53a0 100644 --- a/keylime.spec +++ b/keylime.spec @@ -14,7 +14,7 @@ Name: keylime Version: 7.12.1 -Release: 11%{?dist}.3 +Release: 11%{?dist}.4 Summary: Open source TPM software for Bootstrapping and Maintaining Trust URL: https://github.com/keylime/keylime @@ -60,6 +60,9 @@ Patch: 0012-keylime-policy-avoid-opening-dev-stdout.patch Patch: 0013-Add-shared-memory-infrastructure-for-multiprocess-co.patch Patch: 0014-Fix-registrar-duplicate-UUID-vulnerability.patch +# CVE-2026-1709 +Patch: 0015-CVE-2026-1709.patch + # Main program: Apache-2.0 # Icons: MIT License: Apache-2.0 AND MIT @@ -477,6 +480,9 @@ fi %changelog ## START: Generated by rpmautospec +* Tue Feb 03 2026 Anderson Toshiyuki Sasaki - 7.12.1-16 +- CVE-2026-1709: Registrar authentication bypass + * Thu Dec 11 2025 Sergio Correia - 7.12.1-15 - Registrar allows identity takeover via duplicate UUID registration