Commit Graph

219 Commits

Author SHA1 Message Date
RHEL Packaging Agent
fb919d63be Fix CVE-2026-47783: SASL timing side-channel in memcached
Backport upstream commit d13f282b4bce to fix CVE-2026-47783,
a timing side-channel vulnerability in SASL password database
authentication. The patch uses constant-time safe_memcmp() for
username and password comparisons, zero-fills the buffer before
each fgets call, and removes the early break to ensure the
entire password file is always scanned, eliminating measurable
timing differences between valid and invalid usernames.

CVE: CVE-2026-47783
Upstream patches:
 - d13f282b4b.patch
Resolves: RHEL-179085

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-14 13:28:26 +00:00
psklenar@redhat.com
a1f571fafa https://issues.redhat.com/browse/RHELMISC-13073 2025-06-05 12:18:31 +02:00
Troy Dawson
ccccbe41f1 Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018
2024-10-29 08:49:01 -07:00
Tomas Korbar
f87092433f Stop verifying active selinux module 2024-08-07 14:46:58 +02:00
Tomas Korbar
8a53f2f7bd Remove obsolete tests 2024-08-07 13:02:08 +02:00
Troy Dawson
850feddfaa Bump release for June 2024 mass rebuild 2024-06-24 09:02:38 -07:00
Ondrej Mejzlik
eb0c2f8c61 update plans 2024-06-19 19:57:06 +02:00
Tomas Korbar
3f278b337f Fix License tags to conform with SPDX 2024-05-28 14:43:32 +02:00
Fedora Release Engineering
dc837c7555 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-25 06:11:03 +00:00
Tomas Korbar
e01dc20376 Update to 1.6.23
Resolves: rhbz#2257644
2024-01-20 17:04:38 +01:00
Tomas Korbar
705ec6f9aa Update license tag to fully conform to SPDX 2023-10-31 15:53:39 +01:00
Tomas Korbar
c7acf21cfe Fix changelog 2023-10-25 10:39:06 +02:00
Tomas Korbar
4931ef20ad Update to 1.6.22
Resolves: rhbz#2244603
2023-10-25 10:37:08 +02:00
Fedora Release Engineering
1ca3cce6c4 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-20 14:13:21 +00:00
Tomas Korbar
fdc5d9787f Update to 1.6.21
Resolves: rhbz#2215568
2023-06-19 10:21:18 +02:00
Tomas Korbar
77f9b8d4ea Update to 1.6.20
Resolves: rhbz#2203537
2023-05-15 13:14:37 +02:00
Tomas Korbar
f5f35c6cdb Change the License tag to the SPDX format 2023-03-11 18:16:30 +01:00
Tomas Korbar
2c2ac24a89 Upload sources for 1.6.19 2023-03-09 10:36:29 +01:00
Tomas Korbar
1466737ceb Update to 1.6.19
Resolves: rhbz#2176684
2023-03-09 10:35:35 +01:00
Fedora Release Engineering
d75778b1cd Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-19 19:21:05 +00:00
Tomas Korbar
bc6d19fe97 Fix sources 2023-01-12 16:09:58 +01:00
Tomas Korbar
8d8cd12d3c Update to 1.6.18
Resolves: rhbz#2160271
2023-01-12 16:08:36 +01:00
Tomas Korbar
b3121405ae Update to 1.6.17
Resolves: rhbz#2121978
2022-08-30 15:24:29 +02:00
Tomas Korbar
3761468f6b Update to 1.6.16
Resolves: rhbz#2115502
2022-08-09 17:56:02 +02:00
Fedora Release Engineering
5600279871 Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-21 20:55:14 +00:00
Tomas Korbar
c9c4ac153e Resolves: rhbz#2096850 2022-06-14 15:56:05 +02:00
Tomas Korbar
cc86f0ffb9 Update to 1.6.15
Resolves: rhbz#2070493
2022-04-08 13:22:55 +02:00
Tomas Korbar
6e5b0d6ebe Update to 1.6.14
Resolves: rhbz#2053327
2022-02-15 14:04:51 +01:00
Tomas Korbar
6cf28ae350 Fix complete_incr_bin function
Resolves: rhbz#2046734
2022-01-28 17:38:43 +01:00
Fedora Release Engineering
56cb123c23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-20 19:04:20 +00:00
Tomas Korbar
df378140ed Update to 1.6.13
Resolves: rhbz#2040188
2022-01-14 13:46:22 +01:00
Tomas Korbar
fc0ea6d1b2 Update to 1.6.12 2021-09-29 14:36:20 +02:00
Sahana Prasad
4e0a727c5a Rebuilt with OpenSSL 3.0.0 2021-09-14 19:07:47 +02:00
Tomas Korbar
ea494bacf9 Update to 1.6.10
Resolves: rhbz#1985842
2021-07-27 08:54:44 +02:00
Fedora Release Engineering
9a4a16eda4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-22 14:07:17 +00:00
Zbigniew Jędrzejewski-Szmek
820be2e632 Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
2021-03-02 16:13:26 +01:00
Fedora Release Engineering
15ff09546d - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-26 19:37:25 +00:00
Tomas Korbar
20d4c2fb45 Enable sasl pwdb
Resolves: rhbz#1909724
2021-01-25 08:40:22 +01:00
Tom Stellard
5c794ee5a9 Add BuildRequires: make
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
2021-01-06 21:39:55 +00:00
Tomas Korbar
ff11642f19 Enable gating 2020-12-16 09:42:46 +01:00
Tomas Korbar
e44c3da949 Update to 1.6.9
Resolves: rhbz#1900201
2020-11-24 08:45:53 +01:00
Tomas Korbar
09cbf5c1a0 Update to 1.6.8
Resolves: rhbz#1892111
2020-10-29 09:06:01 +01:00
Tomas Korbar
849a1993ef Rebuilt with libevent-2.1.12 2020-09-15 12:15:35 +02:00
Tomas Korbar
f0c17eed37 Update to 1.6.7
Resolves: rhbz#1876029
2020-09-07 08:20:16 +02:00
Tomas Korbar
6e70f59bda Resolve FTBFS
Resolves: rhbz#1863678
2020-08-04 13:44:55 +02:00
Fedora Release Engineering
40d1e1f90d - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-08-01 04:26:26 +00:00
Fedora Release Engineering
1fdf380327 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-28 07:15:11 +00:00
Tomas Korbar
aa828faa53 Enable gating 2020-06-30 12:36:16 +02:00
Tomas Korbar
b49815b906 Add configuration for tests 2020-06-30 10:23:21 +02:00
Tomas Korbar
50676cd976 Enable testing of memcached in Fedora 2020-06-30 09:29:07 +02:00