rpms/pcp
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Fix GNUlocaldefs in CVE-2026-16526 and timezone patches

Browse Source 
The CVE-2026-16526 patch incorrectly replaced qa/src/GNUlocaldefs with
the upstream secure branch version, referencing files missing from pcp
7.1.5 and breaking the qa/src build. Restore minimal 7.1.5 backport
changes and fix the timezone patch GNUlocaldefs context accordingly.

Resolves: RHEL-213756 CVE-2026-16531
Resolves: RHEL-213746 CVE-2026-16530
Resolves: RHEL-213726 CVE-2026-16529
Resolves: RHEL-213717 CVE-2026-16527
Resolves: RHEL-213692 CVE-2026-16526
Resolves: RHEL-213661 CVE-2026-16524
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Jan Kurik 2026-08-12 12:35:51 +02:00
parent 4d55c1806b
commit 1cb0a1f2ab
No known key found for this signature in database
2 changed files with 15 additions and 1504 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1502
pcp-7.1.5-CVE-2026-16526.patch
View File

File diff suppressed because it is too large Load Diff

17
pcp-7.1.5-timezone-zoneinfo-validation.patch
View File

@ -131,19 +131,19 @@ index 16c5aa35e3..1103b1f526 100644
4751 libpcp threads valgrind local pcp helgrind
9000 other local
diff --git a/qa/src/GNUlocaldefs b/qa/src/GNUlocaldefs
index 2009bd65b0..1d2fa9982b 100644
index 937d263893..a656058115 100644
--- a/qa/src/GNUlocaldefs
+++ b/qa/src/GNUlocaldefs
@@ -63,7 +63,7 @@ CFILES = disk_test.c exercise.c context_test.c chkoptfetch.c \
multithread8.c multithread9.c multithread10.c multithread11.c \
multithread12.c multithread13.c multithread14.c \
exerlock.c hashwalk.c parsehostattrs.c parsehostspec.c getoptions.c \
@@ -57,7 +57,7 @@ CFILES = disk_test.c exercise.c context_test.c chkoptfetch.c \
strnfoo.c mmv_ondisk.c newcontext.c api_abi.c interp_bug3.c \
pmsetmode.c scanindex.c localtime.c httpcache.c unregister.c \
genpmns.c undelta.c series_time_parse_test.c derived_control.c \
- check_cloexec.c
+ check_cloexec.c check_tz.c
ifeq ($(shell test -f ../localconfig && echo 1), 1)
@@ -1399,6 +1399,11 @@ check_cloexec: check_cloexec.c
include ../localconfig
@@ -660,6 +660,11 @@ check_cloexec: check_cloexec.c
$(CCF) $(CDEFS) -o $@ $@.c $(LDLIBS)
$(LINKER_MAKERULE)
@ -154,7 +154,8 @@ index 2009bd65b0..1d2fa9982b 100644
+
check_import: check_import.c
rm -f $@
$(CCF) $(CDEFS) -o $@ $@.c $(LDLIBS) -lpcp_archive -lpcp_import
$(CCF) $(CDEFS) -o $@ $@.c $(LDLIBS) -lpcp_import
diff --git a/qa/src/check_tz.c b/qa/src/check_tz.c
new file mode 100644
index 0000000000..ad96444f9c