rpms/pcp
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Fix gating QA tests for CVE-2026-16524 and CVE-2026-16529 on 6.3.7

Browse Source 
QA 2101 referenced undefined $seq_full on the 6.3.7 testsuite, and QA 2105
shipped an empty pdu-getpdu-overflow file so the integer overflow case was
never exercised.

Resolves: RHEL-213747 CVE-2026-16530
Resolves: RHEL-213736 CVE-2026-16529
Resolves: RHEL-213711 CVE-2026-16527
Resolves: RHEL-213687 CVE-2026-16526
Resolves: RHEL-213658 CVE-2026-16524
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Jan Kurik 2026-08-13 13:31:52 +02:00
parent 155730d82a
commit 211742c239
No known key found for this signature in database
3 changed files with 13 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pcp-RHEL-213658.patch
View File

@ -31,7 +31,7 @@ new file mode 100755
index 0000000000..733b7f70c9
--- /dev/null
+++ b/qa/2101
@@ -0,0 +1,70 @@
@@ -0,0 +1,69 @@
+#!/bin/sh
+# PCP QA Test No. 2101
+# Verify linux_sockets PMDA filter validation rejects shell metacharacters
@ -68,7 +68,6 @@ index 0000000000..733b7f70c9
+cd $PCP_PMDAS_DIR/sockets
+$sudo ./Remove >/dev/null 2>&1
+$sudo ./Install </dev/null >$tmp.out 2>&1
+cat $tmp.out >>$seq_full
+
+# check the PMDA is alive
+pmprobe -v network.persocket.filter >$tmp.probe 2>&1

8
pcp-RHEL-213736.patch
View File

@ -32,7 +32,7 @@ new file mode 100755
index 0000000000..44b849ad39
--- /dev/null
+++ b/qa/2105
@@ -0,0 +1,17 @@
@@ -0,0 +1,20 @@
+#!/bin/sh
+# PCP QA Test No. 2105
+# Verify __pmGetPDU rejects PDU with len near INT_MAX
@ -44,6 +44,9 @@ index 0000000000..44b849ad39
+seq=`basename $0`
+echo "QA output created by $seq"
+
+mkdir -p pdudata
+printf '\177\377\377\377\000\000\200\000' >pdudata/pdu-getpdu-overflow
+
+pdu_data=pdudata/pdu-getpdu-overflow
+grep_pattern="bad PDU len=.*exceeds maximum|PDU len=.*too large"
+
@ -104,9 +107,6 @@ index d4da513ce2..80a861c5f6 100644
1992 pmda.uwsgi local
+2105 libpcp local security
4751 libpcp threads valgrind local pcp helgrind
diff --git a/qa/pdudata/pdu-getpdu-overflow b/qa/pdudata/pdu-getpdu-overflow
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/src/libpcp/src/pdu.c b/src/libpcp/src/pdu.c
index 5845932be1..0a4ae75b25 100644
--- a/src/libpcp/src/pdu.c

9
pcp.spec
View File

@ -1,6 +1,6 @@
Name: pcp
Version: 6.3.7
Release: 12%{?dist}
Release: 13%{?dist}
Summary: System-level performance monitoring and performance management
License: GPL-2.0-or-later AND LGPL-2.1-or-later AND CC-BY-3.0
URL: https://pcp.io
@ -3665,6 +3665,13 @@ fi
%files zeroconf -f pcp-zeroconf-files.rpm
%changelog
* Thu Aug 13 2026 Jan Kurik <jkurik@redhat.com> - 6.3.7-13
- Fix qa/2101 to stop using undefined $seq_full on PCP 6.3.7
- Fix qa/2105 to ship malformed PDU test data for CVE-2026-16529
* Thu Aug 13 2026 Jan Kurik <jkurik@redhat.com> - 6.3.7-12
- Fix pcp-RHEL-213736.patch to stop deleting stray .orig backup files
* Thu Aug 13 2026 Jan Kurik <jkurik@redhat.com> - 6.3.7-11
- Backport PCP security CVE fixes for RHEL 9.9
- Fix integer overflow in __pmGetPDU() (CVE-2026-16529)