From 211742c2398ee9b781445321c4fb9d80bebab5d8 Mon Sep 17 00:00:00 2001 From: Jan Kurik Date: Thu, 13 Aug 2026 13:31:52 +0200 Subject: [PATCH] Fix gating QA tests for CVE-2026-16524 and CVE-2026-16529 on 6.3.7 QA 2101 referenced undefined $seq_full on the 6.3.7 testsuite, and QA 2105 shipped an empty pdu-getpdu-overflow file so the integer overflow case was never exercised. Resolves: RHEL-213747 CVE-2026-16530 Resolves: RHEL-213736 CVE-2026-16529 Resolves: RHEL-213711 CVE-2026-16527 Resolves: RHEL-213687 CVE-2026-16526 Resolves: RHEL-213658 CVE-2026-16524 Co-authored-by: Cursor --- pcp-RHEL-213658.patch | 3 +-- pcp-RHEL-213736.patch | 8 ++++---- pcp.spec | 9 ++++++++- 3 files changed, 13 insertions(+), 7 deletions(-) diff --git a/pcp-RHEL-213658.patch b/pcp-RHEL-213658.patch index 388b7fe..cf1360c 100644 --- a/pcp-RHEL-213658.patch +++ b/pcp-RHEL-213658.patch @@ -31,7 +31,7 @@ new file mode 100755 index 0000000000..733b7f70c9 --- /dev/null +++ b/qa/2101 -@@ -0,0 +1,70 @@ +@@ -0,0 +1,69 @@ +#!/bin/sh +# PCP QA Test No. 2101 +# Verify linux_sockets PMDA filter validation rejects shell metacharacters @@ -68,7 +68,6 @@ index 0000000000..733b7f70c9 +cd $PCP_PMDAS_DIR/sockets +$sudo ./Remove >/dev/null 2>&1 +$sudo ./Install $tmp.out 2>&1 -+cat $tmp.out >>$seq_full + +# check the PMDA is alive +pmprobe -v network.persocket.filter >$tmp.probe 2>&1 diff --git a/pcp-RHEL-213736.patch b/pcp-RHEL-213736.patch index 910dbc0..b4862c5 100644 --- a/pcp-RHEL-213736.patch +++ b/pcp-RHEL-213736.patch @@ -32,7 +32,7 @@ new file mode 100755 index 0000000000..44b849ad39 --- /dev/null +++ b/qa/2105 -@@ -0,0 +1,17 @@ +@@ -0,0 +1,20 @@ +#!/bin/sh +# PCP QA Test No. 2105 +# Verify __pmGetPDU rejects PDU with len near INT_MAX @@ -44,6 +44,9 @@ index 0000000000..44b849ad39 +seq=`basename $0` +echo "QA output created by $seq" + ++mkdir -p pdudata ++printf '\177\377\377\377\000\000\200\000' >pdudata/pdu-getpdu-overflow ++ +pdu_data=pdudata/pdu-getpdu-overflow +grep_pattern="bad PDU len=.*exceeds maximum|PDU len=.*too large" + @@ -104,9 +107,6 @@ index d4da513ce2..80a861c5f6 100644 1992 pmda.uwsgi local +2105 libpcp local security 4751 libpcp threads valgrind local pcp helgrind -diff --git a/qa/pdudata/pdu-getpdu-overflow b/qa/pdudata/pdu-getpdu-overflow -new file mode 100644 -index 0000000000..e69de29bb2 diff --git a/src/libpcp/src/pdu.c b/src/libpcp/src/pdu.c index 5845932be1..0a4ae75b25 100644 --- a/src/libpcp/src/pdu.c diff --git a/pcp.spec b/pcp.spec index e153b3a..f14aaea 100644 --- a/pcp.spec +++ b/pcp.spec @@ -1,6 +1,6 @@ Name: pcp Version: 6.3.7 -Release: 12%{?dist} +Release: 13%{?dist} Summary: System-level performance monitoring and performance management License: GPL-2.0-or-later AND LGPL-2.1-or-later AND CC-BY-3.0 URL: https://pcp.io @@ -3665,6 +3665,13 @@ fi %files zeroconf -f pcp-zeroconf-files.rpm %changelog +* Thu Aug 13 2026 Jan Kurik - 6.3.7-13 +- Fix qa/2101 to stop using undefined $seq_full on PCP 6.3.7 +- Fix qa/2105 to ship malformed PDU test data for CVE-2026-16529 + +* Thu Aug 13 2026 Jan Kurik - 6.3.7-12 +- Fix pcp-RHEL-213736.patch to stop deleting stray .orig backup files + * Thu Aug 13 2026 Jan Kurik - 6.3.7-11 - Backport PCP security CVE fixes for RHEL 9.9 - Fix integer overflow in __pmGetPDU() (CVE-2026-16529)