Jan Kurik
1cb0a1f2ab
Fix GNUlocaldefs in CVE-2026-16526 and timezone patches
...
The CVE-2026-16526 patch incorrectly replaced qa/src/GNUlocaldefs with
the upstream secure branch version, referencing files missing from pcp
7.1.5 and breaking the qa/src build. Restore minimal 7.1.5 backport
changes and fix the timezone patch GNUlocaldefs context accordingly.
Resolves: RHEL-213756 CVE-2026-16531
Resolves: RHEL-213746 CVE-2026-16530
Resolves: RHEL-213726 CVE-2026-16529
Resolves: RHEL-213717 CVE-2026-16527
Resolves: RHEL-213692 CVE-2026-16526
Resolves: RHEL-213661 CVE-2026-16524
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-12 12:35:51 +02:00
Jan Kurik
4d55c1806b
Backport remaining private-pcp security hardening fixes for 7.1.5-6
...
Add patches for pmieconf/pmlogmv command injection, libpcp PDU decode
OOB guards, timezone validation, pmdaroot peer credentials, and pmproxy
REST CERT_REQD and logger authentication hardening.
Resolves: RHEL-213756 CVE-2026-16531
Resolves: RHEL-213746 CVE-2026-16530
Resolves: RHEL-213726 CVE-2026-16529
Resolves: RHEL-213717 CVE-2026-16527
Resolves: RHEL-213692 CVE-2026-16526
Resolves: RHEL-213661 CVE-2026-16524
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-12 12:10:43 +02:00
Jan Kurik
54531fc403
Backport remaining PCP security CVE fixes for 7.1.5-5
...
Add patches for CVE-2026-16524, CVE-2026-16526, CVE-2026-16527, and
CVE-2026-16529 so all TIM security fixes tracked for RHEL 10.3 are
present alongside the previously shipped CVE-2026-16530/16531 fixes.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-12 11:57:52 +02:00
RHEL Packaging Agent
3168b52f62
Fix CVE-2026-16531: path traversal via hostname in pmproxy
...
Backport upstream commit dd6ed05f to fix a path traversal
vulnerability (CVE-2026-16531, CWE-22) in the pmproxy logger
servlet. The hostname field from a __pmLogLabel PDU was used
directly in path construction without sanitization, allowing
creation of files at arbitrary paths. The fix adds a
check_hostname() function that validates hostnames against an
allowlist of alphanumeric characters, hyphens, dots, and
underscores (per RFC 952/1123), rejecting invalid hostnames
with -EINVAL before any path construction occurs.
CVE: CVE-2026-16531
Upstream patches:
- dd6ed05f14
2026-07-30 12:41:07 +00:00
RHEL Packaging Agent
5d3ebc9889
Fix CVE-2026-16530: arbitrary pointer deref in __pmLogLoadInDom
...
Backport upstream fix for CVE-2026-16530, an arbitrary pointer
dereference in __pmLogLoadInDom (CWE-125/822). The combined
patch cherry-picks three upstream commits: the primary fix
adding bounds checks and validation in e_indom.c for both
libpcp and libpcp3, plus two regression fixes for
pmlogrewrite and pmlogextract callers. QA tests are also
updated to exercise the new failure modes.
CVE: CVE-2026-16530
Upstream patches:
- ec81e2b35cb72da5135dedfd909eda
2026-07-30 12:37:26 +00:00
William Cohen
6120de8ab7
Avoid pulling in additional packages for pcp-zeroconf
...
Resolves: RHEL-180384
2026-06-17 13:19:10 -04:00
William Cohen
1bcc98ef29
Rebase to pcp-7.1.5
...
Resolves: RHEL-173456
2026-06-08 09:49:59 -04:00
William Cohen
371d710728
Update SELinux policy for rocestat and nvidia PMDAs
...
Resolves: RHEL-132402
Resolves: RHEL-134388
Resolves: RHEL-133519
2026-02-22 22:30:02 -05:00
lmchilton
116b890abd
Resolves: RHEL-114006
2026-02-04 14:25:17 -05:00
William Cohen
7b44aa4377
Update to latest stable pcp-7.0.3
...
Resolves: RHEL-124897
2025-11-12 14:30:09 -05:00
Jan Kurik
50158df03a
Fix of ci.fmf
2025-09-30 14:58:32 +02:00
Jan Kurik
51437986fe
Allow imagemode tests only on x86_64 and aarch64
2025-09-30 11:26:51 +02:00
Jan Kurik
ac0058f3e3
Integrate Imagemode tests and plans into the gating workflow
2025-09-30 08:28:26 +02:00
Jan Kurik
0b9702a800
Rework of the gating configuration (PTG-643)
2025-09-24 14:38:16 +02:00
Jan Kurik
b8c4f73226
Reconfigured gating
...
Using public CentOS test repo and internal RHEL test repo.
2025-09-24 08:59:03 +02:00
Nathan Scott
13bd661f67
Update to pcp-6.3.7-5 with recent important fixes
...
Resolves: RHEL-93182
2025-06-27 10:20:57 +10:00
William Cohen
a58583aba5
Resolves: RHEL-88201
2025-05-04 20:36:05 -04:00
Nathan Scott
5493911cf7
Update to latest stable pcp-6.3.7
...
Resolves: RHEL-83468
2025-03-31 16:07:50 +11:00
Nathan Scott
e25ccdf669
Update to latest stable pcp-6.3.4
...
Resolves: RHEL-83468
2025-03-14 14:46:16 +11:00
Nathan Scott
2d27ea2254
libpcp: fix endian issue in big-endian __pmTimestamp writing
...
Resolves: RHEL-69722
2025-01-31 16:53:25 +11:00
Zdenek Pytela
1e817d692e
Rebuild with selinux-policy-40.13.23-1
...
Resolves: RHEL-36741
2025-01-23 19:02:32 +01:00
Sam Feifer
7a099620e3
Resolves: RHEL-73297
2025-01-09 10:46:02 -05:00
Jan Kurik
2b9e058c3a
Use local tests
2024-11-29 16:30:43 +01:00
Nathan Scott
16dd50fd5c
libpcp, pcp-xsos: finer grained string output control in pmPrintValue
...
Implement a mechanism in pmPrintValue for producing single-line value
output, giving shell scripts a chance to operate sensibly with whacky
command lines.
Resolves: RHEL-67164
Resolves: RHEL-67148
2024-11-14 13:58:43 +11:00
Nathan Scott
54b7bc326c
Update to latest bug fix PCP release
...
Resolves: RHEL-62801
Resolves: RHEL-57797
Resolves: RHEL-57795
Resolves: RHEL-56836
Resolves: RHEL-22723
2024-11-06 17:44:04 +11:00
Troy Dawson
6741d51e4b
Bump release for October 2024 mass rebuild:
...
Resolves: RHEL-64018
2024-10-29 08:54:17 -07:00
Nathan Scott
366f28d6c6
Drop gfs2 metrics subpackage from the c10s build
...
Related: RHEL-43429
2024-08-14 09:30:31 +10:00
Troy Dawson
31cfdc55d2
Bump release for Aug 2024 perl mass rebuild
...
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2024-08-08 04:29:30 -07:00
Jan Kurik
f692debdc7
annocheck should ignore PCP testsuite
2024-08-02 08:20:58 +02:00
Nathan Scott
0d8a48935e
Update to latest PCP release
...
Related: RHEL-43429
2024-08-01 11:27:23 +10:00
Jan Kurik
96b052feb8
rpminspect should ignore java classes from PCP testsuite
2024-07-08 16:53:46 +02:00
Troy Dawson
94daad66fc
Bump release for June 2024 mass rebuild
2024-06-24 09:07:13 -07:00
Nathan Scott
22e279d926
Rebuild using latest c10s toolchain
...
Resolves: RHEL-43429
2024-06-19 19:18:46 +10:00
Jan Kurik
946b4e7b21
Gating configuration for rhel-10
2024-05-09 08:27:45 +02:00
Jan Kurik
4d1ce98a60
Reconfiguration of gating to reflect testtype in BaseOS CI
2024-04-12 12:37:25 +02:00
Jan Kurik
3d2124bb17
Gating configuration for c10s
...
Setup of gating configuration for c10s/rhel-10
Modification of gating plan to select specific tests from Fedora
2024-03-26 17:54:33 +01:00
Nathan Scott
6b9b95f9d9
Update to latest community sources
2024-02-12 02:16:22 +11:00
Fedora Release Engineering
3fb972eb6a
Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
2024-01-25 12:19:25 +00:00
Fedora Release Engineering
b3ae26f79b
Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
2024-01-21 12:01:14 +00:00
Nathan Scott
fc70568e93
Update to latest community sources
2023-11-17 16:07:51 +11:00
Nathan Scott
e8670a7899
Update to latest community sources
2023-09-06 10:38:19 +10:00
Jan Kurik
8cda7294ef
Transfer of tests to tests/pcp repo
2023-08-09 11:36:55 +02:00
Jan Kurik
937c6cec50
Adjust rpminspect to ignore debug symbols for testsuite
2023-08-09 10:24:38 +02:00
Sam Feifer
f33bc340e9
Added missing end-of-line in changelog of pcp.spec
2023-08-08 09:28:49 -04:00
Jan Kurik
21f4c47220
Configure annocheck to ignore some testsuite files
2023-08-08 08:08:12 +02:00
Jan Kurik
3e32d3fe60
Added configuration file for rpminspect
2023-08-08 07:39:23 +02:00
Sam Feifer
1d1a754d43
Improve on pmieconf integration with Event Driven Ansible
2023-08-07 10:42:13 -04:00
Jan Kurik
cc46cd2ee1
Do not run license check if on rhel < 10
2023-08-07 15:33:45 +02:00
Nathan Scott
272be5f9af
Fix pmieconf testing rule path
2023-08-04 07:38:51 +10:00
Jan Kurik
29c3c57df5
Make licenses abbreviations complaint with SPDX
2023-07-25 18:54:27 +02:00
