System-level performance monitoring and performance management
Go to file
RHEL Packaging Agent 4f4f4d25c8 Fix CVE-2026-16530: arbitrary pointer deref in __pmLogLoadInDom
Backport fix for CVE-2026-16530 (CWE-125/822) - an arbitrary
pointer dereference in __pmLogLoadInDom. The bounds check on
string indices was guarded by acp!=NULL, making it unreachable
from the streaming path used by pmproxy. Three upstream commits
are backported: the primary fix adding minimum rlen validation
and unconditional bounds checks, plus two follow-up fixes for
pmlogrewrite and pmlogextract that relied on the removed guard.

CVE: CVE-2026-16530
Upstream patches:
 - ec81e2b35c.patch
 - b72da5135d.patch
 - edfd909eda.patch
Resolves: RHEL-213747

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-30 13:05:07 +00:00
.fmf Merged update from upstream sources 2021-03-23 12:30:30 +00:00
.gitignore Bug fix and feature rebase to upstream pcp-6.0.0-1 2022-09-26 16:24:51 +10:00
atop-cpu-utilization.patch Resolves: RHEL-101745 2025-11-19 14:00:02 -05:00
ci.fmf Fix of ci.fmf 2025-09-30 14:58:05 +02:00
ds389.patch Fix of ds389 pmda to work with newer versions of DS389 2026-04-02 12:31:19 +02:00
fix-pmdabpf-noarch-man-page-build-failure.patch Update to latest stable pcp-6.3.7 2025-03-31 16:04:59 +11:00
gating.yaml Rework of the gating configuration (PTG-643) 2025-09-24 14:38:06 +02:00
memory-leaks.patch Backport of memory leak fixes from PCPv7 2026-03-13 08:06:25 +01:00
pcp2openmetrics_hang.patch Resolves: RHEL-101745 2025-11-19 14:00:02 -05:00
pcp-RHEL-133548.patch Resolves: RHEL-133548 2026-02-19 22:40:09 -05:00
pcp-RHEL-213747.patch Fix CVE-2026-16530: arbitrary pointer deref in __pmLogLoadInDom 2026-07-30 13:05:07 +00:00
pcp.spec Fix CVE-2026-16530: arbitrary pointer deref in __pmLogLoadInDom 2026-07-30 13:05:07 +00:00
pmapi-header-multilib-fix.patch Update to pcp-6.3.7-5 with recent important fixes 2025-06-27 10:35:41 +10:00
pmda-openmetrics_qa1976.patch Resolves: RHEL-101745 2025-11-19 14:00:02 -05:00
pmda-openmetrics_removal.patch Resolves: RHEL-101745 2025-11-19 14:00:02 -05:00
pmda-openmetrics-performance.patch Resolves: RHEL-101745 2025-11-19 14:00:02 -05:00
pmda-openmetrics-rollup.patch Resolves: RHEL-101745 2025-11-19 14:00:02 -05:00
pmwebapi-filter-exact.patch Update to pcp-6.3.7-5 with recent important fixes 2025-06-27 10:35:41 +10:00
python-pmda-wrapper-list-fix.patch Update to pcp-6.3.7-5 with recent important fixes 2025-06-27 10:35:41 +10:00
redhat-issues-RHEL-2317-default-archive-version.patch Rebase to pcp-6.2.0-1 with latest upstream fixes and features 2024-02-12 04:14:05 +11:00
redhat-issues-RHEL-58953-perl-drop-Y2038-checks.patch Update to latest stable pcp-6.3.7 2025-03-31 16:04:59 +11:00
rpminspect.yaml annocheck should ignore PCP testsuite 2024-08-02 17:02:38 +02:00
selinux-pcp_pmie_t.patch Update to pcp-6.3.7-5 with recent important fixes 2025-06-27 10:35:41 +10:00
selinux-proc_psi_t.patch Resolves: RHEL-85792 2025-05-04 20:44:50 -04:00
sources Update to latest stable pcp-6.3.7 2025-03-31 16:04:59 +11:00
systemd-tmpfiles.d-directories.patch Update to pcp-6.3.7-5 with recent important fixes 2025-06-27 10:35:41 +10:00