martinpitt pushed to cockpit-podman (f32). "Sync tests with rawhide"
by notificationsï¼ fedoraproject.org
Notification time stamped 2021-03-01 10:14:07 UTC
From 798071ed3932324bd2907b4f3697f89b051e1035 Mon Sep 17 00:00:00 2001
From: Martin Pitt <martin(a)piware.de>
Date: Mar 01 2021 10:13:58 +0000
Subject: Sync tests with rawhide
---
diff --git a/tests/roles/test/tasks/main.yml b/tests/roles/test/tasks/main.yml
index 9c0d557..7c81d2f 100644
--- a/tests/roles/test/tasks/main.yml
+++ b/tests/roles/test/tasks/main.yml
@@ -23,6 +23,8 @@
- python3
tests:
- cockpit-podman:
- dir: .
- run: "{{ test_script_dir | default('.') }}/browser.sh"
+ dir: "{{ test_script_dir | default('.') }}/source"
+ # directory changed after release 29: https://github.com/cockpit-project/cockpit-podman/pull/684
+ # drop this after packaging 30
+ run: "if [ -e test/browser/browser.sh ]; then test/browser/browser.sh; else plans/browser.sh; fi"
save-files: ["logs/*"]
https://src.fedoraproject.org/rpms/cockpit-podman/c/798071ed3932324bd2907...
3Â years, 3Â months
martinpitt pushed to cockpit-podman (f33). "Sync tests with rawhide"
by notificationsï¼ fedoraproject.org
Notification time stamped 2021-03-01 10:13:39 UTC
From 1d3d9c7e910d97834df63c420dce4e22ff0badc9 Mon Sep 17 00:00:00 2001
From: Martin Pitt <martin(a)piware.de>
Date: Mar 01 2021 10:13:32 +0000
Subject: Sync tests with rawhide
---
diff --git a/tests/roles/test/tasks/main.yml b/tests/roles/test/tasks/main.yml
index 9c0d557..7c81d2f 100644
--- a/tests/roles/test/tasks/main.yml
+++ b/tests/roles/test/tasks/main.yml
@@ -23,6 +23,8 @@
- python3
tests:
- cockpit-podman:
- dir: .
- run: "{{ test_script_dir | default('.') }}/browser.sh"
+ dir: "{{ test_script_dir | default('.') }}/source"
+ # directory changed after release 29: https://github.com/cockpit-project/cockpit-podman/pull/684
+ # drop this after packaging 30
+ run: "if [ -e test/browser/browser.sh ]; then test/browser/browser.sh; else plans/browser.sh; fi"
save-files: ["logs/*"]
https://src.fedoraproject.org/rpms/cockpit-podman/c/1d3d9c7e910d97834df63...
3Â years, 3Â months
martinpitt pushed to cockpit-podman (f34). "Sync tests with rawhide"
by notificationsï¼ fedoraproject.org
Notification time stamped 2021-03-01 10:13:20 UTC
From b25f41c7d342f9bc2c3d7e771cfcc6c11ba25e42 Mon Sep 17 00:00:00 2001
From: Martin Pitt <martin(a)piware.de>
Date: Mar 01 2021 10:13:14 +0000
Subject: Sync tests with rawhide
---
diff --git a/tests/roles/test/tasks/main.yml b/tests/roles/test/tasks/main.yml
index 9c0d557..7c81d2f 100644
--- a/tests/roles/test/tasks/main.yml
+++ b/tests/roles/test/tasks/main.yml
@@ -23,6 +23,8 @@
- python3
tests:
- cockpit-podman:
- dir: .
- run: "{{ test_script_dir | default('.') }}/browser.sh"
+ dir: "{{ test_script_dir | default('.') }}/source"
+ # directory changed after release 29: https://github.com/cockpit-project/cockpit-podman/pull/684
+ # drop this after packaging 30
+ run: "if [ -e test/browser/browser.sh ]; then test/browser/browser.sh; else plans/browser.sh; fi"
save-files: ["logs/*"]
https://src.fedoraproject.org/rpms/cockpit-podman/c/b25f41c7d342f9bc2c3d7...
3Â years, 3Â months
dcaratti pushed to wpa_supplicant (f32). "P2P: Fix a corner case in
peer addition based on PD Request (..more)"
by notificationsï¼ fedoraproject.org
Notification time stamped 2021-03-01 10:13:00 UTC
From c8430a149bf97b7241925554e0687d5a121acae1 Mon Sep 17 00:00:00 2001
From: Davide Caratti <dcaratti(a)redhat.com>
Date: Mar 01 2021 10:11:41 +0000
Subject: P2P: Fix a corner case in peer addition based on PD Request
CVE-2021-27803
Upstream advisory:
https://w1.fi/security/2021-1/wpa_supplicant-p2p-provision-discovery-proc...
Signed-off-by: Davide Caratti <dcaratti(a)redhat.com>
---
diff --git a/0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch b/0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch
new file mode 100644
index 0000000..1942bb3
--- /dev/null
+++ b/0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch
@@ -0,0 +1,50 @@
+From 8460e3230988ef2ec13ce6b69b687e941f6cdb32 Mon Sep 17 00:00:00 2001
+From: Jouni Malinen <jouni(a)codeaurora.org>
+Date: Tue, 8 Dec 2020 23:52:50 +0200
+Subject: [PATCH] P2P: Fix a corner case in peer addition based on PD Request
+
+p2p_add_device() may remove the oldest entry if there is no room in the
+peer table for a new peer. This would result in any pointer to that
+removed entry becoming stale. A corner case with an invalid PD Request
+frame could result in such a case ending up using (read+write) freed
+memory. This could only by triggered when the peer table has reached its
+maximum size and the PD Request frame is received from the P2P Device
+Address of the oldest remaining entry and the frame has incorrect P2P
+Device Address in the payload.
+
+Fix this by fetching the dev pointer again after having called
+p2p_add_device() so that the stale pointer cannot be used.
+
+Fixes: 17bef1e97a50 ("P2P: Add peer entry based on Provision Discovery Request")
+Signed-off-by: Jouni Malinen <jouni(a)codeaurora.org>
+---
+ src/p2p/p2p_pd.c | 12 +++++-------
+ 1 file changed, 5 insertions(+), 7 deletions(-)
+
+diff --git a/src/p2p/p2p_pd.c b/src/p2p/p2p_pd.c
+index 3994ec03f86b..05fd593494ef 100644
+--- a/src/p2p/p2p_pd.c
++++ b/src/p2p/p2p_pd.c
+@@ -595,14 +595,12 @@ void p2p_process_prov_disc_req(struct p2p_data *p2p, const u8 *sa,
+ goto out;
+ }
+
++ dev = p2p_get_device(p2p, sa);
+ if (!dev) {
+- dev = p2p_get_device(p2p, sa);
+- if (!dev) {
+- p2p_dbg(p2p,
+- "Provision Discovery device not found "
+- MACSTR, MAC2STR(sa));
+- goto out;
+- }
++ p2p_dbg(p2p,
++ "Provision Discovery device not found "
++ MACSTR, MAC2STR(sa));
++ goto out;
+ }
+ } else if (msg.wfd_subelems) {
+ wpabuf_free(dev->info.wfd_subelems);
+--
+2.25.1
+
diff --git a/wpa_supplicant.spec b/wpa_supplicant.spec
index e94b38b..f39e190 100644
--- a/wpa_supplicant.spec
+++ b/wpa_supplicant.spec
@@ -5,7 +5,7 @@ Summary: WPA/WPA2/IEEE 802.1X Supplicant
Name: wpa_supplicant
Epoch: 1
Version: 2.9
-Release: 5%{?dist}
+Release: 6%{?dist}
License: BSD
Source0: http://w1.fi/releases/%{name}-%{version}.tar.gz
Source1: wpa_supplicant.conf
@@ -36,6 +36,9 @@ Patch8: 0001-p2p-Limit-P2P_DEVICE-name-to-appropriate-ifname-size.patch
#fix for CVE-2021-0326
Patch9: 0001-P2P-Fix-copying-of-secondary-device-types-for-P2P-gr.patch
+#fix for CVE-2021-27803
+Patch10: 0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch
+
URL: http://w1.fi/wpa_supplicant/
%if %with gui
@@ -191,6 +194,9 @@ chmod -R 0644 wpa_supplicant/examples/*.py
%changelog
+* Mon Mar 1 2021 Davide Caratti <dcaratti(a)redhat.com> - 1:2.9-6
+- Fix a corner case in peer addition based on PD Request (CVE-2021-27803)
+
* Thu Feb 4 2021 Davide Caratti <dcaratti(a)redhat.com> - 1:2.9-5
- Fix copying of secondary device types for P2P group client (CVE-2021-0326)
https://src.fedoraproject.org/rpms/wpa_supplicant/c/c8430a149bf97b7241925...
3Â years, 3Â months
rjones pushed to ocaml-pcre (rawhide). "OCaml 4.12.0 build"
by notificationsï¼ fedoraproject.org
Notification time stamped 2021-03-01 10:10:00 UTC
From e82ceccf607a74d62b87e2524cd85179d86676d7 Mon Sep 17 00:00:00 2001
From: Richard W.M. Jones <rjones(a)redhat.com>
Date: Mar 01 2021 10:09:50 +0000
Subject: OCaml 4.12.0 build
---
diff --git a/ocaml-pcre.spec b/ocaml-pcre.spec
index 17e1f85..fa1f6f0 100644
--- a/ocaml-pcre.spec
+++ b/ocaml-pcre.spec
@@ -1,6 +1,6 @@
Name: ocaml-pcre
Version: 7.2.3
-Release: 33%{?dist}
+Release: 34%{?dist}
Summary: Perl compatibility regular expressions (PCRE) for OCaml
License: LGPLv2
@@ -76,6 +76,9 @@ mv $RPM_BUILD_ROOT%{_docdir}/api .
%changelog
+* Mon Mar 1 10:09:49 GMT 2021 Richard W.M. Jones <rjones(a)redhat.com> - 7.2.3-34
+- OCaml 4.12.0 build
+
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.2.3-33
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
https://src.fedoraproject.org/rpms/ocaml-pcre/c/e82ceccf607a74d62b87e2524...
3Â years, 3Â months
rjones pushed to ocaml-astring (rawhide). "OCaml 4.12.0 build"
by notificationsï¼ fedoraproject.org
Notification time stamped 2021-03-01 10:10:00 UTC
From c774cf53e14bdaff83c907647c2d08fef1c541be Mon Sep 17 00:00:00 2001
From: Richard W.M. Jones <rjones(a)redhat.com>
Date: Mar 01 2021 10:09:50 +0000
Subject: OCaml 4.12.0 build
---
diff --git a/ocaml-astring.spec b/ocaml-astring.spec
index cb7fa6d..6b0d6f1 100644
--- a/ocaml-astring.spec
+++ b/ocaml-astring.spec
@@ -6,7 +6,7 @@
Name: ocaml-%{srcname}
Version: 0.8.5
-Release: 4%{?dist}
+Release: 5%{?dist}
Summary: Alternative String module for OCaml
License: ISC
@@ -102,6 +102,9 @@ ocaml pkg/pkg.ml test
%{_libdir}/ocaml/%{srcname}/%{srcname}*.mli
%changelog
+* Mon Mar 1 10:09:49 GMT 2021 Richard W.M. Jones <rjones(a)redhat.com> - 0.8.5-5
+- OCaml 4.12.0 build
+
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.5-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
https://src.fedoraproject.org/rpms/ocaml-astring/c/c774cf53e14bdaff83c907...
3Â years, 3Â months
rjones pushed to ocaml-cmdliner (rawhide). "OCaml 4.12.0 build"
by notificationsï¼ fedoraproject.org
Notification time stamped 2021-03-01 10:10:00 UTC
From ad7b5790344021eb885330739a8fb1dc8ea2ba34 Mon Sep 17 00:00:00 2001
From: Richard W.M. Jones <rjones(a)redhat.com>
Date: Mar 01 2021 10:09:50 +0000
Subject: OCaml 4.12.0 build
---
diff --git a/ocaml-cmdliner.spec b/ocaml-cmdliner.spec
index 7ec8400..902a0e2 100644
--- a/ocaml-cmdliner.spec
+++ b/ocaml-cmdliner.spec
@@ -1,6 +1,6 @@
Name: ocaml-cmdliner
Version: 1.0.4
-Release: 18%{?dist}
+Release: 19%{?dist}
Summary: Declarative definition of command line interfaces for OCaml
# In order for this to work as a "global" macro it has to come after the
@@ -104,6 +104,9 @@ chmod -x %{buildroot}%{_libdir}/ocaml/%{libname}/opam
%changelog
+* Mon Mar 1 10:09:49 GMT 2021 Richard W.M. Jones <rjones(a)redhat.com> - 1.0.4-19
+- OCaml 4.12.0 build
+
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-18
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
https://src.fedoraproject.org/rpms/ocaml-cmdliner/c/ad7b5790344021eb88533...
3Â years, 3Â months
rjones pushed to ocaml-postgresql (rawhide). "OCaml 4.12.0 build"
by notificationsï¼ fedoraproject.org
Notification time stamped 2021-03-01 10:09:59 UTC
From b33c103fff9bb7227e36232f8ccf41e830908ddb Mon Sep 17 00:00:00 2001
From: Richard W.M. Jones <rjones(a)redhat.com>
Date: Mar 01 2021 10:09:50 +0000
Subject: OCaml 4.12.0 build
---
diff --git a/ocaml-postgresql.spec b/ocaml-postgresql.spec
index 7ea24e4..0f2d90f 100644
--- a/ocaml-postgresql.spec
+++ b/ocaml-postgresql.spec
@@ -2,7 +2,7 @@
Name: ocaml-postgresql
Version: 4.0.1
-Release: 33%{?dist}
+Release: 34%{?dist}
Summary: OCaml library for accessing PostgreSQL databases
License: LGPLv2+ with exceptions
@@ -80,6 +80,9 @@ make install
%changelog
+* Mon Mar 1 10:09:49 GMT 2021 Richard W.M. Jones <rjones(a)redhat.com> - 4.0.1-34
+- OCaml 4.12.0 build
+
* Mon Feb 08 2021 Pavel Raiskup <praiskup(a)redhat.com> - 4.0.1-33
- rebuild for libpq ABI fix rhbz#1908268
https://src.fedoraproject.org/rpms/ocaml-postgresql/c/b33c103fff9bb7227e3...
3Â years, 3Â months
rjones pushed to ocamlify (rawhide). "OCaml 4.12.0 build"
by notificationsï¼ fedoraproject.org
Notification time stamped 2021-03-01 10:09:59 UTC
From 20676eacd48520e402981f912f045091a575b186 Mon Sep 17 00:00:00 2001
From: Richard W.M. Jones <rjones(a)redhat.com>
Date: Mar 01 2021 10:09:49 +0000
Subject: OCaml 4.12.0 build
---
diff --git a/ocamlify.spec b/ocamlify.spec
index dfbabea..343e79e 100644
--- a/ocamlify.spec
+++ b/ocamlify.spec
@@ -2,7 +2,7 @@
Name: ocamlify
Version: 0.0.2
-Release: 25%{?dist}
+Release: 26%{?dist}
Summary: Include files in OCaml code
License: LGPLv2+ with exceptions
@@ -58,6 +58,9 @@ ocaml setup.ml -test
%changelog
+* Mon Mar 1 10:09:49 GMT 2021 Richard W.M. Jones <rjones(a)redhat.com> - 0.0.2-26
+- OCaml 4.12.0 build
+
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.2-25
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
https://src.fedoraproject.org/rpms/ocamlify/c/20676eacd48520e402981f912f0...
3Â years, 3Â months
rjones pushed to ocaml-lablgtk (rawhide). "OCaml 4.12.0 build"
by notificationsï¼ fedoraproject.org
Notification time stamped 2021-03-01 10:09:56 UTC
From b457f395138c7dabb9de16ce4522c7a51ddb6a2f Mon Sep 17 00:00:00 2001
From: Richard W.M. Jones <rjones(a)redhat.com>
Date: Mar 01 2021 10:09:48 +0000
Subject: OCaml 4.12.0 build
---
diff --git a/ocaml-lablgtk.spec b/ocaml-lablgtk.spec
index 2fe9657..5e03290 100644
--- a/ocaml-lablgtk.spec
+++ b/ocaml-lablgtk.spec
@@ -1,6 +1,6 @@
Name: ocaml-lablgtk
Version: 2.18.11
-Release: 5%{?dist}
+Release: 6%{?dist}
Summary: Objective Caml interface to gtk+
@@ -154,6 +154,9 @@ done
%changelog
+* Mon Mar 1 10:09:47 GMT 2021 Richard W.M. Jones <rjones(a)redhat.com> - 2.18.11-6
+- OCaml 4.12.0 build
+
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.18.11-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
https://src.fedoraproject.org/rpms/ocaml-lablgtk/c/b457f395138c7dabb9de16...
3Â years, 3Â months