public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
To: git-commits@fedoraproject.org
Subject: [rpms/libkcapi] rawhide: Update to version 1.5.1 (fedora#2512793)
Date: Tue, 18 Aug 2026 18:19:21 GMT [thread overview]
Message-ID: <178707716188.1.11912296612795389387.rpms-libkcapi-4585925922b0@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/libkcapi
Branch : rawhide
Commit : 4585925922b0aebb56a43c311c610a5b59e59360
Author : Ondrej Mosnáček <omosnacek@gmail.com>
Date : 2026-08-18T18:53:48+02:00
Stats : +3/-115 in 4 file(s)
URL : https://src.fedoraproject.org/rpms/libkcapi/c/4585925922b0aebb56a43c311c610a5b59e59360?branch=rawhide
Log:
Update to version 1.5.1 (fedora#2512793)
- Fix CVE-2026-71225 (fedora#2511445)
- Fix CVE-2026-71226 (fedora#2511484)
- Fix CVE-2026-71227 (fedora#2511487)
Signed-off-by: Ondrej Mosnáček <omosnacek@gmail.com>
---
diff --git a/001-remove-ansi_cprng.patch b/001-remove-ansi_cprng.patch
deleted file mode 100644
index c0627d6..0000000
--- a/001-remove-ansi_cprng.patch
+++ /dev/null
@@ -1,73 +0,0 @@
-From 735f55ed1289cd6eb6510f32b8b1c7b39c2e38d1 Mon Sep 17 00:00:00 2001
-From: Stephan Mueller <smueller@chronox.de>
-Date: Wed, 4 Feb 2026 07:53:16 +0100
-Subject: [PATCH] ansi_cprng: remove test as new kernels do not offer it
-
-This algorithm is typically unused anyway.
-
-Signed-off-by: Stephan Mueller <smueller@chronox.de>
----
- CHANGES.md | 3 +++
- configure.ac | 2 +-
- test/kcapi-main.c | 24 ------------------------
- 3 files changed, 4 insertions(+), 25 deletions(-)
-
-diff --git a/CHANGES.md b/CHANGES.md
-index 53d1f28..b164433 100644
---- a/CHANGES.md
-+++ b/CHANGES.md
-@@ -1,3 +1,6 @@
-+Changes 1.5.1-prerelease:
-+ * remove tests of ansi_cprng
-+
- Changes 1.5.0:
- * move all sha* applications to the libexec directory to allow them to coexist with other packages sha* applications - the caller is expected to make a symlink to them
- * add sha3sum
-diff --git a/configure.ac b/configure.ac
-index fbae4f9..9cd2bda 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -11,7 +11,7 @@ dnl enhancements, bug fixes only. Versions with
- dnl a decimal point are pre-releases.
- m4_define([__KCAPI_MAJVERSION], [1])
- m4_define([__KCAPI_MINVERSION], [5])
--m4_define([__KCAPI_PATCHLEVEL], [0])
-+m4_define([__KCAPI_PATCHLEVEL], [1])
- m4_define([KCAPI_VERSION], [__KCAPI_MAJVERSION.__KCAPI_MINVERSION.__KCAPI_PATCHLEVEL])
-
- AC_INIT([libkcapi], [KCAPI_VERSION])
-diff --git a/test/kcapi-main.c b/test/kcapi-main.c
-index 29a7fc5..7556796 100644
---- a/test/kcapi-main.c
-+++ b/test/kcapi-main.c
-@@ -707,30 +707,6 @@ static int auxiliary_tests(void)
- if (aux_test_rng("drbg_nopr_ctr_aes256", NULL, 0))
- ret++;
-
-- if (!is_fips_mode()) {
-- /* X9.31 RNG must require seed */
-- printf("X9.31 missing seeding: ");
-- if (!aux_test_rng("ansi_cprng", NULL, 0))
-- ret++;
-- /* X9.31 seed too short */
-- printf("X9.31 insufficient seeding: ");
-- if (!aux_test_rng("ansi_cprng",
-- (uint8_t *)
-- "\x00\x01\x02\x03\x04\x05\x06\x07\x08"
-- "\x00\x01\x02\x03\x04\x05\x06\x07\x08", 16))
-- ret++;
-- /* X9.31 seed right sized short */
-- if (aux_test_rng("ansi_cprng",
-- (uint8_t *)
-- "\x00\x01\x02\x03\x04\x05\x06\x07\x08"
-- "\x00\x01\x02\x03\x04\x05\x06\x07\x08"
-- "\x00\x01\x02\x03\x04\x05\x06\x07\x08"
-- "\x00\x01\x02\x03\x04\x05\x06\x07\x08", 32)) {
-- printf("Error for ansi_cprng: kernel module ansi_cprng present?\n");
-- ret++;
-- }
-- }
--
- return ret;
- }
-
diff --git a/002-remove-unused.patch b/002-remove-unused.patch
deleted file mode 100644
index 579b883..0000000
--- a/002-remove-unused.patch
+++ /dev/null
@@ -1,33 +0,0 @@
-From d8c4c8ad67c13fb3ae011f4dfb7d64f7441ce61f Mon Sep 17 00:00:00 2001
-From: Stephan Mueller <smueller@chronox.de>
-Date: Wed, 4 Feb 2026 08:10:35 +0100
-Subject: [PATCH] remove unused function
-
-Signed-off-by: Stephan Mueller <smueller@chronox.de>
----
- test/kcapi-main.c | 12 ------------
- 1 file changed, 12 deletions(-)
-
-diff --git a/test/kcapi-main.c b/test/kcapi-main.c
-index 7556796..073a43e 100644
---- a/test/kcapi-main.c
-+++ b/test/kcapi-main.c
-@@ -637,18 +637,6 @@ static int aux_test_rng(const char *name, uint8_t *seed, uint32_t seedlen)
- return 0;
- }
-
--static int is_fips_mode(void)
--{
-- char c;
-- FILE *f = fopen("/proc/sys/crypto/fips_enabled", "r");
-- if (!f)
-- return 0;
-- if (fread(&c, 1, 1, f) < 1)
-- c = '0';
-- fclose(f);
-- return c == '1';
--}
--
- static int auxiliary_tests(void)
- {
- struct kcapi_handle *handle = NULL;
diff --git a/libkcapi.spec b/libkcapi.spec
index e725b37..0803877 100644
--- a/libkcapi.spec
+++ b/libkcapi.spec
@@ -1,7 +1,7 @@
# Shared object version of libkcapi.
%global vmajor 1
%global vminor 5
-%global vpatch 0
+%global vpatch 1
# Do we build the replacements packages?
%bcond_with replace_coreutils
@@ -128,9 +128,6 @@ Source1: https://www.chronox.de/%{name}/releases/%{version}/%{name}-%{ver
Source2: sha512hmac-openssl.sh
Source3: fipshmac-openssl.sh
-Patch: %{giturl}/commit/735f55ed1289cd6eb6510f32b8b1c7b39c2e38d1.patch#/001-remove-ansi_cprng.patch
-Patch: %{giturl}/commit/d8c4c8ad67c13fb3ae011f4dfb7d64f7441ce61f.patch#/002-remove-unused.patch
-
BuildRequires: bash
BuildRequires: coreutils
BuildRequires: gcc
@@ -295,9 +292,6 @@ Auxiliary scripts for testing %{name}.
%prep
%autosetup -p 1 -S git
-# Undo the version bump that is part of the first patch
-sed -i 's/m4_define(\[__KCAPI_PATCHLEVEL\], \[1\])/m4_define([__KCAPI_PATCHLEVEL], [0])/' configure.ac
-
# Work around https://bugzilla.redhat.com/show_bug.cgi?id=2258240
sed -i -e 's|XML V45|XML V4.1.2|' -e 's|/xml/4\.5/|/xml/4.1.2/|' \
lib/doc/libkcapi.tmpl
diff --git a/sources b/sources
index 0f7842a..86fd4bb 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (libkcapi-1.5.0.tar.xz) = db156ee94fc63815a31876ab072aca72a806b26961c43f2caf8495c53b95484de71cd3be84dc9e5c9560e9ee704979be059ff6c102b4893d6bbdf9a8a69a667a
-SHA512 (libkcapi-1.5.0.tar.xz.asc) = 69cfb6bf98f89c503e7fda07a54eddb9fcc2dafe418f1bc1216c051565c214a6caab83495c19b650a5c6e46e22080f8df4dd2152ab364993ed5badd256495159
+SHA512 (libkcapi-1.5.1.tar.xz) = 5d9941fa6b10cd4edcc64d88590551df8df3d1753bbd579e3b1834ce63301fb8758ef453934634e6902afa7fcc57b679275d1f6eab92e3b9ef7a0227b90e4897
+SHA512 (libkcapi-1.5.1.tar.xz.asc) = 6c845fd76df7a0f65107b0f1ab7e9b48f1b329ee0b9a7725dbc848aa56ba0e27514ae4fae3e74c44180cfbe82e8575598c3bba84ed5f9d2f345704264c3c4046
reply other threads:[~2026-08-18 18:19 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178707716188.1.11912296612795389387.rpms-libkcapi-4585925922b0@fedoraproject.org \
--to=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox