From c76a737f5a69b6e7debfae90bf14f4f1c34dff38 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 16 Jan 2025 10:29:17 +0000 Subject: [PATCH 01/13] Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild --- abrt.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/abrt.spec b/abrt.spec index 783d3c4..3efaa98 100644 --- a/abrt.spec +++ b/abrt.spec @@ -57,7 +57,7 @@ Summary: Automatic bug detection and reporting tool Name: abrt Version: 2.17.6 -Release: 3%{?dist} +Release: 4%{?dist} License: GPL-2.0-or-later URL: https://abrt.readthedocs.org/ Source: https://github.com/abrt/%{name}/archive/%{version}/%{name}-%{version}.tar.gz @@ -986,6 +986,9 @@ killall abrt-dbus >/dev/null 2>&1 || : %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh %changelog +* Thu Jan 16 2025 Fedora Release Engineering - 2.17.6-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild + * Wed Nov 20 2024 David Abdurachmanov - 2.17.6-3 - Disable Requires for kexec-tools on riscv64 (not supported) From 3063be65d9f436a61e6574e60725dba73de68a83 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Zbigniew=20J=C4=99drzejewski-Szmek?= Date: Thu, 23 Jan 2025 17:01:20 +0100 Subject: [PATCH 02/13] Add sysusers.d config file to allow rpm to create users/groups automatically --- abrt.spec | 22 ++++++++++++++-------- 1 file changed, 14 insertions(+), 8 deletions(-) diff --git a/abrt.spec b/abrt.spec index 3efaa98..d003e87 100644 --- a/abrt.spec +++ b/abrt.spec @@ -57,7 +57,7 @@ Summary: Automatic bug detection and reporting tool Name: abrt Version: 2.17.6 -Release: 4%{?dist} +Release: 5%{?dist} License: GPL-2.0-or-later URL: https://abrt.readthedocs.org/ Source: https://github.com/abrt/%{name}/archive/%{version}/%{name}-%{version}.tar.gz @@ -469,6 +469,13 @@ to the shell %global __scm_apply_git(qp:m:) %{__git} am --exclude doc/design --exclude doc/project/abrt.tex %autosetup -S git -p 0 +# Create a sysusers.d config file +#uidgid pair 173:173 reserved in setup rhbz#670231 +%global abrt_gid_uid 173 +cat >abrt.sysusers.conf </dev/null || groupadd -f -g %{abrt_gid_uid} --system abrt -getent passwd abrt >/dev/null || useradd --system -g abrt -u %{abrt_gid_uid} -d /etc/abrt -s /sbin/nologin abrt -exit 0 - %post # $1 == 1 if install; 2 if upgrade %systemd_post abrtd.service @@ -753,6 +755,7 @@ killall abrt-dbus >/dev/null 2>&1 || : %{_mandir}/man5/abrt-action-save-package-data.conf.5* %{_mandir}/man5/gpg_keys.conf.5* %{_mandir}/man8/abrtd.8* +%{_sysusersdir}/abrt.conf %files libs %{_libdir}/libabrt.so.* @@ -986,6 +989,9 @@ killall abrt-dbus >/dev/null 2>&1 || : %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh %changelog +* Thu Jan 23 2025 Zbigniew Jędrzejewski-Szmek - 2.17.6-5 +- Add sysusers.d config file to allow rpm to create users/groups automatically + * Thu Jan 16 2025 Fedora Release Engineering - 2.17.6-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild From b8a18969b7d2f0c86e3ad294fddb8cc067ddbea5 Mon Sep 17 00:00:00 2001 From: Python Maint Date: Tue, 3 Jun 2025 15:33:02 +0200 Subject: [PATCH 03/13] Rebuilt for Python 3.14 --- abrt.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/abrt.spec b/abrt.spec index d003e87..cba345b 100644 --- a/abrt.spec +++ b/abrt.spec @@ -57,7 +57,7 @@ Summary: Automatic bug detection and reporting tool Name: abrt Version: 2.17.6 -Release: 5%{?dist} +Release: 6%{?dist} License: GPL-2.0-or-later URL: https://abrt.readthedocs.org/ Source: https://github.com/abrt/%{name}/archive/%{version}/%{name}-%{version}.tar.gz @@ -989,6 +989,9 @@ killall abrt-dbus >/dev/null 2>&1 || : %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh %changelog +* Tue Jun 03 2025 Python Maint - 2.17.6-6 +- Rebuilt for Python 3.14 + * Thu Jan 23 2025 Zbigniew Jędrzejewski-Szmek - 2.17.6-5 - Add sysusers.d config file to allow rpm to create users/groups automatically From ea69665c753d6816df1bd599a28171cf73e528be Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 23 Jul 2025 16:42:37 +0000 Subject: [PATCH 04/13] Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild --- abrt.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/abrt.spec b/abrt.spec index cba345b..93a20c5 100644 --- a/abrt.spec +++ b/abrt.spec @@ -57,7 +57,7 @@ Summary: Automatic bug detection and reporting tool Name: abrt Version: 2.17.6 -Release: 6%{?dist} +Release: 7%{?dist} License: GPL-2.0-or-later URL: https://abrt.readthedocs.org/ Source: https://github.com/abrt/%{name}/archive/%{version}/%{name}-%{version}.tar.gz @@ -989,6 +989,9 @@ killall abrt-dbus >/dev/null 2>&1 || : %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh %changelog +* Wed Jul 23 2025 Fedora Release Engineering - 2.17.6-7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild + * Tue Jun 03 2025 Python Maint - 2.17.6-6 - Rebuilt for Python 3.14 From 3e192a597d9539c4f37f1deacbeb8c99091ce299 Mon Sep 17 00:00:00 2001 From: Adam Williamson Date: Fri, 25 Jul 2025 14:27:51 -0700 Subject: [PATCH 05/13] Obsolete fros packages fros was recently retired: https://src.fedoraproject.org/rpms/fros/c/1d5c887 it was added to comps to support abrt-desktop: https://pagure.io/fedora-comps/c/e845f70 so it seems most appropriate to have abrt obsolete it, if we don't just use obsolete-packages. Signed-off-by: Adam Williamson --- abrt.spec | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/abrt.spec b/abrt.spec index 93a20c5..0053e72 100644 --- a/abrt.spec +++ b/abrt.spec @@ -118,6 +118,11 @@ Requires: libreport-plugin-systemd-journal %endif # to fix upgrade path abrt-plugin-sosreport was removed in 2.14.5 version. Obsoletes: abrt-plugin-sosreport < 2.14.5 +# fros was retired 2025-07, and was initially added to comps to support +# abrt-desktop, so let's obsolete it here +Obsoletes: fros < 1.1-42 +Obsoletes: fros-gnome < 1.1-42 +Obsoletes: fros-recordmydesktop < 1.1-42 #gui BuildRequires: libreport-gtk-devel >= %{libreport_ver} From 026c727cd2ab021685606ff451d69c3e8a928653 Mon Sep 17 00:00:00 2001 From: Adam Williamson Date: Fri, 1 Aug 2025 10:49:36 -0700 Subject: [PATCH 06/13] Bump release --- abrt.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/abrt.spec b/abrt.spec index 0053e72..94b5143 100644 --- a/abrt.spec +++ b/abrt.spec @@ -57,7 +57,7 @@ Summary: Automatic bug detection and reporting tool Name: abrt Version: 2.17.6 -Release: 7%{?dist} +Release: 8%{?dist} License: GPL-2.0-or-later URL: https://abrt.readthedocs.org/ Source: https://github.com/abrt/%{name}/archive/%{version}/%{name}-%{version}.tar.gz @@ -994,6 +994,9 @@ killall abrt-dbus >/dev/null 2>&1 || : %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh %changelog +* Fri Aug 01 2025 Adam Williamson - 2.17.6-8 +- Obsolete fros packages + * Wed Jul 23 2025 Fedora Release Engineering - 2.17.6-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild From 54bdc1243fac6524a8b3703146a93e60b09831f0 Mon Sep 17 00:00:00 2001 From: Python Maint Date: Fri, 15 Aug 2025 12:37:49 +0200 Subject: [PATCH 07/13] Rebuilt for Python 3.14.0rc2 bytecode --- abrt.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/abrt.spec b/abrt.spec index 94b5143..ed6ab01 100644 --- a/abrt.spec +++ b/abrt.spec @@ -57,7 +57,7 @@ Summary: Automatic bug detection and reporting tool Name: abrt Version: 2.17.6 -Release: 8%{?dist} +Release: 9%{?dist} License: GPL-2.0-or-later URL: https://abrt.readthedocs.org/ Source: https://github.com/abrt/%{name}/archive/%{version}/%{name}-%{version}.tar.gz @@ -994,6 +994,9 @@ killall abrt-dbus >/dev/null 2>&1 || : %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh %changelog +* Fri Aug 15 2025 Python Maint - 2.17.6-9 +- Rebuilt for Python 3.14.0rc2 bytecode + * Fri Aug 01 2025 Adam Williamson - 2.17.6-8 - Obsolete fros packages From ba57e0bbb5605d5ac0259e624c495e8513c1a7ed Mon Sep 17 00:00:00 2001 From: Python Maint Date: Fri, 19 Sep 2025 12:06:17 +0200 Subject: [PATCH 08/13] Rebuilt for Python 3.14.0rc3 bytecode --- abrt.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/abrt.spec b/abrt.spec index ed6ab01..a5b19ef 100644 --- a/abrt.spec +++ b/abrt.spec @@ -57,7 +57,7 @@ Summary: Automatic bug detection and reporting tool Name: abrt Version: 2.17.6 -Release: 9%{?dist} +Release: 10%{?dist} License: GPL-2.0-or-later URL: https://abrt.readthedocs.org/ Source: https://github.com/abrt/%{name}/archive/%{version}/%{name}-%{version}.tar.gz @@ -994,6 +994,9 @@ killall abrt-dbus >/dev/null 2>&1 || : %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh %changelog +* Fri Sep 19 2025 Python Maint - 2.17.6-10 +- Rebuilt for Python 3.14.0rc3 bytecode + * Fri Aug 15 2025 Python Maint - 2.17.6-9 - Rebuilt for Python 3.14.0rc2 bytecode From b36cf8c4991ed7eace2563fd98c3f0d92434227f Mon Sep 17 00:00:00 2001 From: Michal Srb Date: Thu, 2 Oct 2025 10:36:26 +0200 Subject: [PATCH 09/13] Update to 2.17.7 Signed-off-by: Michal Srb --- .gitignore | 1 + abrt.spec | 10 +++++++--- sources | 2 +- 3 files changed, 9 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 83c640b..cc954d8 100644 --- a/.gitignore +++ b/.gitignore @@ -85,3 +85,4 @@ abrt-1.1.13.tar.gz /abrt-2.17.4.tar.gz /abrt-2.17.5.tar.gz /abrt-2.17.6.tar.gz +/abrt-2.17.7.tar.gz diff --git a/abrt.spec b/abrt.spec index a5b19ef..d6cfac9 100644 --- a/abrt.spec +++ b/abrt.spec @@ -56,8 +56,8 @@ Summary: Automatic bug detection and reporting tool Name: abrt -Version: 2.17.6 -Release: 10%{?dist} +Version: 2.17.7 +Release: 1%{?dist} License: GPL-2.0-or-later URL: https://abrt.readthedocs.org/ Source: https://github.com/abrt/%{name}/archive/%{version}/%{name}-%{version}.tar.gz @@ -66,7 +66,7 @@ BuildRequires: %{dbus_devel} BuildRequires: hostname BuildRequires: gtk3-devel BuildRequires: glib2-devel >= %{glib_ver} -BuildRequires: rpm-devel >= 4.18 +BuildRequires: rpm-devel >= 6.0.0 BuildRequires: desktop-file-utils BuildRequires: libnotify-devel #why? BuildRequires: file-devel @@ -994,6 +994,10 @@ killall abrt-dbus >/dev/null 2>&1 || : %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh %changelog +* Thu Oct 02 2025 Michal Srb - 2.17.7-1 +- Update to upstream release 2.17.7 +- Fix reading gpg keys with RPM 6.0.0 (rhbz#2396899) + * Fri Sep 19 2025 Python Maint - 2.17.6-10 - Rebuilt for Python 3.14.0rc3 bytecode diff --git a/sources b/sources index 77e5b6a..080308e 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (abrt-2.17.6.tar.gz) = 1e3729187c609f72e6d72c91815fc74e9ff8bed14dd678c093e4c47eafecb4e00fbe0b185e3a1ece614b994302c35de6a171449d5e80157a4fee16ccc7e60277 +SHA512 (abrt-2.17.7.tar.gz) = 0e9c05a897387e20b930b616c58b187dd27f6e3372a9067b77f849d70e59443688022c5ae9fcad5968d8e637c4db7f6b500ddbb5aa59e61872b14867c5c7124a From fb86abde3bc96a04de006b456a59009817cca515 Mon Sep 17 00:00:00 2001 From: Michal Srb Date: Thu, 4 Dec 2025 20:32:21 +0100 Subject: [PATCH 10/13] a-a-save-container-data: validate input Resolves: CVE-2025-12744 Signed-off-by: Michal Srb --- .gitignore | 1 + abrt.spec | 6 +++++- sources | 2 +- 3 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index cc954d8..643f820 100644 --- a/.gitignore +++ b/.gitignore @@ -86,3 +86,4 @@ abrt-1.1.13.tar.gz /abrt-2.17.5.tar.gz /abrt-2.17.6.tar.gz /abrt-2.17.7.tar.gz +/abrt-2.17.8.tar.gz diff --git a/abrt.spec b/abrt.spec index d6cfac9..94695b0 100644 --- a/abrt.spec +++ b/abrt.spec @@ -56,7 +56,7 @@ Summary: Automatic bug detection and reporting tool Name: abrt -Version: 2.17.7 +Version: 2.17.8 Release: 1%{?dist} License: GPL-2.0-or-later URL: https://abrt.readthedocs.org/ @@ -994,6 +994,10 @@ killall abrt-dbus >/dev/null 2>&1 || : %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh %changelog +* Thu Dec 04 2025 Michal Srb - 2.17.8-1 +- a-a-save-container-data: validate input +- Resolves: CVE-2025-12744 + * Thu Oct 02 2025 Michal Srb - 2.17.7-1 - Update to upstream release 2.17.7 - Fix reading gpg keys with RPM 6.0.0 (rhbz#2396899) diff --git a/sources b/sources index 080308e..4e58c99 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (abrt-2.17.7.tar.gz) = 0e9c05a897387e20b930b616c58b187dd27f6e3372a9067b77f849d70e59443688022c5ae9fcad5968d8e637c4db7f6b500ddbb5aa59e61872b14867c5c7124a +SHA512 (abrt-2.17.8.tar.gz) = 90b74229412e0186bfa109ee940a60c9f3c0f7ce8c1216acad6f05619a1bb591e7f0bae87363143a05034312c9f14fe5ace341b84f680780ceb93a1e624705b3 From 484142c1a3a2e736d46bf37ae6f20904662cf439 Mon Sep 17 00:00:00 2001 From: Michal Srb Date: Thu, 4 Dec 2025 20:32:21 +0100 Subject: [PATCH 11/13] a-a-save-container-data: validate input Resolves: CVE-2025-12744 Signed-off-by: Michal Srb --- .gitignore | 2 ++ abrt.spec | 8 ++++++-- sources | 2 +- 3 files changed, 9 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 83c640b..643f820 100644 --- a/.gitignore +++ b/.gitignore @@ -85,3 +85,5 @@ abrt-1.1.13.tar.gz /abrt-2.17.4.tar.gz /abrt-2.17.5.tar.gz /abrt-2.17.6.tar.gz +/abrt-2.17.7.tar.gz +/abrt-2.17.8.tar.gz diff --git a/abrt.spec b/abrt.spec index 783d3c4..ccf55cc 100644 --- a/abrt.spec +++ b/abrt.spec @@ -56,8 +56,8 @@ Summary: Automatic bug detection and reporting tool Name: abrt -Version: 2.17.6 -Release: 3%{?dist} +Version: 2.17.8 +Release: 1%{?dist} License: GPL-2.0-or-later URL: https://abrt.readthedocs.org/ Source: https://github.com/abrt/%{name}/archive/%{version}/%{name}-%{version}.tar.gz @@ -986,6 +986,10 @@ killall abrt-dbus >/dev/null 2>&1 || : %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh %changelog +* Thu Dec 04 2025 Michal Srb - 2.17.8-1 +- a-a-save-container-data: validate input +- Resolves: CVE-2025-12744 + * Wed Nov 20 2024 David Abdurachmanov - 2.17.6-3 - Disable Requires for kexec-tools on riscv64 (not supported) diff --git a/sources b/sources index 77e5b6a..4e58c99 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (abrt-2.17.6.tar.gz) = 1e3729187c609f72e6d72c91815fc74e9ff8bed14dd678c093e4c47eafecb4e00fbe0b185e3a1ece614b994302c35de6a171449d5e80157a4fee16ccc7e60277 +SHA512 (abrt-2.17.8.tar.gz) = 90b74229412e0186bfa109ee940a60c9f3c0f7ce8c1216acad6f05619a1bb591e7f0bae87363143a05034312c9f14fe5ace341b84f680780ceb93a1e624705b3 From 3e0750ab4b85a1a64e4499ebd0d821e075752aec Mon Sep 17 00:00:00 2001 From: Michal Srb Date: Thu, 4 Dec 2025 21:17:25 +0100 Subject: [PATCH 12/13] Revert RPM 6.0.0 patch Signed-off-by: Michal Srb --- ...bkeyKeyIDAsHex-to-obtain-the-gpg-key.patch | 45 +++++++++++++++++++ abrt.spec | 1 + 2 files changed, 46 insertions(+) create mode 100644 0001-Revert-Use-rpmPubkeyKeyIDAsHex-to-obtain-the-gpg-key.patch diff --git a/0001-Revert-Use-rpmPubkeyKeyIDAsHex-to-obtain-the-gpg-key.patch b/0001-Revert-Use-rpmPubkeyKeyIDAsHex-to-obtain-the-gpg-key.patch new file mode 100644 index 0000000..1c7316e --- /dev/null +++ b/0001-Revert-Use-rpmPubkeyKeyIDAsHex-to-obtain-the-gpg-key.patch @@ -0,0 +1,45 @@ +From cf1ececd9378fc14125c929833043f26e8f3486d Mon Sep 17 00:00:00 2001 +From: Michal Srb +Date: Thu, 4 Dec 2025 21:14:52 +0100 +Subject: [PATCH] Revert "Use rpmPubkeyKeyIDAsHex() to obtain the gpg key in + hex format" + +This reverts commit 0158baaaba86b2c37b03922c2875a666ecc9b687. +--- + src/daemon/rpm.c | 6 +++--- + 1 file changed, 3 insertions(+), 3 deletions(-) + +diff --git a/src/daemon/rpm.c b/src/daemon/rpm.c +index 1b745f70..524dc749 100644 +--- a/src/daemon/rpm.c ++++ b/src/daemon/rpm.c +@@ -90,7 +90,7 @@ void rpm_destroy() + rpmFreeRpmrc(); + #endif + +- g_list_free_full(g_steal_pointer(&list_fingerprints), g_free); ++ g_list_free_full(g_steal_pointer(&list_fingerprints), free); + } + + +@@ -113,7 +113,7 @@ void rpm_load_gpgkey(const char* filename) + pubkey = rpmPubkeyNew(pkt, pklen); + if (pubkey != NULL) + { +- fingerprint = g_strdup(rpmPubkeyKeyIDAsHex(pubkey)); ++ fingerprint = rpmhex(pubkey->keyid, sizeof(pubkey->keyid)); + if (fingerprint != NULL) + list_fingerprints = g_list_append(list_fingerprints, fingerprint); + +@@ -123,7 +123,7 @@ void rpm_load_gpgkey(const char* filename) + rpmPubkey subkey = subkeys[i]; + if (subkey != NULL) + { +- fingerprint = g_strdup(rpmPubkeyKeyIDAsHex(subkey)); ++ fingerprint = rpmhex(subkey->keyid, sizeof(subkey->keyid)); + if (fingerprint != NULL) + list_fingerprints = g_list_append(list_fingerprints, fingerprint); + } +-- +2.52.0 + diff --git a/abrt.spec b/abrt.spec index ccf55cc..69f297b 100644 --- a/abrt.spec +++ b/abrt.spec @@ -61,6 +61,7 @@ Release: 1%{?dist} License: GPL-2.0-or-later URL: https://abrt.readthedocs.org/ Source: https://github.com/abrt/%{name}/archive/%{version}/%{name}-%{version}.tar.gz +Patch001: 0001-Revert-Use-rpmPubkeyKeyIDAsHex-to-obtain-the-gpg-key.patch BuildRequires: git-core BuildRequires: %{dbus_devel} BuildRequires: hostname From 0baf939494e4c94b47b2d746756ce280ff8b85db Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Fri, 16 Jan 2026 03:23:57 +0000 Subject: [PATCH 13/13] Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild --- abrt.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/abrt.spec b/abrt.spec index 94695b0..3bdd3fe 100644 --- a/abrt.spec +++ b/abrt.spec @@ -57,7 +57,7 @@ Summary: Automatic bug detection and reporting tool Name: abrt Version: 2.17.8 -Release: 1%{?dist} +Release: 2%{?dist} License: GPL-2.0-or-later URL: https://abrt.readthedocs.org/ Source: https://github.com/abrt/%{name}/archive/%{version}/%{name}-%{version}.tar.gz @@ -994,6 +994,9 @@ killall abrt-dbus >/dev/null 2>&1 || : %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh %changelog +* Fri Jan 16 2026 Fedora Release Engineering - 2.17.8-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild + * Thu Dec 04 2025 Michal Srb - 2.17.8-1 - a-a-save-container-data: validate input - Resolves: CVE-2025-12744