Commits July 2026

commits@lists.kronosnet.org

2 participants
916 discussions

[jenkins] anvil-build-functional-testing (build 918) success
by jenkins＠kronosnet.org 20 Jul '26

20 Jul '26

Run reason: Started by upstream project "anvil/anvil-build-cron" build number 120 Total runtime: 2 hr 23 min Full log: https://ci.kronosnet.org/job/anvil/job/anvil-build-functional-testing/918/c…

1 0

[jenkins] anvil-build-functional-testing (build 915) success
by jenkins＠kronosnet.org 20 Jul '26

20 Jul '26

Run reason: Started by upstream project "anvil/anvil-build-cron" build number 120 Total runtime: 2 hr 21 min Full log: https://ci.kronosnet.org/job/anvil/job/anvil-build-functional-testing/915/c…

1 0

[kronosnet/kronosnet] e13cb4: CVE-2026-15812: access control list bypass via lin...
by Fabio Di Nitto 20 Jul '26

20 Jul '26

Branch: refs/heads/security-fixes-cve-only Home: https://github.com/kronosnet/kronosnet Commit: e13cb431329417b530277593a4094ef8bb0572d1 https://github.com/kronosnet/kronosnet/commit/e13cb431329417b530277593a4094… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2026-07-20 (Mon, 20 Jul 2026) Changed paths: M libknet/handle.c M libknet/onwire_v1.c M libknet/tests/Makefile.am M libknet/tests/fun_acl_check.c A libknet/tests/sec_acl_link_id_spoofing.c M libknet/threads_rx.c Log Message: ----------- CVE-2026-15812: access control list bypass via link ID spoofing on unencrypted dynamic links Severity: LOW Exploitable only with unencrypted traffic (not supported for production). Validate that packets originate from the configured source address for the claimed link_id. Previously, link_id was trusted without verification, allowing attackers to probe link states or confuse failover logic. Implement secure-by-default model with proper static/dynamic link handling: - Enable use_access_lists=1 by default in knet_handle_new - Static links: always validate against auto-configured ACL - Dynamic links with use_access_lists=1 (default): require ACL or reject - Dynamic links with use_access_lists=0: skip validation (explicit opt-out) Add bounds check, source address verification, and centralized _check_rx_acl(). Update tests to reflect secure-by-default model. Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Co-Authored-By: Claude Sonnet 4.5 <noreply(a)anthropic.com> Commit: f1e8e1c536a8340fa154b097fc69dadaef7a366a https://github.com/kronosnet/kronosnet/commit/f1e8e1c536a8340fa154b097fc69d… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2026-07-20 (Mon, 20 Jul 2026) Changed paths: M libknet/tests/Makefile.am A libknet/tests/sec_frag_sequence.c M libknet/threads_rx.c Log Message: ----------- CVE-2026-15813: memory corruption and out-of-bounds access via malformed network packet defragmentation Severity: MEDIUM Validate fragment sequence numbers before accessing defragmentation buffers. Previous code used unchecked sequence numbers as array indices, allowing heap buffer overflow. Exploitable only with unencrypted traffic (not supported for production). CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Co-Authored-By: Claude Sonnet 4.5 <noreply(a)anthropic.com> Compare: https://github.com/kronosnet/kronosnet/compare/815b66c2343b...f1e8e1c536a8 To unsubscribe from these emails, change your notification settings at https://github.com/kronosnet/kronosnet/settings/notifications

1 0

[kronosnet/kronosnet] d83f36: CVE-2026-15812: access control list bypass via lin...
by Fabio Di Nitto 20 Jul '26

20 Jul '26

Branch: refs/heads/stable1-proposed Home: https://github.com/kronosnet/kronosnet Commit: d83f360d07d5b3ae33bf9659a2502d3993f5bdcf https://github.com/kronosnet/kronosnet/commit/d83f360d07d5b3ae33bf9659a2502… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2026-07-20 (Mon, 20 Jul 2026) Changed paths: M libknet/handle.c M libknet/tests/Makefile.am M libknet/tests/fun_acl_check.c A libknet/tests/sec_acl_link_id_spoofing.c M libknet/threads_rx.c Log Message: ----------- CVE-2026-15812: access control list bypass via link ID spoofing on unencrypted dynamic links Severity: LOW Exploitable only with unencrypted traffic (not supported for production). Validate that packets originate from the configured source address for the claimed link_id. Previously, link_id was trusted without verification, allowing attackers to probe link states or confuse failover logic. Implement secure-by-default model with proper static/dynamic link handling: - Enable use_access_lists=1 by default in knet_handle_new - Static links: always validate against auto-configured ACL - Dynamic links with use_access_lists=1 (default): require ACL or reject - Dynamic links with use_access_lists=0: skip validation (explicit opt-out) Add bounds check, source address verification, and centralized _check_rx_acl(). Update tests to reflect secure-by-default model. Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Co-Authored-By: Claude Sonnet 4.5 <noreply(a)anthropic.com> Commit: bf8fd52acf47bb1fe2b1dce8d46ea54db07075c4 https://github.com/kronosnet/kronosnet/commit/bf8fd52acf47bb1fe2b1dce8d46ea… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2026-07-20 (Mon, 20 Jul 2026) Changed paths: M libknet/tests/Makefile.am A libknet/tests/sec_frag_sequence.c M libknet/threads_rx.c Log Message: ----------- CVE-2026-15813: memory corruption and out-of-bounds access via malformed network packet defragmentation Severity: MEDIUM Validate fragment sequence numbers before accessing defragmentation buffers. Previous code used unchecked sequence numbers as array indices, allowing heap buffer overflow. Exploitable only with unencrypted traffic (not supported for production). CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Co-Authored-By: Claude Sonnet 4.5 <noreply(a)anthropic.com> Compare: https://github.com/kronosnet/kronosnet/compare/ada3d6d62b90...bf8fd52acf47 To unsubscribe from these emails, change your notification settings at https://github.com/kronosnet/kronosnet/settings/notifications

1 0

[jenkins] kronosnet PR-499 (build 2) completed with state: Jenkins exception
by jenkins＠kronosnet.org 20 Jul '26

20 Jul '26

5/77 Non-voting fails: alpine-x86-64(nonvoting-clang: Build source) alpine-x86-64(nonvoting-clang_debug: Build source) freebsd-devel-x86-64(nonvoting: Run tests) freebsd-devel-x86-64(nonvoting_debug: Run tests) freebsd-devel-x86-64(nonvoting-clang: Run tests) 2/72 Voting fails: freebsd-14-x86-64(voting: Run tests) freebsd-15-x86-64(voting: Run tests) Run reason: Pull request #499 updated Total runtime: 2 hr 49 min Split logs: https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-499/2/… Full log: https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-499/2/… Failed logs: https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-499/2/… https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-499/2/… https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-499/2/… https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-499/2/… https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-499/2/… https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-499/2/… https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-499/2/… Full Coverity results: http://ci.kronosnet.org/coverity/kronosnet/rhel-10-coverity-x86-64/pr499//2 http://ci.kronosnet.org/coverity/kronosnet/rhel-8-coverity-x86-64/pr499//2 http://ci.kronosnet.org/coverity/kronosnet/rhel-9-coverity-x86-64/pr499//2 Duplicate job killed: kronosnet/kronosnet-pipeline/PR-499 (1) Please report the following errors to your friendly local Jenkins admin (though they have probably already seen them and are already panicking). Exception caught on freebsd-14-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-15-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-14-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-14-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-15-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-15-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-devel-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione

1 0

[jenkins] kronosnet PR-494 (build 7) completed with state: Jenkins exception
by jenkins＠kronosnet.org 20 Jul '26

20 Jul '26

3/75 Non-voting fails: alpine-x86-64(nonvoting-clang: Build source) alpine-x86-64(nonvoting-clang_debug: Build source) freebsd-devel-x86-64(nonvoting: Setup source) 2/72 Voting fails: freebsd-15-x86-64(voting: Setup source) freebsd-14-x86-64(voting: Build source) Run reason: Pull request #494 updated Total runtime: 2 hr 47 min Split logs: https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-494/7/… Full log: https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-494/7/… Failed logs: https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-494/7/… https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-494/7/… https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-494/7/… https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-494/7/… https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-494/7/… Full Coverity results: http://ci.kronosnet.org/coverity/kronosnet/rhel-10-coverity-x86-64/pr494//7 http://ci.kronosnet.org/coverity/kronosnet/rhel-8-coverity-x86-64/pr494//7 http://ci.kronosnet.org/coverity/kronosnet/rhel-9-coverity-x86-64/pr494//7 Duplicate job killed: kronosnet/kronosnet-pipeline/PR-494 (6) Please report the following errors to your friendly local Jenkins admin (though they have probably already seen them and are already panicking). Exception caught on freebsd-14-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-15-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-devel-x86-64 during nonvoting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-14-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-14-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-15-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-15-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-devel-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-devel-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-14-x86-64 during voting: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione

1 0

[jenkins] kronosnet stable1-proposed (build 261) completed with state: Jenkins exception
by jenkins＠kronosnet.org 20 Jul '26

20 Jul '26

1 0

[jenkins] kronosnet stable1-proposed (build 260) completed with state: Jenkins exception
by jenkins＠kronosnet.org 20 Jul '26

20 Jul '26

8/76 Non-voting fails: openindiana-x86-64(nonvoting: Run tests) openindiana-x86-64(nonvoting_debug: Run tests) alpine-x86-64(nonvoting-clang: Build source) openindiana-x86-64(nonvoting-clang: Run tests) alpine-x86-64(nonvoting-clang_debug: Build source) openindiana-x86-64(nonvoting-clang_debug: Run tests) freebsd-devel-x86-64(nonvoting: Run tests) freebsd-devel-x86-64(nonvoting_debug: Run tests) 4/74 Voting fails: freebsd-15-x86-64(voting: Run tests) freebsd-14-x86-64(voting: Run tests) freebsd-15-x86-64(voting_debug: Run tests) freebsd-14-x86-64(voting_debug: Run tests) Run reason: Push event to branch stable1-proposed Total runtime: 2 hr 41 min Split logs: https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/stable1-p… Full log: https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/stable1-p… Repositories: https://ci.kronosnet.org/builds/kronosnet/rhel-8-power9-ppc64le/origin/stab… https://ci.kronosnet.org/builds/kronosnet/rhel-10-power9-ppc64le/origin/sta… https://ci.kronosnet.org/builds/kronosnet/fedora-rawhide-s390x/origin/stabl… https://ci.kronosnet.org/builds/kronosnet/rhel-10-s390x/origin/stable1-prop… https://ci.kronosnet.org/builds/kronosnet/fedora-43-s390x/origin/stable1-pr… https://ci.kronosnet.org/builds/kronosnet/fedora-43-power9-ppc64le/origin/s… https://ci.kronosnet.org/builds/kronosnet/centos-10-s390x/origin/stable1-pr… https://ci.kronosnet.org/builds/kronosnet/rhel-8-s390x/origin/stable1-propo… https://ci.kronosnet.org/builds/kronosnet/rhel-10-x86-64/origin/stable1-pro… https://ci.kronosnet.org/builds/kronosnet/rhel-8-x86-64/origin/stable1-prop… https://ci.kronosnet.org/builds/kronosnet/fedora-43-x86-64/origin/stable1-p… https://ci.kronosnet.org/builds/kronosnet/rhel-9-s390x/origin/stable1-propo… https://ci.kronosnet.org/builds/kronosnet/fedora-rawhide-x86-64/origin/stab… https://ci.kronosnet.org/builds/kronosnet/rhel-9-x86-64/origin/stable1-prop… https://ci.kronosnet.org/builds/kronosnet/centos-10-x86-64/origin/stable1-p… https://ci.kronosnet.org/builds/kronosnet/centos-9-x86-64/origin/stable1-pr… https://ci.kronosnet.org/builds/kronosnet/fedora-rawhide-power9-ppc64le/ori… https://ci.kronosnet.org/builds/kronosnet/centos-9-s390x/origin/stable1-pro… Full Coverity results: http://ci.kronosnet.org/coverity/kronosnet/rhel-10-coverity-x86-64/origin/s… http://ci.kronosnet.org/coverity/kronosnet/rhel-8-coverity-x86-64/origin/st… http://ci.kronosnet.org/coverity/kronosnet/rhel-9-coverity-x86-64/origin/st… Please report the following errors to your friendly local Jenkins admin (though they have probably already seen them and are already panicking). Exception caught on freebsd-14-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-14-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-15-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-15-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-devel-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione Exception caught on freebsd-devel-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Aborted by fabbione

1 0

[jenkins] anvil kmods (build 621) success
by jenkins＠kronosnet.org 20 Jul '26

20 Jul '26

Run reason: Started by upstream project "anvil/anvil-build-cron" build number 120 Total runtime: 9 min 8 sec Full log: https://ci.kronosnet.org/job/anvil/job/anvil-build-all-kmods/621/consoleText

1 0

[jenkins] anvil kmod almalinux-9 enterprise-staging none (build 4218) success
by jenkins＠kronosnet.org 20 Jul '26

20 Jul '26

Run reason: Started by upstream project "anvil/anvil-build-all-kmods" build number 621 Total runtime: 8 min 50 sec Full log: https://ci.kronosnet.org/job/anvil/job/anvil-build-kmods/4218/consoleText

1 0

← Newer
1
...
34
35
36
37
38
39
40
...
92
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

Commits July 2026