From e81c1e857738cd347efb10e74843718cda0dbecb Mon Sep 17 00:00:00 2001 From: SumitJenaHCL Date: Tue, 28 Jul 2026 09:36:50 +0530 Subject: [PATCH 1/3] Patch `rust` for CVE-2026-47143 --- SPECS/rust/CVE-2026-47143.patch | 35 +++++++++++++++++++++++++++++++++ SPECS/rust/rust.spec | 12 +++++++---- 2 files changed, 43 insertions(+), 4 deletions(-) create mode 100644 SPECS/rust/CVE-2026-47143.patch diff --git a/SPECS/rust/CVE-2026-47143.patch b/SPECS/rust/CVE-2026-47143.patch new file mode 100644 index 00000000000..81617340172 --- /dev/null +++ b/SPECS/rust/CVE-2026-47143.patch @@ -0,0 +1,35 @@ +From aaa3b18afd6fc421f3ca387070b0b617a410a205 Mon Sep 17 00:00:00 2001 +From: SumitJenaHCL +Date: Tue, 28 Jul 2026 04:21:22 +0530 +Subject: [PATCH] Patch CVE-2026-47143 + +Upstream Patch Reference: https://github.com/capstone-engine/capstone/commit/a0201371719b5aaa91d318ab2898843718f92d1f +--- + vendor/capstone-sys-0.17.0/capstone/arch/X86/X86DisassemblerDecoder.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/vendor/capstone-sys-0.17.0/capstone/arch/X86/X86DisassemblerDecoder.c b/vendor/capstone-sys-0.17.0/capstone/arch/X86/X86DisassemblerDecoder.c +index 22acab3..972d8e8 100644 +--- a/vendor/capstone-sys-0.17.0/capstone/arch/X86/X86DisassemblerDecoder.c ++++ b/vendor/capstone-sys-0.17.0/capstone/arch/X86/X86DisassemblerDecoder.c +@@ -99,7 +99,7 @@ static int modRMRequired(OpcodeType type, + unsigned int index; + + switch (type) { +- default: break; ++ default: return false; + case ONEBYTE: + decision = ONEBYTE_SYM; + indextable = index_x86DisassemblerOneByteOpcodes; +@@ -163,7 +163,7 @@ static InstrUID decode(OpcodeType type, + static const struct OpcodeDecision emptyDecision = { 0 }; + + switch (type) { +- default: break; // never reach ++ default: return 0; + case ONEBYTE: + // dec = &ONEBYTE_SYM.opcodeDecisions[insnContext].modRMDecisions[opcode]; + index = index_x86DisassemblerOneByteOpcodes[insnContext]; +-- +2.45.4 + diff --git a/SPECS/rust/rust.spec b/SPECS/rust/rust.spec index 42306f851ba..24ef456ccf9 100644 --- a/SPECS/rust/rust.spec +++ b/SPECS/rust/rust.spec @@ -9,7 +9,7 @@ Summary: Rust Programming Language Name: rust Version: 1.90.0 -Release: 9%{?dist} +Release: 10%{?dist} License: (ASL 2.0 OR MIT) AND BSD AND CC-BY-3.0 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -60,6 +60,7 @@ Patch15: CVE-2026-34743.patch Patch16: CVE-2026-5222.patch Patch17: CVE-2026-5223.patch Patch18: CVE-2026-40034.patch +Patch19: CVE-2026-47143.patch BuildRequires: binutils BuildRequires: cmake @@ -198,6 +199,9 @@ rm %{buildroot}%{_docdir}/docs/html/.lock %{_mandir}/man1/* %changelog +* Tue Jul 28 2026 SumitJenaHCL - 1.90.0-10 +- Patch for CVE-2026-47143 + * Thu Jun 04 2026 BinduSri Adabala - 1.90.0-9 - Add patch for CVE-2026-5222, CVE-2026-5223 & CVE-2026-40034 @@ -223,12 +227,12 @@ rm %{buildroot}%{_docdir}/docs/html/.lock * Mon Jan 19 2026 Kanishk Bansal - 1.90.0-2 - Bump to rebuild with updated glibc -* Tue Oct 28 2025 Kavya Sree Kaitepalli - 1.90.0-1 -- Upgrade to 1.90.0 - * Mon Nov 10 2025 Andrew Phelps - 1.86.0-10 - Bump to rebuild with updated glibc +* Tue Oct 28 2025 Kavya Sree Kaitepalli - 1.90.0-1 +- Upgrade to 1.90.0 + * Thu Oct 23 2025 Kanishk Bansal - 1.86.0-9 - Bump to rebuild with updated glibc From f96c54f20e9a395c49ffd9539ebd5fd82c19f600 Mon Sep 17 00:00:00 2001 From: SumitJenaHCL Date: Tue, 28 Jul 2026 13:07:07 +0530 Subject: [PATCH 2/3] Update rust CVE-2026-25541 patch and fix rust-doc license check warnings - Narrow CVE-2026-25541.patch to the vendored bytes-1.10.1 crate - Relocate rustdoc-bundled license texts to %license and drop *bsd* doc pages --- SPECS/rust/CVE-2026-25541.patch | 47 +++++++++++++++++---------------- SPECS/rust/rust.spec | 13 ++++++++- 2 files changed, 36 insertions(+), 24 deletions(-) diff --git a/SPECS/rust/CVE-2026-25541.patch b/SPECS/rust/CVE-2026-25541.patch index 279eda39b17..982fe1a06e9 100644 --- a/SPECS/rust/CVE-2026-25541.patch +++ b/SPECS/rust/CVE-2026-25541.patch @@ -13,24 +13,25 @@ Signed-off-by: Alice Ryhl Upstream Patch reference: https://github.com/tokio-rs/bytes/commit/d0293b0e35838123c51ca5dfdf468ecafee4398f.patch --- - vendor/bytes-1.10.0/.cargo-checksum.json | 2 +- - vendor/bytes-1.10.0/ci/miri.sh | 3 +++ - vendor/bytes-1.10.0/src/bytes_mut.rs | 20 ++++++++++++-------- - vendor/bytes-1.10.0/tests/test_bytes.rs | 13 +++++++++++++ + vendor/bytes-1.10.1/.cargo-checksum.json | 2 +- + vendor/bytes-1.10.1/ci/miri.sh | 3 +++ + vendor/bytes-1.10.1/src/bytes_mut.rs | 20 ++++++++++++-------- + vendor/bytes-1.10.1/tests/test_bytes.rs | 13 +++++++++++++ 4 files changed, 29 insertions(+), 9 deletions(-) -diff --git a/vendor/bytes-1.10.0/.cargo-checksum.json b/vendor/bytes-1.10.0/.cargo-checksum.json -index 6496773c4..db97fe467 100644 ---- a/vendor/bytes-1.10.0/.cargo-checksum.json -+++ b/vendor/bytes-1.10.0/.cargo-checksum.json + +diff --git a/vendor/bytes-1.10.1/.cargo-checksum.json b/vendor/bytes-1.10.1/.cargo-checksum.json +index b5315b9ac..0a926c9de 100644 +--- a/vendor/bytes-1.10.1/.cargo-checksum.json ++++ b/vendor/bytes-1.10.1/.cargo-checksum.json @@ -1 +1 @@ --{"files":{".cargo_vcs_info.json":"c7971e90199ad3af2d17a8ad8b93b705d33a29a9e2e82f939c193e059946c584",".github/workflows/ci.yml":"1e635153dbcbee2afb3fd51a83340439f07f223b179e7cde28a68a8ee7385008","CHANGELOG.md":"6aa60aa8ed901b68734f29061bd47bdfaa38329dc23453d26acfafda6743c1b4","Cargo.lock":"d4b366e110775a100240d38f2515f1585b81dae75fface3b2f57f41172a6351e","Cargo.toml":"af759a984eec99ce46ee45bc0cc3fb47f2b5447cdb1908d6e6359b626b190737","Cargo.toml.orig":"0eae7f688b83f15c775806b661fa22e2514af1147aa019e77b96d5677939e729","LICENSE":"45f522cacecb1023856e46df79ca625dfc550c94910078bd8aec6e02880b3d42","README.md":"275ac7bc295e3cc659d28f05261645ac5bd6286476afe2ee3c1ed719f7b6df02","SECURITY.md":"a3335079977c2f13bad59e323fdc1056bdae5adfe55f18d15ac2c930d741828c","benches/buf.rs":"72e6b6120b52d568da068f17c66a793d65602e400c595778581b63092e41d8dc","benches/bytes.rs":"7084e564f8568f52c9fdb76a06e58701aa7f0c776209d29a0f60c38a19748203","benches/bytes_mut.rs":"1326fe6224b26826228e02b4133151e756f38152c2d9cfe66adf83af76c3ec98","ci/miri.sh":"13b2db3432fcdf9e2db6ef9e6ec20d063c0ce63542981a6f77e09306e1e2198e","ci/panic-abort.sh":"aec2e5427117e533d7a9721a926eb6a9d72f264510066baf2c501357df2d936f","ci/test-stable.sh":"fb751f06f314f728c489b7a7854701f632e24de8d0540ea8cf3449c6a853ac3c","ci/tsan.sh":"466b86b19225dd26c756cf2252cb1973f87a145642c99364b462ed7ceb55c7dd","clippy.toml":"8522f448dfa3b33ac334ce47d233ebb6b58e8ae115e45107a64fc1b4510fe560","src/buf/buf_impl.rs":"a14aa7e5e7fac1d4d1a3617d616af0b478a9a31235b773bcec11255c8c78446e","src/buf/buf_mut.rs":"6cc3800b08dc36eac3dbe0916be67fa535132c69dd920065efb930fd7c7d0a39","src/buf/chain.rs":"27ff0a6fce049c51a24d45003b9741b655c28330b48af23ad1514587760b0c93","src/buf/iter.rs":"d4dca5b7f9b1cb441f22ac1862e28b10086721879163a810955aefb5cd7f3e58","src/buf/limit.rs":"e005ba140b70f68654877c96b981a220477e415ff5c92438c1b0cb9bc866d872","src/buf/mod.rs":"3f60295316d44b510b942abb31a0d975ae488bd4b52c87f5252d73f88f82715a","src/buf/reader.rs":"cda8bc221a1de06c7395d5c6e80f8a5924198eafbc2decc0909082ce8781d789","src/buf/take.rs":"68053cf0edd9e1abd51b0cac9fefd7d3abfc53d2fde1f44d775399720b2d939e","src/buf/uninit_slice.rs":"52629b93ff7a08db45fc69395580b34fa3609fd9309ea01f86e58488b02b08a3","src/buf/vec_deque.rs":"baac165527d1bdfc3bb259380bb4722e70c3f11e8a901e8bab6e4f951b060711","src/buf/writer.rs":"b137608cb40944a5c3e061a73087c5a48e50048dae002d0334a23cf4d3547065","src/bytes.rs":"140ea293c520a0a6c80f7f3aa7ce9a6d33782f6be19a416929450b3fbfcba107","src/bytes_mut.rs":"0498dcaf2b39c0cc4b39c398e095bb4cc0bc001ebc2d90ffd067308e8566b772","src/fmt/debug.rs":"4d217b8f43e489925bb6904010df617efc63b50a3cc1ab126eec54b43b66eb3e","src/fmt/hex.rs":"54c05ab7d95d7381e499079d63773fabd2672f3c4929b56b02ab87d4495902b5","src/fmt/mod.rs":"b38222dcfff70eb3ffb6ce305b95f3fcfd9fa68cca85693eb2ed01d3da7ddb88","src/lib.rs":"6a59680076e75d4b6f966a2202de615ab1107b066b1c8481398131285b6195cf","src/loom.rs":"7c89f9f5f900d5b9b7c43d08d467957933eba90d5dcff1b38cf9a7e48494a577","src/serde.rs":"3ecd7e828cd4c2b7db93c807cb1548fad209e674df493edf7cda69a7b04d405d","tests/test_buf.rs":"c55dc7ab1a7392c2467a079dc77223fbec35ff54e9eda9b05cc1d4e22cb36626","tests/test_buf_mut.rs":"3e6a12a4f546dbf1a0e1346ab2b7ff707fdaf01a06b21714ca64b141484a76c3","tests/test_bytes.rs":"6b4effac07365f8ca24aad8efc32a70e742a4957383a89aa8ebd1d6eaacc1c54","tests/test_bytes_odd_alloc.rs":"ad5df84a35038359413199762c65017989d905e6e965a7b863beaa9962a7e1e8","tests/test_bytes_vec_alloc.rs":"5a0e77cab12b32374b2822df8d9a6479afe68b55c1cba1511ebf4199be532caa","tests/test_chain.rs":"e9f094539bb42b3135f50033c44122a6b44cf0f953e51e8b488f43243f1e7f10","tests/test_debug.rs":"13299107172809e8cbbd823964ac9450cd0d6b6de79f2e6a2e0f44b9225a0593","tests/test_iter.rs":"665e1837c1294d7695ffa352a666ce8673fb46fa603164556524e87d5517a6cb","tests/test_reader.rs":"bf83669d4e0960dad6aa47b46a9a454814fab626eb83572aba914c3d71618f43","tests/test_serde.rs":"2691f891796ba259de0ecf926de05c514f4912cc5fcd3e6a1591efbcd23ed4d0","tests/test_take.rs":"fb34700a8ed75b3c6937a4dee0bffadb64f7c7f735bd9faa8730eb96a9e9b651"},"package":"f61dac84819c6588b558454b194026eb1f09c293b9036ae9b159e74e73ab6cf9"} +-{"files":{".cargo_vcs_info.json":"6662417a5f50904e781c49dcc9861b4aa8971a25e7e39e39a012170d9de16ae9",".github/workflows/ci.yml":"1e635153dbcbee2afb3fd51a83340439f07f223b179e7cde28a68a8ee7385008","CHANGELOG.md":"86affa16d7afc66a1500175b3373e8b35ffce525f8ef51e933b0b2b807b928b7","Cargo.lock":"e50cc260bab7149ad4a10ceedc46e5420ca0305027b60b50d8f26abcb24a3e15","Cargo.toml":"eb4c0ac524e35ea8ccd9bed2b79b69565196bf36029ee1149d684622befa1300","Cargo.toml.orig":"0e84b4778f8df559a3656e0707f9e32ff4219119b16cce643f63ecebcfb7c115","LICENSE":"45f522cacecb1023856e46df79ca625dfc550c94910078bd8aec6e02880b3d42","README.md":"275ac7bc295e3cc659d28f05261645ac5bd6286476afe2ee3c1ed719f7b6df02","SECURITY.md":"a3335079977c2f13bad59e323fdc1056bdae5adfe55f18d15ac2c930d741828c","benches/buf.rs":"72e6b6120b52d568da068f17c66a793d65602e400c595778581b63092e41d8dc","benches/bytes.rs":"7084e564f8568f52c9fdb76a06e58701aa7f0c776209d29a0f60c38a19748203","benches/bytes_mut.rs":"1326fe6224b26826228e02b4133151e756f38152c2d9cfe66adf83af76c3ec98","ci/miri.sh":"13b2db3432fcdf9e2db6ef9e6ec20d063c0ce63542981a6f77e09306e1e2198e","ci/panic-abort.sh":"aec2e5427117e533d7a9721a926eb6a9d72f264510066baf2c501357df2d936f","ci/test-stable.sh":"fb751f06f314f728c489b7a7854701f632e24de8d0540ea8cf3449c6a853ac3c","ci/tsan.sh":"466b86b19225dd26c756cf2252cb1973f87a145642c99364b462ed7ceb55c7dd","clippy.toml":"8522f448dfa3b33ac334ce47d233ebb6b58e8ae115e45107a64fc1b4510fe560","src/buf/buf_impl.rs":"a14aa7e5e7fac1d4d1a3617d616af0b478a9a31235b773bcec11255c8c78446e","src/buf/buf_mut.rs":"6cc3800b08dc36eac3dbe0916be67fa535132c69dd920065efb930fd7c7d0a39","src/buf/chain.rs":"27ff0a6fce049c51a24d45003b9741b655c28330b48af23ad1514587760b0c93","src/buf/iter.rs":"d4dca5b7f9b1cb441f22ac1862e28b10086721879163a810955aefb5cd7f3e58","src/buf/limit.rs":"e005ba140b70f68654877c96b981a220477e415ff5c92438c1b0cb9bc866d872","src/buf/mod.rs":"3f60295316d44b510b942abb31a0d975ae488bd4b52c87f5252d73f88f82715a","src/buf/reader.rs":"cda8bc221a1de06c7395d5c6e80f8a5924198eafbc2decc0909082ce8781d789","src/buf/take.rs":"68053cf0edd9e1abd51b0cac9fefd7d3abfc53d2fde1f44d775399720b2d939e","src/buf/uninit_slice.rs":"52629b93ff7a08db45fc69395580b34fa3609fd9309ea01f86e58488b02b08a3","src/buf/vec_deque.rs":"baac165527d1bdfc3bb259380bb4722e70c3f11e8a901e8bab6e4f951b060711","src/buf/writer.rs":"b137608cb40944a5c3e061a73087c5a48e50048dae002d0334a23cf4d3547065","src/bytes.rs":"1b3935281970640eb2355059584ef75b5655f1abcab6c0bcb60669c5812b34d5","src/bytes_mut.rs":"0498dcaf2b39c0cc4b39c398e095bb4cc0bc001ebc2d90ffd067308e8566b772","src/fmt/debug.rs":"4d217b8f43e489925bb6904010df617efc63b50a3cc1ab126eec54b43b66eb3e","src/fmt/hex.rs":"54c05ab7d95d7381e499079d63773fabd2672f3c4929b56b02ab87d4495902b5","src/fmt/mod.rs":"b38222dcfff70eb3ffb6ce305b95f3fcfd9fa68cca85693eb2ed01d3da7ddb88","src/lib.rs":"6a59680076e75d4b6f966a2202de615ab1107b066b1c8481398131285b6195cf","src/loom.rs":"7c89f9f5f900d5b9b7c43d08d467957933eba90d5dcff1b38cf9a7e48494a577","src/serde.rs":"3ecd7e828cd4c2b7db93c807cb1548fad209e674df493edf7cda69a7b04d405d","tests/test_buf.rs":"c55dc7ab1a7392c2467a079dc77223fbec35ff54e9eda9b05cc1d4e22cb36626","tests/test_buf_mut.rs":"3e6a12a4f546dbf1a0e1346ab2b7ff707fdaf01a06b21714ca64b141484a76c3","tests/test_bytes.rs":"1ef7050f74cdf7c4da1a52a0371303bab6bc181cc91eab6b0b1e20073afc4d9e","tests/test_bytes_odd_alloc.rs":"ad5df84a35038359413199762c65017989d905e6e965a7b863beaa9962a7e1e8","tests/test_bytes_vec_alloc.rs":"5a0e77cab12b32374b2822df8d9a6479afe68b55c1cba1511ebf4199be532caa","tests/test_chain.rs":"e9f094539bb42b3135f50033c44122a6b44cf0f953e51e8b488f43243f1e7f10","tests/test_debug.rs":"13299107172809e8cbbd823964ac9450cd0d6b6de79f2e6a2e0f44b9225a0593","tests/test_iter.rs":"665e1837c1294d7695ffa352a666ce8673fb46fa603164556524e87d5517a6cb","tests/test_reader.rs":"bf83669d4e0960dad6aa47b46a9a454814fab626eb83572aba914c3d71618f43","tests/test_serde.rs":"2691f891796ba259de0ecf926de05c514f4912cc5fcd3e6a1591efbcd23ed4d0","tests/test_take.rs":"fb34700a8ed75b3c6937a4dee0bffadb64f7c7f735bd9faa8730eb96a9e9b651"},"package":"d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a"} \ No newline at end of file -+{"files":{".cargo_vcs_info.json":"c7971e90199ad3af2d17a8ad8b93b705d33a29a9e2e82f939c193e059946c584",".github/workflows/ci.yml":"1e635153dbcbee2afb3fd51a83340439f07f223b179e7cde28a68a8ee7385008","CHANGELOG.md":"6aa60aa8ed901b68734f29061bd47bdfaa38329dc23453d26acfafda6743c1b4","Cargo.lock":"d4b366e110775a100240d38f2515f1585b81dae75fface3b2f57f41172a6351e","Cargo.toml":"af759a984eec99ce46ee45bc0cc3fb47f2b5447cdb1908d6e6359b626b190737","Cargo.toml.orig":"0eae7f688b83f15c775806b661fa22e2514af1147aa019e77b96d5677939e729","LICENSE":"45f522cacecb1023856e46df79ca625dfc550c94910078bd8aec6e02880b3d42","README.md":"275ac7bc295e3cc659d28f05261645ac5bd6286476afe2ee3c1ed719f7b6df02","SECURITY.md":"a3335079977c2f13bad59e323fdc1056bdae5adfe55f18d15ac2c930d741828c","benches/buf.rs":"72e6b6120b52d568da068f17c66a793d65602e400c595778581b63092e41d8dc","benches/bytes.rs":"7084e564f8568f52c9fdb76a06e58701aa7f0c776209d29a0f60c38a19748203","benches/bytes_mut.rs":"1326fe6224b26826228e02b4133151e756f38152c2d9cfe66adf83af76c3ec98","ci/miri.sh":"e74475e7aec647a490a1f491b5dac6a60e3c03926a7c7e1898fa3e7c626415c7","ci/panic-abort.sh":"aec2e5427117e533d7a9721a926eb6a9d72f264510066baf2c501357df2d936f","ci/test-stable.sh":"fb751f06f314f728c489b7a7854701f632e24de8d0540ea8cf3449c6a853ac3c","ci/tsan.sh":"466b86b19225dd26c756cf2252cb1973f87a145642c99364b462ed7ceb55c7dd","clippy.toml":"8522f448dfa3b33ac334ce47d233ebb6b58e8ae115e45107a64fc1b4510fe560","src/buf/buf_impl.rs":"a14aa7e5e7fac1d4d1a3617d616af0b478a9a31235b773bcec11255c8c78446e","src/buf/buf_mut.rs":"6cc3800b08dc36eac3dbe0916be67fa535132c69dd920065efb930fd7c7d0a39","src/buf/chain.rs":"27ff0a6fce049c51a24d45003b9741b655c28330b48af23ad1514587760b0c93","src/buf/iter.rs":"d4dca5b7f9b1cb441f22ac1862e28b10086721879163a810955aefb5cd7f3e58","src/buf/limit.rs":"e005ba140b70f68654877c96b981a220477e415ff5c92438c1b0cb9bc866d872","src/buf/mod.rs":"3f60295316d44b510b942abb31a0d975ae488bd4b52c87f5252d73f88f82715a","src/buf/reader.rs":"cda8bc221a1de06c7395d5c6e80f8a5924198eafbc2decc0909082ce8781d789","src/buf/take.rs":"68053cf0edd9e1abd51b0cac9fefd7d3abfc53d2fde1f44d775399720b2d939e","src/buf/uninit_slice.rs":"52629b93ff7a08db45fc69395580b34fa3609fd9309ea01f86e58488b02b08a3","src/buf/vec_deque.rs":"baac165527d1bdfc3bb259380bb4722e70c3f11e8a901e8bab6e4f951b060711","src/buf/writer.rs":"b137608cb40944a5c3e061a73087c5a48e50048dae002d0334a23cf4d3547065","src/bytes.rs":"140ea293c520a0a6c80f7f3aa7ce9a6d33782f6be19a416929450b3fbfcba107","src/bytes_mut.rs":"f9ee7264e02fbc129e017c75ca500e3b7129d6f9929e9531de187bbe59326246","src/fmt/debug.rs":"4d217b8f43e489925bb6904010df617efc63b50a3cc1ab126eec54b43b66eb3e","src/fmt/hex.rs":"54c05ab7d95d7381e499079d63773fabd2672f3c4929b56b02ab87d4495902b5","src/fmt/mod.rs":"b38222dcfff70eb3ffb6ce305b95f3fcfd9fa68cca85693eb2ed01d3da7ddb88","src/lib.rs":"6a59680076e75d4b6f966a2202de615ab1107b066b1c8481398131285b6195cf","src/loom.rs":"7c89f9f5f900d5b9b7c43d08d467957933eba90d5dcff1b38cf9a7e48494a577","src/serde.rs":"3ecd7e828cd4c2b7db93c807cb1548fad209e674df493edf7cda69a7b04d405d","tests/test_buf.rs":"c55dc7ab1a7392c2467a079dc77223fbec35ff54e9eda9b05cc1d4e22cb36626","tests/test_buf_mut.rs":"3e6a12a4f546dbf1a0e1346ab2b7ff707fdaf01a06b21714ca64b141484a76c3","tests/test_bytes.rs":"a13b57a41f86fab4ed12f56306efa7b7cc4d344129786ae7b5075864be9a5ac7","tests/test_bytes_odd_alloc.rs":"ad5df84a35038359413199762c65017989d905e6e965a7b863beaa9962a7e1e8","tests/test_bytes_vec_alloc.rs":"5a0e77cab12b32374b2822df8d9a6479afe68b55c1cba1511ebf4199be532caa","tests/test_chain.rs":"e9f094539bb42b3135f50033c44122a6b44cf0f953e51e8b488f43243f1e7f10","tests/test_debug.rs":"13299107172809e8cbbd823964ac9450cd0d6b6de79f2e6a2e0f44b9225a0593","tests/test_iter.rs":"665e1837c1294d7695ffa352a666ce8673fb46fa603164556524e87d5517a6cb","tests/test_reader.rs":"bf83669d4e0960dad6aa47b46a9a454814fab626eb83572aba914c3d71618f43","tests/test_serde.rs":"2691f891796ba259de0ecf926de05c514f4912cc5fcd3e6a1591efbcd23ed4d0","tests/test_take.rs":"fb34700a8ed75b3c6937a4dee0bffadb64f7c7f735bd9faa8730eb96a9e9b651"},"package":"f61dac84819c6588b558454b194026eb1f09c293b9036ae9b159e74e73ab6cf9"} -diff --git a/vendor/bytes-1.10.0/ci/miri.sh b/vendor/bytes-1.10.0/ci/miri.sh ++{"files":{".cargo_vcs_info.json":"6662417a5f50904e781c49dcc9861b4aa8971a25e7e39e39a012170d9de16ae9",".github/workflows/ci.yml":"1e635153dbcbee2afb3fd51a83340439f07f223b179e7cde28a68a8ee7385008","CHANGELOG.md":"86affa16d7afc66a1500175b3373e8b35ffce525f8ef51e933b0b2b807b928b7","Cargo.lock":"e50cc260bab7149ad4a10ceedc46e5420ca0305027b60b50d8f26abcb24a3e15","Cargo.toml":"eb4c0ac524e35ea8ccd9bed2b79b69565196bf36029ee1149d684622befa1300","Cargo.toml.orig":"0e84b4778f8df559a3656e0707f9e32ff4219119b16cce643f63ecebcfb7c115","LICENSE":"45f522cacecb1023856e46df79ca625dfc550c94910078bd8aec6e02880b3d42","README.md":"275ac7bc295e3cc659d28f05261645ac5bd6286476afe2ee3c1ed719f7b6df02","SECURITY.md":"a3335079977c2f13bad59e323fdc1056bdae5adfe55f18d15ac2c930d741828c","benches/buf.rs":"72e6b6120b52d568da068f17c66a793d65602e400c595778581b63092e41d8dc","benches/bytes.rs":"7084e564f8568f52c9fdb76a06e58701aa7f0c776209d29a0f60c38a19748203","benches/bytes_mut.rs":"1326fe6224b26826228e02b4133151e756f38152c2d9cfe66adf83af76c3ec98","ci/miri.sh":"e74475e7aec647a490a1f491b5dac6a60e3c03926a7c7e1898fa3e7c626415c7","ci/panic-abort.sh":"aec2e5427117e533d7a9721a926eb6a9d72f264510066baf2c501357df2d936f","ci/test-stable.sh":"fb751f06f314f728c489b7a7854701f632e24de8d0540ea8cf3449c6a853ac3c","ci/tsan.sh":"466b86b19225dd26c756cf2252cb1973f87a145642c99364b462ed7ceb55c7dd","clippy.toml":"8522f448dfa3b33ac334ce47d233ebb6b58e8ae115e45107a64fc1b4510fe560","src/buf/buf_impl.rs":"a14aa7e5e7fac1d4d1a3617d616af0b478a9a31235b773bcec11255c8c78446e","src/buf/buf_mut.rs":"6cc3800b08dc36eac3dbe0916be67fa535132c69dd920065efb930fd7c7d0a39","src/buf/chain.rs":"27ff0a6fce049c51a24d45003b9741b655c28330b48af23ad1514587760b0c93","src/buf/iter.rs":"d4dca5b7f9b1cb441f22ac1862e28b10086721879163a810955aefb5cd7f3e58","src/buf/limit.rs":"e005ba140b70f68654877c96b981a220477e415ff5c92438c1b0cb9bc866d872","src/buf/mod.rs":"3f60295316d44b510b942abb31a0d975ae488bd4b52c87f5252d73f88f82715a","src/buf/reader.rs":"cda8bc221a1de06c7395d5c6e80f8a5924198eafbc2decc0909082ce8781d789","src/buf/take.rs":"68053cf0edd9e1abd51b0cac9fefd7d3abfc53d2fde1f44d775399720b2d939e","src/buf/uninit_slice.rs":"52629b93ff7a08db45fc69395580b34fa3609fd9309ea01f86e58488b02b08a3","src/buf/vec_deque.rs":"baac165527d1bdfc3bb259380bb4722e70c3f11e8a901e8bab6e4f951b060711","src/buf/writer.rs":"b137608cb40944a5c3e061a73087c5a48e50048dae002d0334a23cf4d3547065","src/bytes.rs":"1b3935281970640eb2355059584ef75b5655f1abcab6c0bcb60669c5812b34d5","src/bytes_mut.rs":"f9ee7264e02fbc129e017c75ca500e3b7129d6f9929e9531de187bbe59326246","src/fmt/debug.rs":"4d217b8f43e489925bb6904010df617efc63b50a3cc1ab126eec54b43b66eb3e","src/fmt/hex.rs":"54c05ab7d95d7381e499079d63773fabd2672f3c4929b56b02ab87d4495902b5","src/fmt/mod.rs":"b38222dcfff70eb3ffb6ce305b95f3fcfd9fa68cca85693eb2ed01d3da7ddb88","src/lib.rs":"6a59680076e75d4b6f966a2202de615ab1107b066b1c8481398131285b6195cf","src/loom.rs":"7c89f9f5f900d5b9b7c43d08d467957933eba90d5dcff1b38cf9a7e48494a577","src/serde.rs":"3ecd7e828cd4c2b7db93c807cb1548fad209e674df493edf7cda69a7b04d405d","tests/test_buf.rs":"c55dc7ab1a7392c2467a079dc77223fbec35ff54e9eda9b05cc1d4e22cb36626","tests/test_buf_mut.rs":"3e6a12a4f546dbf1a0e1346ab2b7ff707fdaf01a06b21714ca64b141484a76c3","tests/test_bytes.rs":"f290bc434d7e24d831da3f433975f0e9f3dbb555db70080f824ebf2b39806be8","tests/test_bytes_odd_alloc.rs":"ad5df84a35038359413199762c65017989d905e6e965a7b863beaa9962a7e1e8","tests/test_bytes_vec_alloc.rs":"5a0e77cab12b32374b2822df8d9a6479afe68b55c1cba1511ebf4199be532caa","tests/test_chain.rs":"e9f094539bb42b3135f50033c44122a6b44cf0f953e51e8b488f43243f1e7f10","tests/test_debug.rs":"13299107172809e8cbbd823964ac9450cd0d6b6de79f2e6a2e0f44b9225a0593","tests/test_iter.rs":"665e1837c1294d7695ffa352a666ce8673fb46fa603164556524e87d5517a6cb","tests/test_reader.rs":"bf83669d4e0960dad6aa47b46a9a454814fab626eb83572aba914c3d71618f43","tests/test_serde.rs":"2691f891796ba259de0ecf926de05c514f4912cc5fcd3e6a1591efbcd23ed4d0","tests/test_take.rs":"fb34700a8ed75b3c6937a4dee0bffadb64f7c7f735bd9faa8730eb96a9e9b651"},"package":"d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a"} +diff --git a/vendor/bytes-1.10.1/ci/miri.sh b/vendor/bytes-1.10.1/ci/miri.sh index 7df29f360..ca7f41df5 100755 ---- a/vendor/bytes-1.10.0/ci/miri.sh -+++ b/vendor/bytes-1.10.0/ci/miri.sh +--- a/vendor/bytes-1.10.1/ci/miri.sh ++++ b/vendor/bytes-1.10.1/ci/miri.sh @@ -8,3 +8,6 @@ export MIRIFLAGS="-Zmiri-strict-provenance" cargo miri test @@ -38,10 +39,10 @@ index 7df29f360..ca7f41df5 100755 + +# run with wrapping integer overflow instead of panic +cargo miri test --release -diff --git a/vendor/bytes-1.10.0/src/bytes_mut.rs b/vendor/bytes-1.10.0/src/bytes_mut.rs +diff --git a/vendor/bytes-1.10.1/src/bytes_mut.rs b/vendor/bytes-1.10.1/src/bytes_mut.rs index d5db5124b..3026b302a 100644 ---- a/vendor/bytes-1.10.0/src/bytes_mut.rs -+++ b/vendor/bytes-1.10.0/src/bytes_mut.rs +--- a/vendor/bytes-1.10.1/src/bytes_mut.rs ++++ b/vendor/bytes-1.10.1/src/bytes_mut.rs @@ -696,9 +696,15 @@ impl BytesMut { let offset = offset_from(self.ptr.as_ptr(), ptr); @@ -93,11 +94,11 @@ index d5db5124b..3026b302a 100644 } return true; -diff --git a/vendor/bytes-1.10.0/tests/test_bytes.rs b/vendor/bytes-1.10.0/tests/test_bytes.rs -index c283a8081..d0f1f4ac9 100644 ---- a/vendor/bytes-1.10.0/tests/test_bytes.rs -+++ b/vendor/bytes-1.10.0/tests/test_bytes.rs -@@ -1634,3 +1634,16 @@ fn owned_safe_drop_on_as_ref_panic() { +diff --git a/vendor/bytes-1.10.1/tests/test_bytes.rs b/vendor/bytes-1.10.1/tests/test_bytes.rs +index 613efc886..b4e689bc8 100644 +--- a/vendor/bytes-1.10.1/tests/test_bytes.rs ++++ b/vendor/bytes-1.10.1/tests/test_bytes.rs +@@ -1647,3 +1647,16 @@ fn owned_safe_drop_on_as_ref_panic() { assert!(result.is_err()); assert_eq!(drop_counter.get(), 1); } @@ -114,6 +115,6 @@ index c283a8081..d0f1f4ac9 100644 + // This call relies on the corrupted cap and may cause UB & HBO + b.put_u8(b'h'); +} --- -2.45.4 +-- +2.43.0 \ No newline at end of file diff --git a/SPECS/rust/rust.spec b/SPECS/rust/rust.spec index 24ef456ccf9..caaab0d5ed3 100644 --- a/SPECS/rust/rust.spec +++ b/SPECS/rust/rust.spec @@ -165,6 +165,16 @@ rm %{buildroot}%{_docdir}/clippy/{LICENSE-APACHE,LICENSE-MIT} rm %{buildroot}%{_docdir}/rustfmt/{LICENSE-APACHE,LICENSE-MIT} rm %{buildroot}%{_docdir}/docs/html/.lock +rustdoc_licensedir="%{buildroot}%{_defaultlicensedir}/%{name}-doc/bundled" +rustdoc_htmldir="%{buildroot}%{_docdir}/docs/html" +mkdir -p "$rustdoc_licensedir" +mv "%{buildroot}%{_docdir}/rustc/licenses" "$rustdoc_licensedir/spdx" +find "$rustdoc_htmldir" -type f \( -iname '*license*' -o -iname '*copyright*' \) | while read -r f; do + install -Dm644 "$f" "$rustdoc_licensedir/html/${f#$rustdoc_htmldir/}" + rm -f "$f" +done +find "$rustdoc_htmldir" -type f -iname '*bsd*' -delete + %ldconfig_scriptlets %files @@ -187,7 +197,7 @@ rm %{buildroot}%{_docdir}/docs/html/.lock %files doc %license LICENSE-APACHE LICENSE-MIT LICENSE-THIRD-PARTY COPYRIGHT -%license %{_docdir}/rustc/licenses/* +%license %{_defaultlicensedir}/%{name}-doc/bundled %doc %{_docdir}/rustc/README.md %doc %{_docdir}/cargo/* %doc %{_docdir}/rustfmt/* @@ -201,6 +211,7 @@ rm %{buildroot}%{_docdir}/docs/html/.lock %changelog * Tue Jul 28 2026 SumitJenaHCL - 1.90.0-10 - Patch for CVE-2026-47143 +- Fix rust-doc license check warnings * Thu Jun 04 2026 BinduSri Adabala - 1.90.0-9 - Add patch for CVE-2026-5222, CVE-2026-5223 & CVE-2026-40034 From d81160f95bb6b02db5f446c96cb59ae883dc1766 Mon Sep 17 00:00:00 2001 From: SumitJenaHCL Date: Thu, 30 Jul 2026 14:34:49 +0530 Subject: [PATCH 3/3] Address rust PR review feedback (changelog, patch, license warnings) - Restore changelog release-number order (1.90.0-1 before 1.86.0-10) - Note the CVE-2026-25541.patch update in the changelog - Fix CVE-2026-25541.patch: add trailing newline and symmetric checksum no-newline marker (silences 'patch unexpectedly ends in middle of line') - Fix rust-doc license warnings: move bundled SPDX license texts out of the doc tree into the license dir, and add license_file_exceptions.json entries for the HTML doc assets --- SPECS/rust/CVE-2026-25541.patch | 3 ++- SPECS/rust/rust.spec | 23 ++++++++----------- .../package/license_file_exceptions.json | 13 +++++++++++ 3 files changed, 25 insertions(+), 14 deletions(-) diff --git a/SPECS/rust/CVE-2026-25541.patch b/SPECS/rust/CVE-2026-25541.patch index 982fe1a06e9..f7420fe5d20 100644 --- a/SPECS/rust/CVE-2026-25541.patch +++ b/SPECS/rust/CVE-2026-25541.patch @@ -28,6 +28,7 @@ index b5315b9ac..0a926c9de 100644 -{"files":{".cargo_vcs_info.json":"6662417a5f50904e781c49dcc9861b4aa8971a25e7e39e39a012170d9de16ae9",".github/workflows/ci.yml":"1e635153dbcbee2afb3fd51a83340439f07f223b179e7cde28a68a8ee7385008","CHANGELOG.md":"86affa16d7afc66a1500175b3373e8b35ffce525f8ef51e933b0b2b807b928b7","Cargo.lock":"e50cc260bab7149ad4a10ceedc46e5420ca0305027b60b50d8f26abcb24a3e15","Cargo.toml":"eb4c0ac524e35ea8ccd9bed2b79b69565196bf36029ee1149d684622befa1300","Cargo.toml.orig":"0e84b4778f8df559a3656e0707f9e32ff4219119b16cce643f63ecebcfb7c115","LICENSE":"45f522cacecb1023856e46df79ca625dfc550c94910078bd8aec6e02880b3d42","README.md":"275ac7bc295e3cc659d28f05261645ac5bd6286476afe2ee3c1ed719f7b6df02","SECURITY.md":"a3335079977c2f13bad59e323fdc1056bdae5adfe55f18d15ac2c930d741828c","benches/buf.rs":"72e6b6120b52d568da068f17c66a793d65602e400c595778581b63092e41d8dc","benches/bytes.rs":"7084e564f8568f52c9fdb76a06e58701aa7f0c776209d29a0f60c38a19748203","benches/bytes_mut.rs":"1326fe6224b26826228e02b4133151e756f38152c2d9cfe66adf83af76c3ec98","ci/miri.sh":"13b2db3432fcdf9e2db6ef9e6ec20d063c0ce63542981a6f77e09306e1e2198e","ci/panic-abort.sh":"aec2e5427117e533d7a9721a926eb6a9d72f264510066baf2c501357df2d936f","ci/test-stable.sh":"fb751f06f314f728c489b7a7854701f632e24de8d0540ea8cf3449c6a853ac3c","ci/tsan.sh":"466b86b19225dd26c756cf2252cb1973f87a145642c99364b462ed7ceb55c7dd","clippy.toml":"8522f448dfa3b33ac334ce47d233ebb6b58e8ae115e45107a64fc1b4510fe560","src/buf/buf_impl.rs":"a14aa7e5e7fac1d4d1a3617d616af0b478a9a31235b773bcec11255c8c78446e","src/buf/buf_mut.rs":"6cc3800b08dc36eac3dbe0916be67fa535132c69dd920065efb930fd7c7d0a39","src/buf/chain.rs":"27ff0a6fce049c51a24d45003b9741b655c28330b48af23ad1514587760b0c93","src/buf/iter.rs":"d4dca5b7f9b1cb441f22ac1862e28b10086721879163a810955aefb5cd7f3e58","src/buf/limit.rs":"e005ba140b70f68654877c96b981a220477e415ff5c92438c1b0cb9bc866d872","src/buf/mod.rs":"3f60295316d44b510b942abb31a0d975ae488bd4b52c87f5252d73f88f82715a","src/buf/reader.rs":"cda8bc221a1de06c7395d5c6e80f8a5924198eafbc2decc0909082ce8781d789","src/buf/take.rs":"68053cf0edd9e1abd51b0cac9fefd7d3abfc53d2fde1f44d775399720b2d939e","src/buf/uninit_slice.rs":"52629b93ff7a08db45fc69395580b34fa3609fd9309ea01f86e58488b02b08a3","src/buf/vec_deque.rs":"baac165527d1bdfc3bb259380bb4722e70c3f11e8a901e8bab6e4f951b060711","src/buf/writer.rs":"b137608cb40944a5c3e061a73087c5a48e50048dae002d0334a23cf4d3547065","src/bytes.rs":"1b3935281970640eb2355059584ef75b5655f1abcab6c0bcb60669c5812b34d5","src/bytes_mut.rs":"0498dcaf2b39c0cc4b39c398e095bb4cc0bc001ebc2d90ffd067308e8566b772","src/fmt/debug.rs":"4d217b8f43e489925bb6904010df617efc63b50a3cc1ab126eec54b43b66eb3e","src/fmt/hex.rs":"54c05ab7d95d7381e499079d63773fabd2672f3c4929b56b02ab87d4495902b5","src/fmt/mod.rs":"b38222dcfff70eb3ffb6ce305b95f3fcfd9fa68cca85693eb2ed01d3da7ddb88","src/lib.rs":"6a59680076e75d4b6f966a2202de615ab1107b066b1c8481398131285b6195cf","src/loom.rs":"7c89f9f5f900d5b9b7c43d08d467957933eba90d5dcff1b38cf9a7e48494a577","src/serde.rs":"3ecd7e828cd4c2b7db93c807cb1548fad209e674df493edf7cda69a7b04d405d","tests/test_buf.rs":"c55dc7ab1a7392c2467a079dc77223fbec35ff54e9eda9b05cc1d4e22cb36626","tests/test_buf_mut.rs":"3e6a12a4f546dbf1a0e1346ab2b7ff707fdaf01a06b21714ca64b141484a76c3","tests/test_bytes.rs":"1ef7050f74cdf7c4da1a52a0371303bab6bc181cc91eab6b0b1e20073afc4d9e","tests/test_bytes_odd_alloc.rs":"ad5df84a35038359413199762c65017989d905e6e965a7b863beaa9962a7e1e8","tests/test_bytes_vec_alloc.rs":"5a0e77cab12b32374b2822df8d9a6479afe68b55c1cba1511ebf4199be532caa","tests/test_chain.rs":"e9f094539bb42b3135f50033c44122a6b44cf0f953e51e8b488f43243f1e7f10","tests/test_debug.rs":"13299107172809e8cbbd823964ac9450cd0d6b6de79f2e6a2e0f44b9225a0593","tests/test_iter.rs":"665e1837c1294d7695ffa352a666ce8673fb46fa603164556524e87d5517a6cb","tests/test_reader.rs":"bf83669d4e0960dad6aa47b46a9a454814fab626eb83572aba914c3d71618f43","tests/test_serde.rs":"2691f891796ba259de0ecf926de05c514f4912cc5fcd3e6a1591efbcd23ed4d0","tests/test_take.rs":"fb34700a8ed75b3c6937a4dee0bffadb64f7c7f735bd9faa8730eb96a9e9b651"},"package":"d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a"} \ No newline at end of file +{"files":{".cargo_vcs_info.json":"6662417a5f50904e781c49dcc9861b4aa8971a25e7e39e39a012170d9de16ae9",".github/workflows/ci.yml":"1e635153dbcbee2afb3fd51a83340439f07f223b179e7cde28a68a8ee7385008","CHANGELOG.md":"86affa16d7afc66a1500175b3373e8b35ffce525f8ef51e933b0b2b807b928b7","Cargo.lock":"e50cc260bab7149ad4a10ceedc46e5420ca0305027b60b50d8f26abcb24a3e15","Cargo.toml":"eb4c0ac524e35ea8ccd9bed2b79b69565196bf36029ee1149d684622befa1300","Cargo.toml.orig":"0e84b4778f8df559a3656e0707f9e32ff4219119b16cce643f63ecebcfb7c115","LICENSE":"45f522cacecb1023856e46df79ca625dfc550c94910078bd8aec6e02880b3d42","README.md":"275ac7bc295e3cc659d28f05261645ac5bd6286476afe2ee3c1ed719f7b6df02","SECURITY.md":"a3335079977c2f13bad59e323fdc1056bdae5adfe55f18d15ac2c930d741828c","benches/buf.rs":"72e6b6120b52d568da068f17c66a793d65602e400c595778581b63092e41d8dc","benches/bytes.rs":"7084e564f8568f52c9fdb76a06e58701aa7f0c776209d29a0f60c38a19748203","benches/bytes_mut.rs":"1326fe6224b26826228e02b4133151e756f38152c2d9cfe66adf83af76c3ec98","ci/miri.sh":"e74475e7aec647a490a1f491b5dac6a60e3c03926a7c7e1898fa3e7c626415c7","ci/panic-abort.sh":"aec2e5427117e533d7a9721a926eb6a9d72f264510066baf2c501357df2d936f","ci/test-stable.sh":"fb751f06f314f728c489b7a7854701f632e24de8d0540ea8cf3449c6a853ac3c","ci/tsan.sh":"466b86b19225dd26c756cf2252cb1973f87a145642c99364b462ed7ceb55c7dd","clippy.toml":"8522f448dfa3b33ac334ce47d233ebb6b58e8ae115e45107a64fc1b4510fe560","src/buf/buf_impl.rs":"a14aa7e5e7fac1d4d1a3617d616af0b478a9a31235b773bcec11255c8c78446e","src/buf/buf_mut.rs":"6cc3800b08dc36eac3dbe0916be67fa535132c69dd920065efb930fd7c7d0a39","src/buf/chain.rs":"27ff0a6fce049c51a24d45003b9741b655c28330b48af23ad1514587760b0c93","src/buf/iter.rs":"d4dca5b7f9b1cb441f22ac1862e28b10086721879163a810955aefb5cd7f3e58","src/buf/limit.rs":"e005ba140b70f68654877c96b981a220477e415ff5c92438c1b0cb9bc866d872","src/buf/mod.rs":"3f60295316d44b510b942abb31a0d975ae488bd4b52c87f5252d73f88f82715a","src/buf/reader.rs":"cda8bc221a1de06c7395d5c6e80f8a5924198eafbc2decc0909082ce8781d789","src/buf/take.rs":"68053cf0edd9e1abd51b0cac9fefd7d3abfc53d2fde1f44d775399720b2d939e","src/buf/uninit_slice.rs":"52629b93ff7a08db45fc69395580b34fa3609fd9309ea01f86e58488b02b08a3","src/buf/vec_deque.rs":"baac165527d1bdfc3bb259380bb4722e70c3f11e8a901e8bab6e4f951b060711","src/buf/writer.rs":"b137608cb40944a5c3e061a73087c5a48e50048dae002d0334a23cf4d3547065","src/bytes.rs":"1b3935281970640eb2355059584ef75b5655f1abcab6c0bcb60669c5812b34d5","src/bytes_mut.rs":"f9ee7264e02fbc129e017c75ca500e3b7129d6f9929e9531de187bbe59326246","src/fmt/debug.rs":"4d217b8f43e489925bb6904010df617efc63b50a3cc1ab126eec54b43b66eb3e","src/fmt/hex.rs":"54c05ab7d95d7381e499079d63773fabd2672f3c4929b56b02ab87d4495902b5","src/fmt/mod.rs":"b38222dcfff70eb3ffb6ce305b95f3fcfd9fa68cca85693eb2ed01d3da7ddb88","src/lib.rs":"6a59680076e75d4b6f966a2202de615ab1107b066b1c8481398131285b6195cf","src/loom.rs":"7c89f9f5f900d5b9b7c43d08d467957933eba90d5dcff1b38cf9a7e48494a577","src/serde.rs":"3ecd7e828cd4c2b7db93c807cb1548fad209e674df493edf7cda69a7b04d405d","tests/test_buf.rs":"c55dc7ab1a7392c2467a079dc77223fbec35ff54e9eda9b05cc1d4e22cb36626","tests/test_buf_mut.rs":"3e6a12a4f546dbf1a0e1346ab2b7ff707fdaf01a06b21714ca64b141484a76c3","tests/test_bytes.rs":"f290bc434d7e24d831da3f433975f0e9f3dbb555db70080f824ebf2b39806be8","tests/test_bytes_odd_alloc.rs":"ad5df84a35038359413199762c65017989d905e6e965a7b863beaa9962a7e1e8","tests/test_bytes_vec_alloc.rs":"5a0e77cab12b32374b2822df8d9a6479afe68b55c1cba1511ebf4199be532caa","tests/test_chain.rs":"e9f094539bb42b3135f50033c44122a6b44cf0f953e51e8b488f43243f1e7f10","tests/test_debug.rs":"13299107172809e8cbbd823964ac9450cd0d6b6de79f2e6a2e0f44b9225a0593","tests/test_iter.rs":"665e1837c1294d7695ffa352a666ce8673fb46fa603164556524e87d5517a6cb","tests/test_reader.rs":"bf83669d4e0960dad6aa47b46a9a454814fab626eb83572aba914c3d71618f43","tests/test_serde.rs":"2691f891796ba259de0ecf926de05c514f4912cc5fcd3e6a1591efbcd23ed4d0","tests/test_take.rs":"fb34700a8ed75b3c6937a4dee0bffadb64f7c7f735bd9faa8730eb96a9e9b651"},"package":"d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a"} +\ No newline at end of file diff --git a/vendor/bytes-1.10.1/ci/miri.sh b/vendor/bytes-1.10.1/ci/miri.sh index 7df29f360..ca7f41df5 100755 --- a/vendor/bytes-1.10.1/ci/miri.sh @@ -117,4 +118,4 @@ index 613efc886..b4e689bc8 100644 +} -- -2.43.0 \ No newline at end of file +2.43.0 diff --git a/SPECS/rust/rust.spec b/SPECS/rust/rust.spec index caaab0d5ed3..598ebf79894 100644 --- a/SPECS/rust/rust.spec +++ b/SPECS/rust/rust.spec @@ -165,15 +165,11 @@ rm %{buildroot}%{_docdir}/clippy/{LICENSE-APACHE,LICENSE-MIT} rm %{buildroot}%{_docdir}/rustfmt/{LICENSE-APACHE,LICENSE-MIT} rm %{buildroot}%{_docdir}/docs/html/.lock -rustdoc_licensedir="%{buildroot}%{_defaultlicensedir}/%{name}-doc/bundled" -rustdoc_htmldir="%{buildroot}%{_docdir}/docs/html" -mkdir -p "$rustdoc_licensedir" -mv "%{buildroot}%{_docdir}/rustc/licenses" "$rustdoc_licensedir/spdx" -find "$rustdoc_htmldir" -type f \( -iname '*license*' -o -iname '*copyright*' \) | while read -r f; do - install -Dm644 "$f" "$rustdoc_licensedir/html/${f#$rustdoc_htmldir/}" - rm -f "$f" -done -find "$rustdoc_htmldir" -type f -iname '*bsd*' -delete +# Move bundled third-party license texts out of %{_docdir} (where rpm auto-tags them %doc) +# into the license dir, so they are classified only as %license and not flagged as duplicates. +mkdir -p %{buildroot}%{_licensedir}/rust-doc +mv %{buildroot}%{_docdir}/rustc/licenses/* %{buildroot}%{_licensedir}/rust-doc/ +rmdir %{buildroot}%{_docdir}/rustc/licenses %ldconfig_scriptlets @@ -197,7 +193,7 @@ find "$rustdoc_htmldir" -type f -iname '*bsd*' -delete %files doc %license LICENSE-APACHE LICENSE-MIT LICENSE-THIRD-PARTY COPYRIGHT -%license %{_defaultlicensedir}/%{name}-doc/bundled +%license %{_licensedir}/rust-doc/* %doc %{_docdir}/rustc/README.md %doc %{_docdir}/cargo/* %doc %{_docdir}/rustfmt/* @@ -211,6 +207,7 @@ find "$rustdoc_htmldir" -type f -iname '*bsd*' -delete %changelog * Tue Jul 28 2026 SumitJenaHCL - 1.90.0-10 - Patch for CVE-2026-47143 +- Update CVE-2026-25541.patch to apply cleanly against vendored bytes 1.10.1 - Fix rust-doc license check warnings * Thu Jun 04 2026 BinduSri Adabala - 1.90.0-9 @@ -238,12 +235,12 @@ find "$rustdoc_htmldir" -type f -iname '*bsd*' -delete * Mon Jan 19 2026 Kanishk Bansal - 1.90.0-2 - Bump to rebuild with updated glibc -* Mon Nov 10 2025 Andrew Phelps - 1.86.0-10 -- Bump to rebuild with updated glibc - * Tue Oct 28 2025 Kavya Sree Kaitepalli - 1.90.0-1 - Upgrade to 1.90.0 +* Mon Nov 10 2025 Andrew Phelps - 1.86.0-10 +- Bump to rebuild with updated glibc + * Thu Oct 23 2025 Kanishk Bansal - 1.86.0-9 - Bump to rebuild with updated glibc diff --git a/toolkit/resources/manifests/package/license_file_exceptions.json b/toolkit/resources/manifests/package/license_file_exceptions.json index 150eb720945..548e0202f6e 100644 --- a/toolkit/resources/manifests/package/license_file_exceptions.json +++ b/toolkit/resources/manifests/package/license_file_exceptions.json @@ -60,6 +60,19 @@ "IgnoredFilesRegexList": [ "^/usr/share/man/man3/SD_NOTICE\\.3\\.gz$" ] + }, + { + "_comment1": "Rust HTML documentation embeds font and third-party license/copyright files.", + "_comment2": "These are licenses for fonts/tooling used in the web docs, not the main package licenses.", + "PackageName": "rust-doc", + "IgnoredFilesRegexList": [ + "^/usr/share/doc/docs/html/.*/fonts/.*\\.txt$", + "^/usr/share/doc/docs/html/static\\.files/.*LICENSE.*\\.txt$", + "^/usr/share/doc/docs/html/static\\.files/.*COPYRIGHT.*\\.txt$", + "^/usr/share/doc/docs/html/static\\.files/.*LICENSE.*\\.md$", + "^/usr/share/doc/docs/html/core/.*/fn\\..*absd.*\\.html$", + "^/usr/share/doc/docs/html/rustc/platform-support/.*bsd.*\\.html$" + ] } ], "GlobalExceptionsRegexList": [