{"object_kind":"push","event_name":"push","before":"48160cda9726e37771dc79ad3427c75fd8f9c0d7","after":"fd83a13c6dc1ccddeff628df76406ab6554ecb4d","ref":"refs/heads/main","ref_protected":false,"checkout_sha":"fd83a13c6dc1ccddeff628df76406ab6554ecb4d","message":null,"user_id":1255007,"user_name":"Josephine Pfeiffer","user_username":"josie","user_email":"josie@redhat.com","user_avatar":"https://gitlab.freedesktop.org/uploads/-/system/user/avatar/1255007/avatar.png","project_id":411,"project":{"id":411,"name":"NetworkManager","description":"NetworkManager — network management daemon","web_url":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager","avatar_url":"https://gitlab.freedesktop.org/uploads/-/system/project/avatar/411/nm_logo.png","git_ssh_url":"git@ssh.gitlab.freedesktop.org:NetworkManager/NetworkManager.git","git_http_url":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager.git","namespace":"NetworkManager","visibility_level":20,"path_with_namespace":"NetworkManager/NetworkManager","default_branch":"main","ci_config_path":"","homepage":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager","url":"git@ssh.gitlab.freedesktop.org:NetworkManager/NetworkManager.git","ssh_url":"git@ssh.gitlab.freedesktop.org:NetworkManager/NetworkManager.git","http_url":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager.git"},"commits":[{"id":"a8e87381a3e70060abd721d9a347f42b2ba68e6e","message":"core: 802.1x: reject ca-path for private connections\n\nA private connection's 802.1X files were passed to the supplicant as blobs.\nDirectories cannot be blobs, so ca-path and phase2-ca-path still emitted a\nraw path. With no ca-cert set, wpa_supplicant trusts that directory alone\nand still reports the server as verified, so the owner of the profile\npicks the CA that authenticates the network.\n\nUse g_set_error() rather than the sibling ca-cert's g_return_val_if_fail(),\nwhich leaves the GError unset while callers log error->message.\n\nFixes: e85cc46d0b36 ('core: pass certificates as blobs to supplicant for private connections')\nFixes CVE-2026-19685\nhttps://issues.redhat.com/browse/RHEL-189084\n","title":"core: 802.1x: reject ca-path for private connections","timestamp":"2026-08-20T08:39:49+02:00","url":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/a8e87381a3e70060abd721d9a347f42b2ba68e6e","author":{"name":"Josephine Pfeiffer","email":"josie@redhat.com"},"added":[],"modified":["NEWS","src/core/supplicant/nm-supplicant-config.c","src/core/supplicant/tests/test-supplicant-config.c"],"removed":[]},{"id":"fd83a13c6dc1ccddeff628df76406ab6554ecb4d","message":"merge: branch 'jp/8021x-ca-path-private'\n\nReject ca-path and phase2-ca-path on private 802.1X connections, where the\ndirectory was still handed to the supplicant as a raw path and let the\nprofile owner choose the CA that verifies the network.\n\nhttps://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2513\n\nFixes CVE-2026-19685\nResolves: https://issues.redhat.com/browse/RHEL-189084\n","title":"merge: branch 'jp/8021x-ca-path-private'","timestamp":"2026-08-20T08:40:27+02:00","url":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/fd83a13c6dc1ccddeff628df76406ab6554ecb4d","author":{"name":"Josephine Pfeiffer","email":"josie@redhat.com"},"added":[],"modified":["NEWS","src/core/supplicant/nm-supplicant-config.c","src/core/supplicant/tests/test-supplicant-config.c"],"removed":[]}],"total_commits_count":2,"push_options":{},"repository":{"name":"NetworkManager","url":"git@ssh.gitlab.freedesktop.org:NetworkManager/NetworkManager.git","description":"NetworkManager — network management daemon","homepage":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager","git_http_url":"https://gitlab.freedesktop.org/NetworkManager/NetworkManager.git","git_ssh_url":"git@ssh.gitlab.freedesktop.org:NetworkManager/NetworkManager.git","visibility_level":20}}