On 10/02/2017 12:11 PM, Thierry Vignaud wrote:
On 28 September 2017 at 16:06, Panu Matilainen <pmati...@redhat.com> wrote:
There aren't that many changes since rc1, but enough to warrant a second
release candidate instead of going for final. The important ones being:
- Fix a bug of file triggers failing on some packages (MgBug:18797, in
4.13.x already)
- Fix a regression on 32bit architectures on generation of packages over 2GB
in size (RhBug:1492587)
- Fix rpm following arbitrary directory symlinks on installation
(CVE-2017-7500)
- Fix rpm following symlinks on file creation (CVE-2017-7501)
- Adjust verification to match the new directory symlink rule
- Forbid 'if' richops in 'or' context and 'unless' richops in 'and' context
As usual, the details + download info at:
http://rpm.org/wiki/Releases/4.14.0
Oh and release notes changed to use SHA256 instead of SHA1 for the source
checksum. Guess it's about time.
On behalf of the rpm-team,
It looks like some dep generators are no more run:
We've one dep generator carried by another pkg (so unchanged).
But since we upgrade to 4.14, those deps are no more run:
$ cat /usr/lib/rpm/fileattrs/perl_from_meta.attr
%__perl_from_meta_requires %{_rpmconfigdir}/mageia/perl.req-from-meta
%__perl_from_meta_path /(META.json|(MY|)META.yml)$
$ rpm --eval %{_rpmconfigdir}/mageia/perl.req-from-meta
/usr/lib/rpm/mageia/perl.req-from-meta
$ ll /usr/lib/rpm/mageia/perl.req-from-meta
-rwxr-xr-x 1 rpm rpm 1428 Her 2 10:35 /usr/lib/rpm/mageia/perl.req-from-meta*
$ rpmbuild -bb --define "_topdir $PWD" --define "_tmppath
$PWD/BUILDROOT" --without build $PWD/SPECS/perl-Term-Clui.spec
--rpmfcdebug -v -vv
(...)
D: execv(/usr/lib/rpm/mageia/perl_base.req) pid 20465
D: waitpid(20465) rc 20465 status 0
D: execv(/usr/lib/rpm/mageia/perl_base.req) pid 20467
D: waitpid(20467) rc 20467 status 0
D: execv(/usr/lib/rpm/mageia/perl_base.req) pid 20469
D: waitpid(20469) rc 20469 status 0
D: execv(/usr/lib/rpm/perl.prov) pid 20471
D: waitpid(20471) rc 20471 status 0
D: execv(/usr/lib/rpm/perl.req) pid 20474
D: waitpid(20474) rc 20474 status 0
D: execv(/usr/lib/rpm/mageia/perl_base.req) pid 20475
D: waitpid(20475) rc 20475 status 0
D: execv(/usr/lib/rpm/perl.prov) pid 20477
D: waitpid(20477) rc 20477 status 0
D: execv(/usr/lib/rpm/perl.req) pid 20480
D: waitpid(20480) rc 20480 status 0
^so perl.req-from-meta is no more run, only other scripts
(...)
3
/home/tv/mga/pkgs/perl-Term-Clui/BUILDROOT/perl-Term-Clui-1.710.0-2.mga7.x86_64/usr/lib/perl5/vendor_perl/5.26.1/Term/Clui/FileSelect.pm
Perl5 module source text [perl_base,perllib]
R perl-base >= 2:5.26.1
P perl(Term::Clui::FileSelect) = 1.710.0
R perl(Exporter)
4
/home/tv/mga/pkgs/perl-Term-Clui/BUILDROOT/perl-Term-Clui-1.710.0-2.mga7.x86_64/usr/share/doc/perl-Term-Clui
directory [none]
5
/home/tv/mga/pkgs/perl-Term-Clui/BUILDROOT/perl-Term-Clui-1.710.0-2.mga7.x86_64/usr/share/doc/perl-Term-Clui/Changes
ASCII text [none]
6
/home/tv/mga/pkgs/perl-Term-Clui/BUILDROOT/perl-Term-Clui-1.710.0-2.mga7.x86_64/usr/share/doc/perl-Term-Clui/META.yml
ASCII text [perl_from_meta]
7
/home/tv/mga/pkgs/perl-Term-Clui/BUILDROOT/perl-Term-Clui-1.710.0-2.mga7.x86_64/usr/share/doc/perl-Term-Clui/MYMETA.yml
ASCII text [perl_from_meta]
^ so fileattr did matched but the corresponding generator was not run
(missing in above execve() list)
Any idea?
It's probably this:
https://github.com/rpm-software-management/rpm/commit/816c7cf3fdae5c45de02a42a2245549778e2ca80
If so, the following in the spec should work around it:
%undefine __global_requires_exclude_from
%undefine __global_provides_exclude_from
I never really agreed to filtering doc dependencies because there's no
reason docs could not have dependencies, they just tend to be slightly
different from other docs.
Just wondering if those files should really be %doc - I've no idea what
they do, but metadata doesn't really sound like documentation. Does the
package work if installed with --nodocs?
- Panu -
_______________________________________________
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint
