Re: [OE-core] [dunfell][PATCH] rpm: fix CVE-2021-3421

2021-06-25 Thread Minjae Kim
Hi Steve and Anuj I tested it on qemu, it works well. - git package is installed by rpm command. - git package is removed by rpm command. Could you tell me what is needed to verify for RPM? Thanks, Minjae Kim. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group.

Re: [OE-core] [dunfell][PATCH] rpm: fix CVE-2021-3421

2021-06-25 Thread Steve Sakoman
On Thu, Jun 24, 2021 at 7:30 PM Minjae Kim wrote: > > In order to fix CVE-2021-3421, I added RPMSIGTAG_FILESIGNATURES and > RPMSIGTAG_FILESIGNATURELENGTH in lib/rpmtag.h. > So It is possible to build. but I cannot test on target yet. FWIW, a-full test on the autobuilder passed with this patch

Re: [OE-core] [dunfell][PATCH] rpm: fix CVE-2021-3421

2021-06-24 Thread Minjae Kim
In order to fix CVE-2021-3421, I added RPMSIGTAG_FILESIGNATURES and RPMSIGTAG_FILESIGNATURELENGTH in lib/rpmtag.h. So It is possible to build. but I cannot test on target yet. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#153263):

Re: [OE-core] [dunfell][PATCH] rpm: fix CVE-2021-3421

2021-06-24 Thread Anuj Mittal
> + /* Bump reference count for return. */ diff --git a/lib/rpmtag.h > +b/lib/rpmtag.h index 8c718b31b5..d562572c6f 100644 > +--- a/lib/rpmtag.h > b/lib/rpmtag.h > +@@ -65,6 +65,8 @@ typedef enum rpmTag_e { > + RPMTAG_LONGARCHIVESIZE = RPMTAG_SIG_BASE+15, /* l */ > + /*