[meego-commits] 5127: Changes to Trunk/rpm

Anas Nashif nashif at linux.intel.com
Wed Jun 30 21:57:38 UTC 2010


Hi,
I have made the following changes to rpm in project Trunk. Please review and accept ASAP.

Thank You,
Anas Nashif

[This message was auto-generated]

---

Request #5127:

  submit:   Trunk:Testing/rpm(r10) -> Trunk/rpm


Message:
    * Sun Jun 20 2010 Anas Nashif <anas.nashif at intel.com> - 4.8.1
- Update to 4.8.1
  Security:
    * Remove SUID/SGID bits from hardlinked executables on upgrade too
      (CVE-2010-2059, RhBug:598775) [1]
    * Remove POSIX capabilities from hardlinked executables on upgrade and
      erase (CVE-2010-2059?, RhBug:598775)
  General bugfixes and enhancements:
    * Fix "empty reply from server" curl-syndrome with URL retrieval,
      regression introduced in 4.6.0 (RhBug:598988)
    * Fix transaction hanging on unrelated filesystems (RhBug:547548)
    * Fix crash on URL retrieve to read-only location on install (RhBug:557118)
    * Fix verification error code not to depend on verbosity
      level (RhBug:557101)
    * Fix return from chroot() on verify (RhBug:590588)
    * Permit DOS-style line-endings in PGP ASCII armors (RhBug:532992)
    * Fix :pgpsig header format extension sometimes showing numbers for
      known hash types (RhBug:587755)
    * Fix :deptype header format extension failing to show some flag
      combinations
    * Fix error message on package conflicts against installed packages
    * Fix erased packages causing misleading disk-space checking
      messages (RhBug:561160)
    * Document --conflicts option in manpage (ticket #126)
  Package building:
    * Fix %defattr(-) syntax, regression introduced in  (SuseBug:594310)
    * Fix spec parser eating empty lines in %prep section, regression
      introduced in 4.6.0 (RhBug:573339)
    * Fix NOSOURCE/NOPATCH tag generation of nosrc packages, regression
      introduced in 4.6.0
    * Fix crash in the spec parser (RhBug:597835, SuseBug:582599)
    * Fix copying of translated tags into source rpms (RhBug:578299)
    * Only extract dependencies from .desktop files with Type=Application
      and Exec= entries (ticket #150)
    * Work around GNU tar debug output breaking rpmbuild -t (SuseBug:558475)

State:   new          2010-06-30T09:53:59 nashif
Comment: None



changes files:
--------------
--- rpm.changes
+++ rpm.changes
@@ -0,0 +1,38 @@
+* Sun Jun 20 2010 Anas Nashif <anas.nashif at intel.com> - 4.8.1
+- Update to 4.8.1
+  Security:
+    * Remove SUID/SGID bits from hardlinked executables on upgrade too
+      (CVE-2010-2059, RhBug:598775) [1]
+    * Remove POSIX capabilities from hardlinked executables on upgrade and
+      erase (CVE-2010-2059?, RhBug:598775)
+
+  General bugfixes and enhancements:
+    * Fix "empty reply from server" curl-syndrome with URL retrieval,
+      regression introduced in 4.6.0 (RhBug:598988)
+    * Fix transaction hanging on unrelated filesystems (RhBug:547548)
+    * Fix crash on URL retrieve to read-only location on install (RhBug:557118)
+    * Fix verification error code not to depend on verbosity
+      level (RhBug:557101)
+    * Fix return from chroot() on verify (RhBug:590588)
+    * Permit DOS-style line-endings in PGP ASCII armors (RhBug:532992)
+    * Fix :pgpsig header format extension sometimes showing numbers for
+      known hash types (RhBug:587755)
+    * Fix :deptype header format extension failing to show some flag
+      combinations
+    * Fix error message on package conflicts against installed packages
+    * Fix erased packages causing misleading disk-space checking
+      messages (RhBug:561160)
+    * Document --conflicts option in manpage (ticket #126)
+
+  Package building:
+    * Fix %defattr(-) syntax, regression introduced in  (SuseBug:594310)
+    * Fix spec parser eating empty lines in %prep section, regression
+      introduced in 4.6.0 (RhBug:573339)
+    * Fix NOSOURCE/NOPATCH tag generation of nosrc packages, regression
+      introduced in 4.6.0
+    * Fix crash in the spec parser (RhBug:597835, SuseBug:582599)
+    * Fix copying of translated tags into source rpms (RhBug:578299)
+    * Only extract dependencies from .desktop files with Type=Application
+      and Exec= entries (ticket #150)
+    * Work around GNU tar debug output breaking rpmbuild -t (SuseBug:558475)
+

old:
----
  rpm-4.8.0-erasure-dsi.patch
  rpm-4.8.0-lazy-statfs.patch
  rpm-4.8.0-python-bytecompile.patch
  rpm-4.8.0-pythondeps-parallel.patch
  rpm-4.8.0-url-segfault.patch
  rpm-4.8.0-verify-exitcode.patch
  rpm-4.8.0.tar.bz2

new:
----
  rpm-4.8.1.tar.bz2

spec files:
-----------
--- rpm-python.spec
+++ rpm-python.spec
@@ -12,7 +12,7 @@
 
 %define rpmhome /usr/lib/rpm
 
-%define rpmver 4.8.0
+%define rpmver 4.8.1
 
 %define bdbver 4.8.24
 %define dbprefix db
--- rpm.spec
+++ rpm.spec
@@ -8,7 +8,7 @@
 
 Summary: The RPM package management system
 Name: rpm
-Version: 4.8.0
+Version: 4.8.1
 Release: 1
 Source0: http://rpm.org/releases/rpm-4.8.x/rpm-%{version}.tar.bz2
 Group: System/Base
@@ -22,14 +22,6 @@
 Patch5: arch.patch
 Patch6: fix-perl-epoch.patch
 
-# Patches already in upstream
-Patch100: rpm-4.8.0-url-segfault.patch
-Patch101: rpm-4.8.0-verify-exitcode.patch
-Patch102: rpm-4.8.0-pythondeps-parallel.patch
-Patch103: rpm-4.8.0-python-bytecompile.patch
-Patch104: rpm-4.8.0-lazy-statfs.patch
-Patch105: rpm-4.8.0-erasure-dsi.patch
-
 
 # Partially GPL/LGPL dual-licensed and some bits with BSD
 # SourceLicense: (GPLv2+ and LGPLv2+ with exceptions) and BSD 
@@ -134,12 +126,6 @@
 %patch5 -p1 -b .arm
 %patch6 -p1 -b .epoch
 
-%patch100 -p1
-%patch101 -p1
-%patch102 -p1
-%patch103 -p1
-%patch104 -p1
-%patch105 -p1
 
 %build
 CPPFLAGS="$CPPFLAGS `pkg-config --cflags nss`"
@@ -162,16 +148,12 @@
     --with-lua \
     --with-cap 
 
-make %{?_smp_mflags}
+make %{?jobs:-j%jobs}
 
 %install
 rm -rf $RPM_BUILD_ROOT
 
-make DESTDIR="$RPM_BUILD_ROOT" install
-
-rm -f   %{buildroot}/usr/lib/librpm.la
-rm -f %{buildroot}/usr/lib/librpmbuild.la
-rm -f %{buildroot}/usr/lib/librpmio.la
+%make_install
 
 mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/rpm
 mkdir -p $RPM_BUILD_ROOT/var/lib/rpm

other changes:
--------------

++++++ rpm-4.8.0.tar.bz2 -> rpm-4.8.1.tar.bz2
71367 lines of diff (skipped)

++++++ deleted files:
--- rpm-4.8.0-erasure-dsi.patch
--- rpm-4.8.0-lazy-statfs.patch
--- rpm-4.8.0-python-bytecompile.patch
--- rpm-4.8.0-pythondeps-parallel.patch
--- rpm-4.8.0-url-segfault.patch
--- rpm-4.8.0-verify-exitcode.patch



More information about the MeeGo-commits mailing list