Bug 29217

Summary:	Update request: rpm-4.16.1.3-1.1.mga8
Product:	Mageia	Reporter:	Thomas Backlund <tmb>
Component:	RPM Packages	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Normal	CC:	andrewsfarm, ouaurelien, sysadmin-bugs
Version:	8	Keywords:	advisory, validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA8-64-OK MGA8-32-OK
Source RPM:	rpm-4.16.1.3-1.mga8.src.rpm	CVE:
Status comment:

Description Thomas Backlund 2021-07-04 20:27:01 CEST

Advisory:
The rpm update to 4.16.1.3 in MGASA-2021-0167 introduced a regression in
handling rpm v3 packages and some newer 3rd party created packages, and
also packages created by rpm 4.13 - 4.14. This update adds the upstream
fix for theese issues.

references:
https://github.com/rpm-software-management/rpm/issues/1635
https://github.com/rpm-software-management/rpm/pull/1680



SRPM:
rpm-4.16.1.3-1.1.mga8.src.rpm

i586:
librpm9-4.16.1.3-1.1.mga8.i586.rpm
librpmbuild9-4.16.1.3-1.1.mga8.i586.rpm
librpm-devel-4.16.1.3-1.1.mga8.i586.rpm
librpmsign9-4.16.1.3-1.1.mga8.i586.rpm
python3-rpm-4.16.1.3-1.1.mga8.i586.rpm
rpm-4.16.1.3-1.1.mga8.i586.rpm
rpm-apidocs-4.16.1.3-1.1.mga8.noarch.rpm
rpm-build-4.16.1.3-1.1.mga8.i586.rpm
rpm-cron-4.16.1.3-1.1.mga8.noarch.rpm
rpm-plugin-audit-4.16.1.3-1.1.mga8.i586.rpm
rpm-plugin-ima-4.16.1.3-1.1.mga8.i586.rpm
rpm-plugin-prioreset-4.16.1.3-1.1.mga8.i586.rpm
rpm-plugin-selinux-4.16.1.3-1.1.mga8.i586.rpm
rpm-plugin-syslog-4.16.1.3-1.1.mga8.i586.rpm
rpm-plugin-systemd-inhibit-4.16.1.3-1.1.mga8.i586.rpm
rpm-sign-4.16.1.3-1.1.mga8.i586.rpm



x86_64:
lib64rpm9-4.16.1.3-1.1.mga8.x86_64.rpm
lib64rpmbuild9-4.16.1.3-1.1.mga8.x86_64.rpm
lib64rpm-devel-4.16.1.3-1.1.mga8.x86_64.rpm
lib64rpmsign9-4.16.1.3-1.1.mga8.x86_64.rpm
python3-rpm-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-apidocs-4.16.1.3-1.1.mga8.noarch.rpm
rpm-build-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-cron-4.16.1.3-1.1.mga8.noarch.rpm
rpm-plugin-audit-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-plugin-ima-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-plugin-prioreset-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-plugin-selinux-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-plugin-syslog-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-plugin-systemd-inhibit-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-sign-4.16.1.3-1.1.mga8.x86_64.rpm

Comment 1 Aurelien Oudelet 2021-07-05 20:47:49 CEST

$ inxi -Sxx
System:
Host: mageia-VM.local Kernel: 5.10.46-1.mga8 x86_64 bits: 64 compiler: gcc v: 10.3.0 
Desktop: KDE Plasma 5.20.4 tk: Qt 5.15.2 wm: kwin_x11 dm: SDDM
Distro: Mageia 8 mga8 

Using a rpm v3 from
https://github.com/openaudible/openaudible/issues/603

Running transaction check
error: ~/Downloads/OpenAudible_3.0_x86_64.rpm: invalid signature tag Archivesize (1046)
Error: error reading package header: 'OpenAudible_3.0_x86_64.rpm'

We are affected.

Updating rpm from updates_testing.

Rerun installer:
OK, this installs OK.

CC: (none) => ouaurelien

Aurelien Oudelet 2021-07-05 20:48:01 CEST

Whiteboard: (none) => MGA8-64-OK

Aurelien Oudelet 2021-07-05 20:48:19 CEST

Source RPM: rpm => rpm-4.16.1.3-1.mga8.src.rpm

Comment 2 Thomas Andrews 2021-07-07 23:15:15 CEST

As this is such a basic package, I will give it a 32-bit test on real hardware this evening before validating.

CC: (none) => andrewsfarm

Comment 3 Thomas Andrews 2021-07-08 02:57:39 CEST

Working well on my Dell Inspiron 5100. Used it with drakrpm to test the mesa update, and to remove some old kernels. No issues noted.

Validating. Advisory in Comment 0.

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs
Whiteboard: MGA8-64-OK => MGA8-64-OK MGA8-32-OK

Aurelien Oudelet 2021-07-08 22:59:28 CEST

Keywords: (none) => advisory

Comment 4 Mageia Robot 2021-07-09 00:44:41 CEST

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGAA-2021-0146.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED