Bug 29217 - Update request: rpm-4.16.1.3-1.1.mga8
Summary: Update request: rpm-4.16.1.3-1.1.mga8
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL:
Whiteboard: MGA8-64-OK MGA8-32-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2021-07-04 20:27 CEST by Thomas Backlund
Modified: 2021-07-09 00:44 CEST (History)
3 users (show)

See Also:
Source RPM: rpm-4.16.1.3-1.mga8.src.rpm
CVE:
Status comment:


Attachments

Description Thomas Backlund 2021-07-04 20:27:01 CEST
Advisory:
The rpm update to 4.16.1.3 in MGASA-2021-0167 introduced a regression in
handling rpm v3 packages and some newer 3rd party created packages, and
also packages created by rpm 4.13 - 4.14. This update adds the upstream
fix for theese issues.

references:
https://github.com/rpm-software-management/rpm/issues/1635
https://github.com/rpm-software-management/rpm/pull/1680



SRPM:
rpm-4.16.1.3-1.1.mga8.src.rpm

i586:
librpm9-4.16.1.3-1.1.mga8.i586.rpm
librpmbuild9-4.16.1.3-1.1.mga8.i586.rpm
librpm-devel-4.16.1.3-1.1.mga8.i586.rpm
librpmsign9-4.16.1.3-1.1.mga8.i586.rpm
python3-rpm-4.16.1.3-1.1.mga8.i586.rpm
rpm-4.16.1.3-1.1.mga8.i586.rpm
rpm-apidocs-4.16.1.3-1.1.mga8.noarch.rpm
rpm-build-4.16.1.3-1.1.mga8.i586.rpm
rpm-cron-4.16.1.3-1.1.mga8.noarch.rpm
rpm-plugin-audit-4.16.1.3-1.1.mga8.i586.rpm
rpm-plugin-ima-4.16.1.3-1.1.mga8.i586.rpm
rpm-plugin-prioreset-4.16.1.3-1.1.mga8.i586.rpm
rpm-plugin-selinux-4.16.1.3-1.1.mga8.i586.rpm
rpm-plugin-syslog-4.16.1.3-1.1.mga8.i586.rpm
rpm-plugin-systemd-inhibit-4.16.1.3-1.1.mga8.i586.rpm
rpm-sign-4.16.1.3-1.1.mga8.i586.rpm



x86_64:
lib64rpm9-4.16.1.3-1.1.mga8.x86_64.rpm
lib64rpmbuild9-4.16.1.3-1.1.mga8.x86_64.rpm
lib64rpm-devel-4.16.1.3-1.1.mga8.x86_64.rpm
lib64rpmsign9-4.16.1.3-1.1.mga8.x86_64.rpm
python3-rpm-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-apidocs-4.16.1.3-1.1.mga8.noarch.rpm
rpm-build-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-cron-4.16.1.3-1.1.mga8.noarch.rpm
rpm-plugin-audit-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-plugin-ima-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-plugin-prioreset-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-plugin-selinux-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-plugin-syslog-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-plugin-systemd-inhibit-4.16.1.3-1.1.mga8.x86_64.rpm
rpm-sign-4.16.1.3-1.1.mga8.x86_64.rpm
Comment 1 Aurelien Oudelet 2021-07-05 20:47:49 CEST
$ inxi -Sxx
System:
Host: mageia-VM.local Kernel: 5.10.46-1.mga8 x86_64 bits: 64 compiler: gcc v: 10.3.0 
Desktop: KDE Plasma 5.20.4 tk: Qt 5.15.2 wm: kwin_x11 dm: SDDM
Distro: Mageia 8 mga8 

Using a rpm v3 from
https://github.com/openaudible/openaudible/issues/603

Running transaction check
error: ~/Downloads/OpenAudible_3.0_x86_64.rpm: invalid signature tag Archivesize (1046)
Error: error reading package header: 'OpenAudible_3.0_x86_64.rpm'

We are affected.

Updating rpm from updates_testing.

Rerun installer:
OK, this installs OK.

CC: (none) => ouaurelien

Aurelien Oudelet 2021-07-05 20:48:01 CEST

Whiteboard: (none) => MGA8-64-OK

Aurelien Oudelet 2021-07-05 20:48:19 CEST

Source RPM: rpm => rpm-4.16.1.3-1.mga8.src.rpm

Comment 2 Thomas Andrews 2021-07-07 23:15:15 CEST
As this is such a basic package, I will give it a 32-bit test on real hardware this evening before validating.

CC: (none) => andrewsfarm

Comment 3 Thomas Andrews 2021-07-08 02:57:39 CEST
Working well on my Dell Inspiron 5100. Used it with drakrpm to test the mesa update, and to remove some old kernels. No issues noted.

Validating. Advisory in Comment 0.

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs
Whiteboard: MGA8-64-OK => MGA8-64-OK MGA8-32-OK

Aurelien Oudelet 2021-07-08 22:59:28 CEST

Keywords: (none) => advisory

Comment 4 Mageia Robot 2021-07-09 00:44:41 CEST
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGAA-2021-0146.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.