[Rpm-maint] [Rpm-announce] RPM 4.14.0 release candidate 2 is out

[Thierry Vignaud]

On 28 September 2017 at 16:06, Panu Matilainen <pmatilai at redhat.com> wrote:
>
> There aren't that many changes since rc1, but enough to warrant a second
> release candidate instead of going for final. The important ones being:
>
> - Fix a bug of file triggers failing on some packages (MgBug:18797, in
> 4.13.x already)
> - Fix a regression on 32bit architectures on generation of packages over 2GB
> in size (RhBug:1492587)
> - Fix rpm following arbitrary directory symlinks on installation
> (CVE-2017-7500)
> - Fix rpm following symlinks on file creation (CVE-2017-7501)
> - Adjust verification to match the new directory symlink rule
> - Forbid 'if' richops in 'or' context and 'unless' richops in 'and' context
>
> As usual, the details + download info at:
>
>         http://rpm.org/wiki/Releases/4.14.0
>
> Oh and release notes changed to use SHA256 instead of SHA1 for the source
> checksum. Guess it's about time.
>
> On behalf of the rpm-team,

It looks like some dep generators are no more run:
We've one dep generator carried by another pkg (so unchanged).
But since we upgrade to 4.14, those deps are no more run:

$ cat /usr/lib/rpm/fileattrs/perl_from_meta.attr
%__perl_from_meta_requires      %{_rpmconfigdir}/mageia/perl.req-from-meta
%__perl_from_meta_path          /(META.json|(MY|)META.yml)$

$ rpm --eval   %{_rpmconfigdir}/mageia/perl.req-from-meta
/usr/lib/rpm/mageia/perl.req-from-meta
$ ll /usr/lib/rpm/mageia/perl.req-from-meta
-rwxr-xr-x 1 rpm rpm 1428 Her   2 10:35 /usr/lib/rpm/mageia/perl.req-from-meta*
$ rpmbuild -bb --define "_topdir $PWD" --define "_tmppath
$PWD/BUILDROOT" --without build $PWD/SPECS/perl-Term-Clui.spec
--rpmfcdebug -v -vv
(...)
D:      execv(/usr/lib/rpm/mageia/perl_base.req) pid 20465
D:      waitpid(20465) rc 20465 status 0
D:      execv(/usr/lib/rpm/mageia/perl_base.req) pid 20467
D:      waitpid(20467) rc 20467 status 0
D:      execv(/usr/lib/rpm/mageia/perl_base.req) pid 20469
D:      waitpid(20469) rc 20469 status 0
D:      execv(/usr/lib/rpm/perl.prov) pid 20471
D:      waitpid(20471) rc 20471 status 0
D:      execv(/usr/lib/rpm/perl.req) pid 20474
D:      waitpid(20474) rc 20474 status 0
D:      execv(/usr/lib/rpm/mageia/perl_base.req) pid 20475
D:      waitpid(20475) rc 20475 status 0
D:      execv(/usr/lib/rpm/perl.prov) pid 20477
D:      waitpid(20477) rc 20477 status 0
D:      execv(/usr/lib/rpm/perl.req) pid 20480
D:      waitpid(20480) rc 20480 status 0

 ^so perl.req-from-meta is no more run, only other scripts

(...)
  3 /home/tv/mga/pkgs/perl-Term-Clui/BUILDROOT/perl-Term-Clui-1.710.0-2.mga7.x86_64/usr/lib/perl5/vendor_perl/5.26.1/Term/Clui/FileSelect.pm
   Perl5 module source text [perl_base,perllib]
        R perl-base >= 2:5.26.1
        P perl(Term::Clui::FileSelect) = 1.710.0
        R perl(Exporter)
  4 /home/tv/mga/pkgs/perl-Term-Clui/BUILDROOT/perl-Term-Clui-1.710.0-2.mga7.x86_64/usr/share/doc/perl-Term-Clui
       directory [none]
  5 /home/tv/mga/pkgs/perl-Term-Clui/BUILDROOT/perl-Term-Clui-1.710.0-2.mga7.x86_64/usr/share/doc/perl-Term-Clui/Changes
       ASCII text [none]
  6 /home/tv/mga/pkgs/perl-Term-Clui/BUILDROOT/perl-Term-Clui-1.710.0-2.mga7.x86_64/usr/share/doc/perl-Term-Clui/META.yml
      ASCII text [perl_from_meta]
  7 /home/tv/mga/pkgs/perl-Term-Clui/BUILDROOT/perl-Term-Clui-1.710.0-2.mga7.x86_64/usr/share/doc/perl-Term-Clui/MYMETA.yml
    ASCII text [perl_from_meta]

^ so fileattr did matched but the corresponding generator was not run
(missing in above execve() list)

Any idea?