[Rpm-maint] [rpm-software-management/rpm] rpm crashes with PANIC when installing package with Lua scriptlet but missing `RPMVERSION` tag (Issue #4189)

[Panu Matilainen]

pmatilai left a comment (rpm-software-management/rpm#4189)

Sorry, ambiguous wording from me. RPMVERSION is *not* a required tag, technically speaking. It's us humans who tend to assume it'll always be there, because it is there in all packages built by rpm.

I knew there was some java thing that could produce rpms, but that was a long long time ago, it only supported rpm v3 packages and I haven't heard anything about it in ages, so I'd pretty much forgotten about the whole possibility of having non-rpm produced packages out there. This rpm-builder thing appears to create legitimate looking v4 packages, I'm positively surprised about that! And good to know such a thing exists in the first place.

Since RPMVERSION is documented as "the version of rpm that built the package", it does seem appropriate to leave that out when the tool that produced the package was in fact not rpm.

FWIW, RPMFORMAT is only really present in v6 packages, where it is a required tag. I don't know that it'd be "illegal" in v4, just that no rpm version puts it there.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/4189#issuecomment-4294179049
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/4189/4294179049 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20260421/30f929df/attachment-0001.htm>