Debian Bug report logs - #780309
rpm2cpio: null pointer dereference

version graph

Package: rpm2cpio; Maintainer for rpm2cpio is RPM packaging team <team+pkg-rpm@tracker.debian.org>; Source for rpm2cpio is src:rpm (PTS, buildd, popcon).

Reported by: Jakub Wilk <jwilk@debian.org>

Date: Wed, 11 Mar 2015 21:36:01 UTC

Severity: normal

Tags: upstream

Found in version rpm/4.11.3-1.1

Fixed in versions rpm/4.14.0+dfsg1-1, rpm/4.14.0+dfsg1-2

Done: Michal Čihař <nijel@debian.org>

Bug is archived. No further changes may be made.

Forwarded to http://rpm.org/ticket/906

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, jwilk@debian.org, Michal Čihař <nijel@debian.org>:
Bug#780309; Package rpm2cpio. (Wed, 11 Mar 2015 21:36:06 GMT) (full text, mbox, link).

Message #3 received at submit@bugs.debian.org (full text, mbox, reply):

From: Jakub Wilk <jwilk@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: rpm2cpio: null pointer dereference
Date: Wed, 11 Mar 2015 22:34:03 +0100
Package: rpm2cpio
Version: 4.11.3-1.1
Usertags: afl

rpm2cpio crashes on the attached file:

$ rpm2cpio crash.rpm
Segmentation fault


Valgrind says it's a null pointer dereference:

==8618== Invalid read of size 1
==8618==    at 0x402C3B8: strlen (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==8618==    by 0x40D35CB: rstrdup (rpmmalloc.c:73)
==8618==    by 0x4071650: stringFormat (formats.c:48)
==8618==    by 0x406B947: rpmtdFormat (rpmtd.c:256)
==8618==    by 0x405E7B4: headerGetAsString (headerutil.c:116)
==8618==    by 0x409695A: providePackageNVR (legacy.c:143)
==8618==    by 0x409695A: legacyRetrofit (legacy.c:206)
==8618==    by 0x409695A: headerConvert (legacy.c:225)
==8618==    by 0x4079235: rpmpkgRead (package.c:693)
==8618==    by 0x407998E: rpmReadPackageFile (package.c:717)
==8618==    by 0x8048963: main (rpm2cpio.c:52)
==8618==  Address 0x0 is not stack'd, malloc'd or (recently) free'd


This bug was found using American fuzzy lop:
http://lcamtuf.coredump.cx/afl/
(available in Debian experimental)


-- System Information:
Debian Release: 8.0
 APT prefers unstable
 APT policy: (990, 'unstable'), (500, 'experimental')
Architecture: i386 (x86_64)
Foreign Architectures: amd64

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages rpm2cpio depends on:
ii  libc6       2.19-15
ii  librpm3     4.11.3-1.1
ii  librpmio3   4.11.3-1.1
ii  rpm-common  4.11.3-1.1

-- 
Jakub Wilk

Information forwarded to debian-bugs-dist@lists.debian.org, Michal Čihař <nijel@debian.org>:
Bug#780309; Package rpm2cpio. (Wed, 11 Mar 2015 21:45:10 GMT) (full text, mbox, link).

Message #6 received at 780309@bugs.debian.org (full text, mbox, reply):

From: Jakub Wilk <jwilk@debian.org>
To: 780309@bugs.debian.org
Subject: Re: Bug#780309: rpm2cpio: null pointer dereference
Date: Wed, 11 Mar 2015 22:43:50 +0100
[Message part 1 (text/plain, inline)]
* Jakub Wilk <jwilk@debian.org>, 2015-03-11, 22:34:
>rpm2cpio crashes on the attached file:
>
>$ rpm2cpio crash.rpm
>Segmentation fault

And now really attached.

-- 
Jakub Wilk

[crash.rpm (application/x-redhat-package-manager, attachment)]

Set Bug forwarded-to-address to 'http://rpm.org/ticket/906'. Request was from Michal Čihař <nijel@debian.org> to control@bugs.debian.org. (Thu, 07 Jul 2016 10:03:09 GMT) (full text, mbox, link).

Added tag(s) upstream. Request was from Michal Čihař <nijel@debian.org> to control@bugs.debian.org. (Thu, 07 Jul 2016 10:03:10 GMT) (full text, mbox, link).

Added tag(s) pending. Request was from Michal Čihař <nijel@debian.org> to control@bugs.debian.org. (Wed, 08 Nov 2017 10:03:03 GMT) (full text, mbox, link).

Message sent on to Jakub Wilk <jwilk@debian.org>:
Bug#780309. (Wed, 08 Nov 2017 10:03:05 GMT) (full text, mbox, link).

Message #15 received at 780309-submitter@bugs.debian.org (full text, mbox, reply):

From: Michal Čihař <nijel@debian.org>
To: 780309-submitter@bugs.debian.org
Subject: Bug#780309 marked as pending
Date: Wed, 08 Nov 2017 09:58:43 +0000
tag 780309 pending
thanks

Hello,

Bug #780309 reported by you has been fixed in the Git repository. You can
see the changelog below, and you can check the diff of the fix at:

    https://anonscm.debian.org/cgit/pkg-rpm/rpm.git/commit/?id=68afe81

---
commit 68afe818eddfad4174d7036982f8dd8641261340
Author: Michal Čihař <nijel@debian.org>
Date:   Wed Nov 8 10:44:11 2017 +0100

    Another bug is fixed by new version

diff --git a/debian/changelog b/debian/changelog
index f446b9e..53bfbcc 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,7 +1,7 @@
 rpm (4.14.0+dfsg1-1) unstable; urgency=medium
 
   * New upstream release.
-    - Fixes crash on some corrupted packages (Closes: #801456)
+    - Fixes crashes on corrupted packages (Closes: #801456, #780309).
   * Fix debian/watch to (again) changed upstream website.
   * Use optional priority instead of extra.
   * Avoid using deprecated autotools_dev debhelper.

Reply sent to Michal Čihař <nijel@debian.org>:
You have taken responsibility. (Thu, 09 Nov 2017 15:03:08 GMT) (full text, mbox, link).

Notification sent to Jakub Wilk <jwilk@debian.org>:
Bug acknowledged by developer. (Thu, 09 Nov 2017 15:03:08 GMT) (full text, mbox, link).

Message #20 received at 780309-close@bugs.debian.org (full text, mbox, reply):

From: Michal Čihař <nijel@debian.org>
To: 780309-close@bugs.debian.org
Subject: Bug#780309: fixed in rpm 4.14.0+dfsg1-1
Date: Thu, 09 Nov 2017 15:00:20 +0000
Source: rpm
Source-Version: 4.14.0+dfsg1-1

We believe that the bug you reported is fixed in the latest version of
rpm, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 780309@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michal Čihař <nijel@debian.org> (supplier of updated rpm package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 08 Nov 2017 10:14:52 +0100
Source: rpm
Binary: rpm rpm2cpio rpm-common rpm-i18n librpm8 librpmio8 librpmbuild8 librpmsign8 librpm-dev python-rpm python3-rpm debugedit
Architecture: source amd64 all
Version: 4.14.0+dfsg1-1
Distribution: experimental
Urgency: medium
Maintainer: RPM packaging team <pkg-rpm-devel@lists.alioth.debian.org>
Changed-By: Michal Čihař <nijel@debian.org>
Description:
 debugedit  - tool to mangle source locations in .debug files
 librpm-dev - RPM shared library, development kit
 librpm8    - RPM shared library
 librpmbuild8 - RPM build shared library
 librpmio8  - RPM IO shared library
 librpmsign8 - RPM signing shared library
 python-rpm - Python bindings for RPM
 python3-rpm - Python 3 bindings for RPM
 rpm        - package manager for RPM
 rpm-common - common files for RPM
 rpm-i18n   - localization and localized man pages for rpm
 rpm2cpio   - tool to convert RPM package to CPIO archive
Closes: 780309 801456
Changes:
 rpm (4.14.0+dfsg1-1) experimental; urgency=medium
 .
   * New upstream release.
     - Fixes crashes on corrupted packages (Closes: #801456, #780309).
   * Fix debian/watch to (again) changed upstream website.
   * Use optional priority instead of extra.
   * Avoid using deprecated autotools_dev debhelper.
   * Bump standards to 4.1.1.
   * Make rpm suggest python for one of helper scripts.
   * Add binutils-dev to build depends.
Checksums-Sha1:
 833f24514b1a1719f1e578ee87273bef03d8e8eb 3191 rpm_4.14.0+dfsg1-1.dsc
 5c52ab219bbeba32c7037f1b4944a5e370cbd0c3 2898908 rpm_4.14.0+dfsg1.orig.tar.bz2
 09a448332446eb203fba5bc8c3220ae4111950e8 32468 rpm_4.14.0+dfsg1-1.debian.tar.xz
 087c92eb066e5a12c08a21e4ed734e5812ad10ea 47932 debugedit-dbgsym_4.14.0+dfsg1-1_amd64.deb
 46dfb0404fb1f9188b1a2a015943629bad775ae5 1287616 debugedit_4.14.0+dfsg1-1_amd64.deb
 92f2867b1054a4f852fe3cd289977d56a2fc5600 1326172 librpm-dev_4.14.0+dfsg1-1_amd64.deb
 3c718be3d507466cc1f5509dabf9993803b93d34 584852 librpm8-dbgsym_4.14.0+dfsg1-1_amd64.deb
 b4ccb458b8cb9dffdf60933552c2b3c98ea156e7 1444892 librpm8_4.14.0+dfsg1-1_amd64.deb
 f42e28bfe77cbb23ea63325a7127947d001387bf 206184 librpmbuild8-dbgsym_4.14.0+dfsg1-1_amd64.deb
 e05fab51f770fdb687a69283cbd10adc4e6f2955 1339352 librpmbuild8_4.14.0+dfsg1-1_amd64.deb
 9103c3e1ed0787eb20645d1a770d009a19138954 215252 librpmio8-dbgsym_4.14.0+dfsg1-1_amd64.deb
 ed3d92256115704390cb71c8217dca8b00e90e6f 1341680 librpmio8_4.14.0+dfsg1-1_amd64.deb
 4630b19d94351d5cf8a1e32304b75cc9c725bca6 19760 librpmsign8-dbgsym_4.14.0+dfsg1-1_amd64.deb
 82734d18295ee535c0717e3a3eb8bb1fe4cc8551 1276900 librpmsign8_4.14.0+dfsg1-1_amd64.deb
 9f0b8d90768321a30d029922ce8bad5f404ad65a 147588 python-rpm-dbgsym_4.14.0+dfsg1-1_amd64.deb
 470c31c91c914d7d999b0d2f3f8a57bc14905978 1314140 python-rpm_4.14.0+dfsg1-1_amd64.deb
 2f06278b80be3eb5ad75ac72c94891a74d5f7eb2 147976 python3-rpm-dbgsym_4.14.0+dfsg1-1_amd64.deb
 423acfd882f2f49eb730b38f74e2f85d11574c7c 1314252 python3-rpm_4.14.0+dfsg1-1_amd64.deb
 42e2875c164726b752d719b18693ca499ce1d78b 42316 rpm-common-dbgsym_4.14.0+dfsg1-1_amd64.deb
 d8091c24f169fa5b4b34ad2e5d8f8d5f7d2e5bee 1297416 rpm-common_4.14.0+dfsg1-1_amd64.deb
 ee2f4fad73f7d2eda8bceafdb99274e5b5bfb3f2 128796 rpm-dbgsym_4.14.0+dfsg1-1_amd64.deb
 2f128bba1fae7a3cfda512d60d98ff972b2100a6 1588400 rpm-i18n_4.14.0+dfsg1-1_all.deb
 fdba018f38048bcab8f468d1c1d3ee343833bf1a 22132 rpm2cpio-dbgsym_4.14.0+dfsg1-1_amd64.deb
 5cea0de0d67a8fbd71653de383b7784a3966e10d 1277408 rpm2cpio_4.14.0+dfsg1-1_amd64.deb
 48759f99b189c5718b35be3285ed5af53ccf7879 13965 rpm_4.14.0+dfsg1-1_amd64.buildinfo
 c054051c071f9d4b042a7b2d1b3be21112d3864a 1388164 rpm_4.14.0+dfsg1-1_amd64.deb
Checksums-Sha256:
 56ec70b88053bf50a855b95bd226293df7734bd49215d33771c060e92d53c7a9 3191 rpm_4.14.0+dfsg1-1.dsc
 a101b80197f37db1a606fd9df9b3014ca55e0829cd3a1f9527480524bf78db99 2898908 rpm_4.14.0+dfsg1.orig.tar.bz2
 4940a7b064e584d340d59599be89a6f7863c38c97fc253c40ea0ac95fceba236 32468 rpm_4.14.0+dfsg1-1.debian.tar.xz
 2318c8d3af359bf41957be18b91bc3d3e27f813c40b06bb5ca984a2b10e8f5eb 47932 debugedit-dbgsym_4.14.0+dfsg1-1_amd64.deb
 44b788454d1642bf0f04768403ebfb4948b3f8319fba8d9a9a744390043f241a 1287616 debugedit_4.14.0+dfsg1-1_amd64.deb
 0be63807f27f14fc3aa19e53651c2e034f2f116705abacf9b3e4f2ffa82ce46d 1326172 librpm-dev_4.14.0+dfsg1-1_amd64.deb
 7ed8d21a2553847eec9d471b85baab36bf6c162841402e43def190d1a32e702d 584852 librpm8-dbgsym_4.14.0+dfsg1-1_amd64.deb
 3476a339f266ae6e2a6558a787b66e83fbfa70a2c6081b027d52c2af8458fbe1 1444892 librpm8_4.14.0+dfsg1-1_amd64.deb
 9db4bf2026c83be5cea5c1b0a87e45966249a6f2b3740cfd7636af8637c2f4c5 206184 librpmbuild8-dbgsym_4.14.0+dfsg1-1_amd64.deb
 2a9eac97842eddf9405caacb607ed0645dc9c74cd8bb80cd63fc9baaf1849589 1339352 librpmbuild8_4.14.0+dfsg1-1_amd64.deb
 1a854755c9f3232a7b498d8748a1e3481f738ed5094c8790fd45f3fb07d69c9a 215252 librpmio8-dbgsym_4.14.0+dfsg1-1_amd64.deb
 bf20c534721733956e28340337378be6c87ba520c8377dd8d77182ec06490796 1341680 librpmio8_4.14.0+dfsg1-1_amd64.deb
 dc4ceb1f4528dcf7336e53b2d76dd556e1014a5d7bb711140d6b02b135f1c558 19760 librpmsign8-dbgsym_4.14.0+dfsg1-1_amd64.deb
 d0fea20462f476e3366880894c6cb91c2b70a00b02b9750169e1ea58a96ef9f5 1276900 librpmsign8_4.14.0+dfsg1-1_amd64.deb
 c90f0fa34d67143002b74d440d94356f3dea2fb384d3dc5a0e207ba122d3fb9e 147588 python-rpm-dbgsym_4.14.0+dfsg1-1_amd64.deb
 ca1508ff2e6a1be6b0b01a7f538a9f0c47f4582fd6b902a36714929d573a05c4 1314140 python-rpm_4.14.0+dfsg1-1_amd64.deb
 ca370839aa08fb522f420327df36f7a219d79e42bfd0ceaa53782dea6f3001d0 147976 python3-rpm-dbgsym_4.14.0+dfsg1-1_amd64.deb
 6a05081f65835ff8a940bdd9fca6f93db827de193554be6c77061aea2ef8978c 1314252 python3-rpm_4.14.0+dfsg1-1_amd64.deb
 ff4385500591ece9aa16574b4bf99ada7abe94da768681837d993aecab0c7a5e 42316 rpm-common-dbgsym_4.14.0+dfsg1-1_amd64.deb
 1db75142369e583b102eb267ff4807f9f835286562125af526f9569ef2503aa6 1297416 rpm-common_4.14.0+dfsg1-1_amd64.deb
 20fc4184ace79ca26e080d0daaacd8d1f382ff13da5a705838a1380bd2266304 128796 rpm-dbgsym_4.14.0+dfsg1-1_amd64.deb
 3b63012c89764c58fc2ce5d6d9a8bec3b24bced4f34a42cb89fecb4fc0fb4f7a 1588400 rpm-i18n_4.14.0+dfsg1-1_all.deb
 ba871242dd0126fa12d96d2beb69278a758d8d9292d00e25835d91be0968abd8 22132 rpm2cpio-dbgsym_4.14.0+dfsg1-1_amd64.deb
 899dc338dc0dac9a43a2a49d2109ab78da2b1cbfdacf7ad347c7aef71db1b2da 1277408 rpm2cpio_4.14.0+dfsg1-1_amd64.deb
 b77678842cd07d3ba278b5622ca22b80f719006e742fff32006b8da3ae7f4080 13965 rpm_4.14.0+dfsg1-1_amd64.buildinfo
 6290ac48f73081944af8cef439b5c659274a5c8aebe0e8d6d132d1494197517e 1388164 rpm_4.14.0+dfsg1-1_amd64.deb
Files:
 71d32893d40bbd14c36561ef73caa18e 3191 admin optional rpm_4.14.0+dfsg1-1.dsc
 379536915ebb22364a1b9d70665a0159 2898908 admin optional rpm_4.14.0+dfsg1.orig.tar.bz2
 5dd7bf525783fd7c7b525a068823aa9d 32468 admin optional rpm_4.14.0+dfsg1-1.debian.tar.xz
 5f21e322deebd0463850d94e9579080b 47932 debug optional debugedit-dbgsym_4.14.0+dfsg1-1_amd64.deb
 9aa70d3377595882355ebbe327c35096 1287616 admin optional debugedit_4.14.0+dfsg1-1_amd64.deb
 a4c58983125754eadbf8ad6e9cf57463 1326172 libdevel optional librpm-dev_4.14.0+dfsg1-1_amd64.deb
 c326c72710ebd5954098b50c625a1e01 584852 debug optional librpm8-dbgsym_4.14.0+dfsg1-1_amd64.deb
 beab1b570cdbd239bcaa6a4429d74ecf 1444892 libs optional librpm8_4.14.0+dfsg1-1_amd64.deb
 efb9e8a3b57cde69c15f87f9be570874 206184 debug optional librpmbuild8-dbgsym_4.14.0+dfsg1-1_amd64.deb
 b6c8d7cf189ff978195168a411c528d2 1339352 libs optional librpmbuild8_4.14.0+dfsg1-1_amd64.deb
 0653c318ca6e2b7f323f258f1d547d4a 215252 debug optional librpmio8-dbgsym_4.14.0+dfsg1-1_amd64.deb
 6a664841616d7cc98ce950135ec1a62c 1341680 libs optional librpmio8_4.14.0+dfsg1-1_amd64.deb
 80e75e6f6e21ec58094c9b25b486812f 19760 debug optional librpmsign8-dbgsym_4.14.0+dfsg1-1_amd64.deb
 1b66879aacee85ea8d54819a1c5a45c4 1276900 libs optional librpmsign8_4.14.0+dfsg1-1_amd64.deb
 75fec4900e8c0b87e5674128683a937d 147588 debug optional python-rpm-dbgsym_4.14.0+dfsg1-1_amd64.deb
 2bda4a414819e970e5c003f79242890b 1314140 python optional python-rpm_4.14.0+dfsg1-1_amd64.deb
 2087d94979123f336d63746b85c5b5e4 147976 debug optional python3-rpm-dbgsym_4.14.0+dfsg1-1_amd64.deb
 7f4d414272526976d017e784f823dc2e 1314252 python optional python3-rpm_4.14.0+dfsg1-1_amd64.deb
 d54f6d2c037fa3bec6a6f6ab5d9780a0 42316 debug optional rpm-common-dbgsym_4.14.0+dfsg1-1_amd64.deb
 3d7725f8b6d23c0b357e848064393486 1297416 admin optional rpm-common_4.14.0+dfsg1-1_amd64.deb
 b7597a706e30da8bf033ffeab8714aa1 128796 debug optional rpm-dbgsym_4.14.0+dfsg1-1_amd64.deb
 eead2ef433afd2e7875c0fcd1025978a 1588400 localization optional rpm-i18n_4.14.0+dfsg1-1_all.deb
 14d6a3aad4ec6ed5e6a677334a7339a9 22132 debug optional rpm2cpio-dbgsym_4.14.0+dfsg1-1_amd64.deb
 37a606d2c4f9b7eb8bdd321123bc2b0e 1277408 admin optional rpm2cpio_4.14.0+dfsg1-1_amd64.deb
 4786f060c2ba197a983dcc57870d30e8 13965 admin optional rpm_4.14.0+dfsg1-1_amd64.buildinfo
 430ea7bacffcee9d8628e6db5685258f 1388164 admin optional rpm_4.14.0+dfsg1-1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEh+Zzr4P2w6DDRMjD9KoinU1YwkUFAloC7awACgkQ9KoinU1Y
wkWUmg/+LhOrSXzBm9+/JuCYwWNcj2qVVgRhrraKkheRwA90T49jTiVbDn+ouHs2
NlmnpL0y/9CHr0hhSDTekm8gbYYIw+iwwfLKyAX9/OSlrzrFPA/BjPH+YfggfUXY
y7Dym+Oa0LQSclJKoGKjgV6XA2BV4S+mJZaQTpezVnCPlxnhfemNNvLbdoPeuVB4
XhzGpD9Soe6q9IQKTar/RJB2iCVZTklkoAyRnQHjtOjLjr6+AViPwx8G2ivMWjjT
RYcVu2rB5v4KO5l831g2qROGcV3Nctk6sGqPbt8cmES8qIB7omL/8zLm+Jyy7TfT
I/wBTJeABoCnmYi6/2bewzPNq7a3nnxrk8Hu3qK8BVd4+UbV8aeiMuY0CHHd7xEo
gsuKszbJMmMCiHpXfZsST4KtxkMELNwDoIFeOY6lYroUADShhlgjPGiUZvP43Cl1
PjKfPYOlcQQcyzeRArxawkWgKWozexWX1gU8RWnbu1GJNEj+xwJtNER5eM1jXpCw
YHdG//+IO5/WmZA0Ycftca+7OPg++bRfrgUgh+Ndx0dlMe4/hALgf3bfNfOtDbyn
Eu5du2O6sWj1lYJIkUofaSm6BAV1eT4ke+0W3HXPBvkmvTjvkChiB+L1EPU9X2PK
LByF8EcQRKBX+s3gB1liNUGPK1B8CbLYiruNU/z1cRU6Hm1Iht4=
=aMuw
-----END PGP SIGNATURE-----

Reply sent to Michal Čihař <nijel@debian.org>:
You have taken responsibility. (Sat, 11 Nov 2017 13:51:05 GMT) (full text, mbox, link).

Notification sent to Jakub Wilk <jwilk@debian.org>:
Bug acknowledged by developer. (Sat, 11 Nov 2017 13:51:06 GMT) (full text, mbox, link).

Message #25 received at 780309-close@bugs.debian.org (full text, mbox, reply):

From: Michal Čihař <nijel@debian.org>
To: 780309-close@bugs.debian.org
Subject: Bug#780309: fixed in rpm 4.14.0+dfsg1-2
Date: Sat, 11 Nov 2017 13:49:34 +0000
Source: rpm
Source-Version: 4.14.0+dfsg1-2

We believe that the bug you reported is fixed in the latest version of
rpm, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 780309@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michal Čihař <nijel@debian.org> (supplier of updated rpm package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 11 Nov 2017 14:28:01 +0100
Source: rpm
Binary: rpm rpm2cpio rpm-common rpm-i18n librpm8 librpmio8 librpmbuild8 librpmsign8 librpm-dev python-rpm python3-rpm debugedit
Architecture: source
Version: 4.14.0+dfsg1-2
Distribution: unstable
Urgency: medium
Maintainer: RPM packaging team <pkg-rpm-devel@lists.alioth.debian.org>
Changed-By: Michal Čihař <nijel@debian.org>
Description:
 debugedit  - tool to mangle source locations in .debug files
 librpm-dev - RPM shared library, development kit
 librpm8    - RPM shared library
 librpmbuild8 - RPM build shared library
 librpmio8  - RPM IO shared library
 librpmsign8 - RPM signing shared library
 python-rpm - Python bindings for RPM
 python3-rpm - Python 3 bindings for RPM
 rpm        - package manager for RPM
 rpm-common - common files for RPM
 rpm-i18n   - localization and localized man pages for rpm
 rpm2cpio   - tool to convert RPM package to CPIO archive
Closes: 780309 801456
Changes:
 rpm (4.14.0+dfsg1-2) unstable; urgency=medium
 .
   * Upload to unstable.
   * Fixed compilation on architectures without MAP_POPULATE.
 .
 rpm (4.14.0+dfsg1-1) experimental; urgency=medium
 .
   * New upstream release.
     - Fixes crashes on corrupted packages (Closes: #801456, #780309).
   * Fix debian/watch to (again) changed upstream website.
   * Use optional priority instead of extra.
   * Avoid using deprecated autotools_dev debhelper.
   * Bump standards to 4.1.1.
   * Make rpm suggest python for one of helper scripts.
   * Add binutils-dev to build depends.
Checksums-Sha1:
 129529628dc59529353db5afdf85979d622cfd7a 3191 rpm_4.14.0+dfsg1-2.dsc
 b3de8340313eb5677fb9f0bd6091031a17df6234 32720 rpm_4.14.0+dfsg1-2.debian.tar.xz
 a3ec7e8b6746576d42644150126e55b4b3e5945c 13965 rpm_4.14.0+dfsg1-2_amd64.buildinfo
Checksums-Sha256:
 ce229996e695bd403eb5f9ab035f40d9fa95e2918bf0de93b9ddd3256e3bba77 3191 rpm_4.14.0+dfsg1-2.dsc
 138cd6af33380726333f62a96a136228e7ebf505cc32ac9b82a957eb5462b457 32720 rpm_4.14.0+dfsg1-2.debian.tar.xz
 1d40998b716b777eeb37f08fd433c0476c32be6139ed3dbae630452c6b058d2a 13965 rpm_4.14.0+dfsg1-2_amd64.buildinfo
Files:
 4ea43c8ccd13055207df4945766fbef8 3191 admin optional rpm_4.14.0+dfsg1-2.dsc
 f3fce801b3e709fd8f1be78f736b10c7 32720 admin optional rpm_4.14.0+dfsg1-2.debian.tar.xz
 e5c6f5d975ae1daa30de87f2b9a66c10 13965 admin optional rpm_4.14.0+dfsg1-2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=b/tw
-----END PGP SIGNATURE-----

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 10 Dec 2017 07:25:15 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Jul 2 08:24:01 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.