[packages/rpm] disable header verification

glen glen at pld-linux.org
Wed Feb 11 18:33:33 CET 2015


commit 8b6cca9fe5a04dd48c84e7fd65fbfd177acaa1b3
Author: Elan Ruusamäe <glen at delfi.ee>
Date:   Wed Feb 11 19:33:12 2015 +0200

    disable header verification

 disable-header-verification.patch | 20 ++++++++++++++++++++
 rpm.spec                          |  4 +++-
 2 files changed, 23 insertions(+), 1 deletion(-)
---
diff --git a/rpm.spec b/rpm.spec
index ea4df58..ead7168 100644
--- a/rpm.spec
+++ b/rpm.spec
@@ -51,7 +51,7 @@ Summary(ru.UTF-8):	Менеджер пакетов от RPM
 Summary(uk.UTF-8):	Менеджер пакетів від RPM
 Name:		rpm
 Version:	5.4.15
-Release:	10
+Release:	11
 License:	LGPL v2.1
 Group:		Base
 # http://rpm5.org/files/rpm/rpm-5.4/rpm-5.4.15-0.20140824.src.rpm
@@ -175,6 +175,7 @@ Patch85:	rpm-CVE-2013-6435.patch
 Patch86:	rpm-CVE-2014-8118.patch
 Patch87:	%{name}-file-output-for-ELF.patch
 Patch88:	%{name}-rpmtdnext.patch
+Patch89:	disable-header-verification.patch
 
 # Patches imported from Mandriva
 
@@ -956,6 +957,7 @@ cd -
 %patch86 -p1
 %patch87 -p1
 %patch88 -p1
+%patch89 -p1
 
 %patch1000 -p1
 %patch1001 -p1
diff --git a/disable-header-verification.patch b/disable-header-verification.patch
new file mode 100644
index 0000000..ab553fe
--- /dev/null
+++ b/disable-header-verification.patch
@@ -0,0 +1,20 @@
+http://lists.pld-linux.org/mailman/pipermail/pld-devel-en/2015-February/024241.html
+
+--- rpm-5.4.15/lib/verify.c~	2015-02-11 12:07:41.000000000 +0200
++++ rpm-5.4.15/lib/verify.c	2015-02-11 17:31:05.418447510 +0200
+@@ -563,6 +563,7 @@
+ 
+   {
+     /* Verify header digest/signature. */
++#if NOTYET
+     if (qva->qva_flags & (VERIFY_DIGEST | VERIFY_SIGNATURE))
+     {
+ 	const char * horigin = headerGetOrigin(h);
+@@ -577,6 +578,7 @@
+ 	uh = _free(uh);
+ 	msg = _free(msg);
+     }
++#endif
+ 
+     /* Verify file digests. */
+     if (fc > 0 && (qva->qva_flags & VERIFY_FILES))
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/rpm.git/commitdiff/8b6cca9fe5a04dd48c84e7fd65fbfd177acaa1b3



More information about the pld-cvs-commit mailing list