# run internal testsuite?

# fakechroot is severely broken beyond fedora 33, disable...

%if 0%{?fedora} > 33 || 0%{?rhel} > 8

%bcond_with check

%else

%bcond_without check

%endif

# build against xz?

%bcond_without xz

# build with plugins?

%bcond_without plugins

# build with libarchive? (needed for rpm2archive)

%bcond_without libarchive

# build with libimaevm.so

%bcond_without libimaevm

# build with zstd support?

%bcond_without zstd

# build with ndb backend?

%bcond_without ndb

# build with sqlite support?

%bcond_without sqlite

# build with bdb support?

%bcond_with bdb

# build with internal Berkeley DB?

%bcond_with int_bdb

# build with bdb_ro support?

%bcond_without bdb_ro

%define rpmhome /usr/lib/rpm

%global rpmver 4.16.1.3

#global snapver rc1

%global rel 22

%global sover 9

%global srcver %{rpmver}%{?snapver:-%{snapver}}

%global srcdir %{?snapver:testing}%{!?snapver:rpm-%(echo %{rpmver} | cut -d'.' -f1-2).x}

%if %{with bdb}

%define bdbver 5.3.15

# Build-dependency on systemd for the sake of one macro would be a bit much...

%{!?_tmpfilesdir:%global _tmpfilesdir /usr/lib/tmpfiles.d}

%endif

Summary: The RPM package management system

Name: rpm

Version: %{rpmver}

Release: %{?snapver:0.%{snapver}.}%{rel}%{?dist}

Url: http://www.rpm.org/

Source0: http://ftp.rpm.org/releases/%{srcdir}/rpm-%{srcver}.tar.bz2

%if %{with bdb} && %{with int_bdb}

Source1: db-%{bdbver}.tar.gz

%endif

Source10: rpmdb-rebuild.service

# Disable autoconf config.site processing (#962837)

Patch1: rpm-4.15.x-siteconfig.patch

# In current Fedora, man-pages pkg owns all the localized man directories

Patch3: rpm-4.9.90-no-man-dirs.patch

# Temporary band-aid for rpm2cpio whining on payload size mismatch (#1142949)

Patch5: rpm-4.12.0-rpm2cpio-hack.patch

# https://github.com/rpm-software-management/rpm/pull/473

Patch6: 0001-find-debuginfo.sh-decompress-DWARF-compressed-ELF-se.patch

Patch7: 0001-Issue-deprecation-warning-when-creating-BDB-database.patch

# Patches already upstream:

Patch100: rpm-4.16.1.3-imp-covscan-fixes.patch

Patch101: rpm-4.16.1.3-rpmsign-support-EdDSA-sig.patch

Patch102: rpm-4.16.1.3-add-fapolicyd-plugin.patch

Patch103: rpm-4.16.1.3-unblock-signals-in-forked-scriptlets.patch

Patch104: rpm-4.16.1.3-support-bdb-hash-v8.patch

Patch105: rpm-4.16.1.3-ELF-files-strip-when-debuginfo-disabled.patch

Patch106: rpm-4.16.1.3-unbreak-checking-of-installed-rich-deps.patch

Patch107: rpm-4.16.1.3-fix-IMA-sig-len-assumed-const.patch

Patch108: rpm-4.16.1.3-validate-and-require-subkey-binding-sigs.patch

Patch109: rpm-4.16.1.3-bump-rpmdb-cookie-hash-to-SHA256-for-FIPS.patch

Patch110: rpm-4.16.1.3-add-path-query-option.patch

Patch111: rpm-4.16.1.3-skip-recorded-symlinks-in-setperms.patch

Patch112: rpm-4.16.1.3-fix-regression-reading-rpm-v3-pkgs.patch

Patch113: rpm-4.16.1.3-fix-spurious-transfiletriggerpostun-execution.patch

Patch114: rpm-4.16.1.3-Make-rpm2cpio.sh-more-robust.patch

Patch115: rpm-4.16.1.3-fapolicyd-make-write-nonblocking.patch

Patch116: rpm-4.16.1.3-bcond-macros.patch

Patch117: rpm-4.16.1.3-caret-query.patch

Patch118: rpm-4.16.1.3-caret-query2.patch

Patch119: rpm-4.18-libselinux-log.patch

Patch120: rpm-4.16.1.3-rpm2archive-error-handling.patch

Patch121: rpm-4.16.1.3-rpm2archive-nocompression.patch

Patch122: rpm-4.16.1.3-Support-long-languages-names-for-QT.patch

Patch123: rpm-4.14.3-rpm2archive-parse-popt-options.patch

Patch124: rpm-4.14.3-rpm2archive-Don-t-print-usage.patch

# These are not yet upstream

Patch906: rpm-4.7.1-geode-i686.patch

# Probably to be upstreamed in slightly different form

Patch907: rpm-4.15.x-ldflags.patch

Patch908: 0001-Give-warning-on-not-supported-hash-for-RSA-keys.patch

# Not yet (all) upstream, debugedit DWARF5

# https://code.wildebeest.org/git/user/mjw/rpm/log/?h=gcc-dwarf5-4.16.1.2

Patch911: 0001-NFC-debugedit-Protect-macro-arguments-by-parentheses.patch

Patch912: 0002-NFC-debugedit-Move-code-from-edit_dwarf2-to-edit_inf.patch

Patch913: 0003-debugedit-Fix-missing-relocation-of-.debug_types-sec.patch

Patch914: 0004-NFC-debugedit-Move-code-to-separate-functions.patch

Patch915: 0005-debugedit-Implement-DWARF-5-unit-header-and-new-form.patch

Patch916: 0006-debugedit-Handle-DWARF-5-debug_line-and-debug_line_s.patch

# Downstream-only patches

Patch1000: rpm-4.16.1.3-hashtab-use-after-free-fix.patch

Patch1001: rpm-4.16.1.3-find_debuginfo_vendor_opts.patch

# Partially GPL/LGPL dual-licensed and some bits with BSD

# SourceLicense: (GPLv2+ and LGPLv2+ with exceptions) and BSD

License: GPLv2+

Requires: coreutils

Requires: popt%{_isa} >= 1.10.2.1

Requires: curl

Obsoletes: python2-rpm < %{version}-%{release}

%if %{with bdb} && %{without int_bdb}

BuildRequires: libdb-devel

%endif

%if %{with check}

BuildRequires: fakechroot gnupg2

%endif

# XXX generally assumed to be installed but make it explicit as rpm

# is a bit special...

BuildRequires: redhat-rpm-config >= 94

BuildRequires: systemd-rpm-macros

BuildRequires: gcc make

BuildRequires: gawk

BuildRequires: elfutils-devel >= 0.112

BuildRequires: elfutils-libelf-devel

BuildRequires: readline-devel zlib-devel

BuildRequires: openssl-devel

# The popt version here just documents an older known-good version

BuildRequires: popt-devel >= 1.10.2

BuildRequires: file-devel

BuildRequires: gettext-devel

BuildRequires: ncurses-devel

BuildRequires: bzip2-devel >= 0.9.0c-2

BuildRequires: lua-devel >= 5.1

BuildRequires: libcap-devel

BuildRequires: libacl-devel

%if %{with xz}

BuildRequires: xz-devel >= 4.999.8

%endif

%if %{with libarchive}

BuildRequires: libarchive-devel

%endif

%if %{with zstd}

BuildRequires: libzstd-devel

%endif

%if %{with sqlite}

BuildRequires: sqlite-devel

%endif

# Couple of patches change makefiles so, require for now...

BuildRequires: automake libtool

%if %{with plugins}

BuildRequires: libselinux-devel

BuildRequires: dbus-devel

BuildRequires: audit-libs-devel

%endif

%if %{with libimaevm}

BuildRequires: ima-evm-utils-devel >= 1.0

%endif

%description

The RPM Package Manager (RPM) is a powerful command line driven

package management system capable of installing, uninstalling,

verifying, querying, and updating software packages. Each software

package consists of an archive of files along with information about

the package like its version, a description, etc.

%package libs

Summary:  Libraries for manipulating RPM packages

License: GPLv2+ and LGPLv2+ with exceptions

Requires: %{name} = %{version}-%{release}

%description libs

This package contains the RPM shared libraries.

%package build-libs

Summary:  Libraries for building RPM packages

License: GPLv2+ and LGPLv2+ with exceptions

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description build-libs

This package contains the RPM shared libraries for building packages.

%package sign-libs

Summary:  Libraries for signing RPM packages

License: GPLv2+ and LGPLv2+ with exceptions

Requires: rpm-libs%{_isa} = %{version}-%{release}

Requires: %{_bindir}/gpg2

%description sign-libs

This package contains the RPM shared libraries for signing packages.

%package devel

Summary:  Development files for manipulating RPM packages

License: GPLv2+ and LGPLv2+ with exceptions

Requires: %{name} = %{version}-%{release}

Requires: %{name}-libs%{_isa} = %{version}-%{release}

Requires: %{name}-build-libs%{_isa} = %{version}-%{release}

Requires: %{name}-sign-libs%{_isa} = %{version}-%{release}

Requires: popt-devel%{_isa}

%description devel

This package contains the RPM C library and header files. These

development files will simplify the process of writing programs that

manipulate RPM packages and databases. These files are intended to

simplify the process of creating graphical package managers or any

other tools that need an intimate knowledge of RPM packages in order

to function.

This package should be installed if you want to develop programs that

will manipulate RPM packages and databases.

%package build

Summary: Scripts and executable programs used to build packages

Requires: rpm = %{version}-%{release}

Requires: elfutils >= 0.128 binutils

Requires: findutils sed grep gawk diffutils file patch >= 2.5

Requires: tar unzip gzip bzip2 cpio xz

%if %{with zstd}

Requires: zstd

%endif

Requires: pkgconfig >= 1:0.24

Requires: /usr/bin/gdb-add-index

# https://fedoraproject.org/wiki/Changes/Minimal_GDB_in_buildroot

Suggests: gdb-minimal

# Technically rpmbuild doesn't require any external configuration, but

# creating distro-compatible packages does. To make the common case

# "just work" while allowing for alternatives, depend on a virtual

# provide, typically coming from redhat-rpm-config.

Requires: system-rpm-config

%description build

The rpm-build package contains the scripts and executable programs

that are used to build packages using the RPM Package Manager.

%package sign

Summary: Package signing support

Requires: rpm-sign-libs%{_isa} = %{version}-%{release}

%description sign

This package contains support for digitally signing RPM packages.

%package -n python3-%{name}

Summary: Python 3 bindings for apps which will manipulate RPM packages

BuildRequires: python3-devel

%{?python_provide:%python_provide python3-%{name}}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

Provides: %{name}-python3 = %{version}-%{release}

Obsoletes: %{name}-python3 < %{version}-%{release}

Obsoletes: platform-python-%{name} < %{version}-%{release}

%description -n python3-%{name}

The python3-rpm package contains a module that permits applications

written in the Python programming language to use the interface

supplied by RPM Package Manager libraries.

This package should be installed if you want to develop Python 3

programs that will manipulate RPM packages and databases.

%package apidocs

Summary: API documentation for RPM libraries

BuildArch: noarch

%description apidocs

This package contains API documentation for developing applications

that will manipulate RPM packages and databases.

%package cron

Summary: Create daily logs of installed packages.

BuildArch: noarch

Requires: crontabs logrotate rpm = %{version}-%{release}

%description cron

This package contains a cron job which creates daily logs of installed

packages on a system.

%if %{with plugins}

%package plugin-selinux

Summary: Rpm plugin for SELinux functionality

Requires: rpm-libs%{_isa} = %{version}-%{release}

Requires: selinux-policy-base

%description plugin-selinux

%{summary}.

%package plugin-syslog

Summary: Rpm plugin for syslog functionality

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-syslog

%{summary}.

%package plugin-systemd-inhibit

Summary: Rpm plugin for systemd inhibit functionality

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-systemd-inhibit

This plugin blocks systemd from entering idle, sleep or shutdown while an rpm

transaction is running using the systemd-inhibit mechanism.

%package plugin-ima

Summary: Rpm plugin ima file signatures

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-ima

%{summary}.

%package plugin-fapolicyd

Summary: Rpm plugin for fapolicyd functionality

Requires: rpm-libs%{_isa} = %{version}-%{release}

Provides: fapolicyd-plugin

Obsoletes: fapolicyd-dnf-plugin

%description plugin-fapolicyd

%{summary}.

%package plugin-prioreset

Summary: Rpm plugin for resetting scriptlet priorities for SysV init

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-prioreset

%{summary}.

Useful on legacy SysV init systems if you run rpm transactions with

nice/ionice priorities. Should not be used on systemd systems.

%package plugin-audit

Summary: Rpm plugin for logging audit events on package operations

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-audit

%{summary}.

# with plugins

%endif

%prep

%autosetup -n rpm-%{srcver} %{?with_int_bdb:-a 1} -p1

%if %{with bdb} && %{with int_bdb}

ln -s db-%{bdbver} db

%endif

# switch to sqlite db by default, including during build-time tests

%if %{with sqlite}

sed -i -e "/_db_backend/ s/ bdb/ sqlite/g" macros.in

%endif

%build

%set_build_flags

autoreconf -i -f

# Hardening hack taken from macro %%configure defined in redhat-rpm-config

for i in $(find . -name ltmain.sh) ; do

     %{__sed} -i.backup -e 's~compiler_flags=$~compiler_flags="%{_hardened_ldflags}"~' $i

done;

# Using configure macro has some unwanted side-effects on rpm platform

# setup, use the old-fashioned way for now only defining minimal paths.

./configure \

    --prefix=%{_usr} \

    --sysconfdir=%{_sysconfdir} \

    --localstatedir=%{_var} \

    --sharedstatedir=%{_var}/lib \

    --libdir=%{_libdir} \

    --build=%{_target_platform} \

    --host=%{_target_platform} \

    --with-vendor=redhat \

    --enable-bdb=%{?with_bdb:yes}%{!?with_bdb:no} \

    %{!?with_int_bdb: --with-external-db} \

    %{!?with_plugins: --disable-plugins} \

    --with-lua \

    --with-selinux \

    --with-cap \

    --with-acl \

    %{?with_ndb: --enable-ndb} \

    %{!?with_libarchive: --without-archive} \

    %{?with_libimaevm: --with-imaevm} \

    %{?with_zstd: --enable-zstd} \

    %{?with_sqlite: --enable-sqlite} \

    %{?with_bdb_ro: --enable-bdb-ro} \

    --with-fapolicyd \

    --enable-python \

    --with-crypto=openssl

%make_build

pushd python

%py3_build

popd

%install

%make_install

# We need to build with --enable-python for the self-test suite, but we

# actually package the bindings built with setup.py (#531543#c26)

pushd python

%py3_install

popd

mkdir -p $RPM_BUILD_ROOT%{_unitdir}

install -m 644 %{SOURCE10} $RPM_BUILD_ROOT/%{_unitdir}

# Save list of packages through cron

mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily

install -m 755 scripts/rpm.daily ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/rpm

mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d

install -m 644 scripts/rpm.log ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d/rpm

%if %{with bdb}

mkdir -p ${RPM_BUILD_ROOT}%{_tmpfilesdir}

echo "r /var/lib/rpm/__db.*" > ${RPM_BUILD_ROOT}%{_tmpfilesdir}/rpm.conf

%endif

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/rpm

mkdir -p $RPM_BUILD_ROOT%{rpmhome}/macros.d

mkdir -p $RPM_BUILD_ROOT/var/lib/rpm

# init an empty database for %ghost'ing for all supported backends

for be in %{?with_ndb:ndb} %{?with_sqlite:sqlite} %{?with_bdb:bdb}; do

    ./rpmdb --define "_db_backend ${be}" --dbpath=${PWD}/${be} --initdb

    cp -va ${be}/. $RPM_BUILD_ROOT/var/lib/rpm/

done

%find_lang rpm

find $RPM_BUILD_ROOT -name "*.la"|xargs rm -f

# These live in perl-generators and python-rpm-generators now

rm -f $RPM_BUILD_ROOT/%{rpmhome}/{perldeps.pl,perl.*,pythond*}

rm -f $RPM_BUILD_ROOT/%{_fileattrsdir}/{perl*,python*}

rm -rf $RPM_BUILD_ROOT/var/tmp

# This is installed by mistake by setup.py

rm -f $RPM_BUILD_ROOT/usr/lib*/python*/site-packages/rpm/_rpm.so

%if %{with check}

%check

make check TESTSUITEFLAGS=-j%{_smp_build_ncpus} || (cat tests/rpmtests.log; exit 1)

# rpm >= 4.16.0 testsuite leaves a read-only tree behind, clean it up

make clean

%endif

# Handle rpmdb rebuild service on erasure of old to avoid ordering issues

# https://pagure.io/fesco/issue/2382

%triggerun -- rpm < 4.15.90-0.git14971.10

if [ -x /usr/bin/systemctl ]; then

    systemctl --no-reload preset rpmdb-rebuild ||:

fi

%posttrans

if [ -f /var/lib/rpm/Packages ]; then

    touch /var/lib/rpm/.rebuilddb

fi

%files -f rpm.lang

%license COPYING

%doc CREDITS doc/manual/[a-z]*

%if %{with bdb}

%{_tmpfilesdir}/rpm.conf

%endif

%{_unitdir}/rpmdb-rebuild.service

%dir %{_sysconfdir}/rpm

%attr(0755, root, root) %dir /var/lib/rpm

%attr(0644, root, root) %ghost %config(missingok,noreplace) /var/lib/rpm/*

%attr(0644, root, root) %ghost /var/lib/rpm/.*.lock

%{_bindir}/rpm

%if %{with libarchive}

%{_bindir}/rpm2archive

%endif

%{_bindir}/rpm2cpio

%{_bindir}/rpmdb

%{_bindir}/rpmkeys

%{_bindir}/rpmquery

%{_bindir}/rpmverify

%{_mandir}/man8/rpm.8*

%{_mandir}/man8/rpmdb.8*

%{_mandir}/man8/rpmkeys.8*

%if %{with libarchive}

%{_mandir}/man8/rpm2archive.8*

%endif

%{_mandir}/man8/rpm2cpio.8*

%{_mandir}/man8/rpm-misc.8*

%{_mandir}/man8/rpm-plugins.8*

# XXX this places translated manuals to wrong package wrt eg rpmbuild

%lang(fr) %{_mandir}/fr/man[18]/*.[18]*

%lang(ko) %{_mandir}/ko/man[18]/*.[18]*

%lang(ja) %{_mandir}/ja/man[18]/*.[18]*

%lang(pl) %{_mandir}/pl/man[18]/*.[18]*

%lang(ru) %{_mandir}/ru/man[18]/*.[18]*

%lang(sk) %{_mandir}/sk/man[18]/*.[18]*

%attr(0755, root, root) %dir %{rpmhome}

%{rpmhome}/macros

%{rpmhome}/macros.d

%{rpmhome}/lua

%{rpmhome}/rpmpopt*

%{rpmhome}/rpmrc

%{rpmhome}/rpmdb_*

%{rpmhome}/rpm.daily

%{rpmhome}/rpm.log

%{rpmhome}/rpm.supp

%{rpmhome}/rpm2cpio.sh

%{rpmhome}/tgpg

%{rpmhome}/platform

%dir %{rpmhome}/fileattrs

%files libs

%{_libdir}/librpmio.so.%{sover}

%{_libdir}/librpm.so.%{sover}

%{_libdir}/librpmio.so.%{sover}.*

%{_libdir}/librpm.so.%{sover}.*

%if %{with plugins}

%dir %{_libdir}/rpm-plugins

%files plugin-syslog

%{_libdir}/rpm-plugins/syslog.so

%{_mandir}/man8/rpm-plugin-syslog.8*

%files plugin-selinux

%{_libdir}/rpm-plugins/selinux.so

%{_mandir}/man8/rpm-plugin-selinux.8*

%files plugin-systemd-inhibit

%{_libdir}/rpm-plugins/systemd_inhibit.so

%{_mandir}/man8/rpm-plugin-systemd-inhibit.8*

%files plugin-ima

%{_libdir}/rpm-plugins/ima.so

%{_mandir}/man8/rpm-plugin-ima.8*

%files plugin-fapolicyd

%{_libdir}/rpm-plugins/fapolicyd.so

%{_mandir}/man8/rpm-plugin-fapolicyd.8*

%files plugin-prioreset

%{_libdir}/rpm-plugins/prioreset.so

%{_mandir}/man8/rpm-plugin-prioreset.8*

%files plugin-audit

%{_libdir}/rpm-plugins/audit.so

%{_mandir}/man8/rpm-plugin-audit.8*

# with plugins

%endif

%files build-libs

%{_libdir}/librpmbuild.so.%{sover}

%{_libdir}/librpmbuild.so.%{sover}.*

%files sign-libs

%{_libdir}/librpmsign.so.%{sover}

%{_libdir}/librpmsign.so.%{sover}.*

%files build

%{_bindir}/rpmbuild

%{_bindir}/gendiff

%{_bindir}/rpmspec

%{_mandir}/man1/gendiff.1*

%{_mandir}/man8/rpmbuild.8*

%{_mandir}/man8/rpmdeps.8*

%{_mandir}/man8/rpmspec.8*

%{rpmhome}/brp-*

%{rpmhome}/check-*

%{rpmhome}/debugedit

%{rpmhome}/sepdebugcrcfix

%{rpmhome}/find-debuginfo.sh

%{rpmhome}/find-lang.sh

%{rpmhome}/*provides*

%{rpmhome}/*requires*

%{rpmhome}/*deps*

%{rpmhome}/*.prov

%{rpmhome}/*.req

%{rpmhome}/mkinstalldirs

%{rpmhome}/fileattrs/*

%files sign

%{_bindir}/rpmsign

%{_mandir}/man8/rpmsign.8*

%files -n python3-%{name}

%{python3_sitearch}/rpm/

%{python3_sitearch}/rpm-%{rpmver}*.egg-info

%files devel

%{_mandir}/man8/rpmgraph.8*

%{_bindir}/rpmgraph

%{_libdir}/librp*[a-z].so

%{_libdir}/pkgconfig/rpm.pc

%{_includedir}/rpm/

%files cron

%{_sysconfdir}/cron.daily/rpm

%config(noreplace) %{_sysconfdir}/logrotate.d/rpm

%files apidocs

%license COPYING

%doc doc/librpm/html/*

%changelog

* Mon Dec 19 2022 Florian Festi <ffesti@redhat.com> - 4.16.1.3-22

- Fix option handling in rpm2archive for #2150804

* Fri Nov 18 2022 Yaakov Selkowitz <yselkowi@redhat.com> - 4.16.1.3-21

- Support long language names for QT (#2144005)

* Mon Nov 07 2022 Florian Festi <ffesti@redhat.com> - 4.16.1.3-20

- Add bcond macros (#2129060)

- Fix db queries with carets (#2129468)

- Remove spurious Python rpm module (#2135731)

- Handle SELinux log messages (#2123719)

- Add --nocompression to rpm2archive (#2150804)

* Fri Oct 21 2022 Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-19

- Bump release for rebuild

* Fri Sep 23 2022 Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-18

- Make write() nonblocking in fapolicyd plugin (#2111251)

* Wed Aug 03 2022 Florian Festi <ffesti@redhat.com> - 4.16.1.3-17

- Make rpm2cpio.sh more robust (#1983015)

* Thu Jun 30 2022 Nick Clifton  <nickc@redhat.com> - 4.16.1.3-15

- Pass _find_debuginfo_vendor_opts to the find-debuginfo script.  (#2099617)

* Tue Jun 28 2022 Florian Festi <ffesti@redhat.com> - 4.16.1.3-14

- Warning for failed key import (#2069877)

* Tue Apr 05 2022 Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-12

- Fix minor ABI regression in rpmcli.h (#2037352)

* Mon Feb 14 2022 Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-11

- Fix IMA signature lengths assumed constant, take III (#2018937)

- Fix regression reading rpm v3 and other rare packages (#2037186)

- Fix spurious %transfiletriggerpostun execution (#2023692)

* Mon Jan 31 2022 Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-10

- Address covscan issues in binding sigs validation patch (#1943724)

- Bump hash for rpmdb cookie to SHA256 for FIPS (#2048455)

- Add --path query option (#2037352)

- Skip recorded symlinks in --setperms (#2025906)

* Mon Dec 13 2021 Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-9

- Fix IMA signature lengths assumed constant, take II (#2018937)

* Thu Dec 09 2021 Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-8

- Support hash v8 databases from BDB < 4.6 (#1965147)

- Ensure ELF files get stripped when debuginfo is disabled (#1999009)

- Actually honor libarchive bcond at configure time (#1999012)

- Unbreak checking of installed rich dependencies (#2015407)

- Rebuild against soname bump in ima-evm-utils (#2026079)

- Fix IMA signature lengths assumed constant (#2018937)

- Validate and require subkey binding sigs on PGP pubkeys (#1943724)

- Fixes CVE-2021-3521

* Thu Aug 19 2021 Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-7

- Unblock signals in forked scriptlets (#1991667)

* Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 4.16.1.3-6.1

- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags

  Related: rhbz#1991688

* Wed Jul 28 2021 Florian Weimer <fweimer@redhat.com> - 4.16.1.3-6

- Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097)

* Fri Jul 23 2021 Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-5

- Rebuild for gating.yaml

* Thu Jul 22 2021 Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-4

- Add support for EdDSA signatures to rpmsign (#1962234)

- Add fapolicyd plugin (#1942549)

* Mon Jul 12 2021 Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-3

- Release bump for a rebuild

* Tue Jun 29 2021 Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-2

- Address important covscan issues (#1938861)

* Tue Jun 15 2021 Mohan Boddu <mboddu@redhat.com> - 4.16.1.3-1.2

- Rebuilt for RHEL 9 BETA for openssl 3.0. Related: rhbz#1971065

* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 4.16.1.3-1.1

- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

* Mon Mar 22 2021 Panu Matilainen <pmatilai@redhat.com> - 4.16.1.3-1

- Rebase to rpm 4.16.1.3 (https://rpm.org/wiki/Releases/4.16.1.3)

* Wed Feb 03 2021 Panu Matilainen <pmatilai@redhat.com> - 4.16.1.2-6

- Drop support for read-write Berkeley DB format (#1787311)