CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

archivers/rpm44.18.2_3

Red Hat Package Manager

Maintainer
rodrigo@FreeBSD.org
Packages
rpm4 4.18.2_3, rpm4-noopenmp 4.18.2_3
Upstream
Higher version available: 6.1.0
CPE
rpm:rpm from the port
WWW
https://rpm.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (2)

VuXML entries whose affected range this version has left.

Commits (144)

Johan van Selst (johans) · 4.9.1.1
Update to rpm 4.9.1.1 (bugfix release)
9b2ffc7129
Johan van Selst (johans) · 4.9.1
Update to rpm 4.9.1
b00ce9fccb
Johan van Selst (johans) · 4.9.0
Update rpm4 to 4.9.0
4916065e9f
Matthias Andree (mandree) · 4.8.1_4
Bump USE_BDB due to impending db45 removal. Mark db51 invalid (breaks build).
48eee7cdcb
Martin Wilke (miwi) · 4.8.1_4
- Get Rid MD5 support

With hat:	portmgr (myself)
65e190c0f0
Erwin Lansing (erwin) · 4.8.1_4
Fix shared lib version of lzma.

Pointy hat:	johans

Submitted by:	pointyhat
7a46125574
Johan van Selst (johans) · 4.8.1_4
- Install Python bindings by default [1] - Make hidden dependency on liblzma explicit [2]

PR:		ports/153139 [2]
Submitted by:	Anders F Björklund <afb@rpm5.org [1]
		fluffy [2]
32d827c027
Ade Lovett (ade) · 4.8.1_3
Sync to new bsd.autotools.mk
4a8684e352
Christian Weisgerber (naddy) · 4.8.1_3
Increment PORTREVISION after liblzma major version change in archivers/xz.
dab3be2b8b
Johan van Selst (johans) · 4.8.1_2
Fix compilation of the python module for rpm; and fix plist [1] Add an OPTION to install this module

PR:		ports/149886 [1]
Submitted by:	Anders.F.Björklund
8869fdeb3a
Johan van Selst (johans) · 4.8.1_1
Now set localstatedir correctly (/var)

RPM 4.8.1 uses a strange default for the %{_var} rpm macro...
The bug was fixed in RPM 5.0.0, variables need to be expanded.

PR:		ports/149498
Submitted by:	Anders F Björklund <afb@rpm5.org
d26b75cf0f
Johan van Selst (johans) · 4.8.1
- Add extra patch that should fix the rpm build on FreeBSD 6.x

Reported by:	pointyhat via erwin
Feature safe:	yes
6ab8c72d01
Johan van Selst (johans) · 4.8.1
- Update to rpm-4.8.1 (previous version was nearly 10yrs old) - Grab maintainership

Feature safe:	yes
ae5b35f46a
Ade Lovett (ade) · 4.0.4_10
Bounce PORTREVISION for gettext-related ports.  Have fun, ya'll.
8d837132c7
Dirk Meyer (dinoex) · 4.0.4_9
- update to 1.4.1 Reviewed by:	exp8 run on pointyhat Supported by:	miwi
de78af3ac5
Jeremy Messenger (mezz) · 4.0.4_8
-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22. -Update libtool and libltdl to 2.2.6a. -Remove devel/libtool15 and devel/libltdl15. -Fix ports build with libtool22/libltdl22. -Bump ports that depend on libltdl22 due to shared library version change. -Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:	marcus and kwm
Pointyhat-exp:	a few times by pav
Tested by:	pgollucci, "Romain Tartière" <romain@blogreen.org>, and
		a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:	marcus
Approved by:	portmgr
789d75c728
Josh Paetzel (jpaetzel) · 4.0.4_8
Update pkg-plist to reflect directories left behind after deinstall

PR:	ports/134619
Approved by:	linimon (mentor)
9a114f40d6
Renato Botelho (garga) · 4.0.4_7
- Fix MASTER_SITES

PR:		ports/129871
Submitted by:	Steven Kreuzer <skreuzer@exit2shell.com>
ab966d0093
Edwin Groothuis (edwin) · 4.0.4_7
Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)
6527ef2070
Florent Thoumie (flz) · 4.0.4_6
- Welcome X.org 7.2 \o/. - Set X11BASE to ${LOCALBASE} for recent ${OSVERSION}. - Bump PORTREVISION for ports intalling files in ${X11BASE}.
d4f0d0048a
Greg Lewis (glewis) · 4.0.4_5
. Drop maintainership.
32c64f475f
Pav Lucistnik (pav) · 4.0.4_5
- Fix after objformat removal

PR:		ports/109468 (based on)
Submitted by:	Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
Approved by:	maintainer timeout (glewis; 3 weeks)
7bb18580e1
Greg Lewis (glewis) · 4.0.4_4
. Fix the build of the Python bindings for Python 2.4.  It seems like a   better version of this patch would use bsd.python.mk and PYTHON_VERSION,   but I don't have time right now.

PR:		103195
Submitted by:	Eygene A. Ryabinkin <rea-fbsd@codelabs.ru>
913b09d6e7
Edwin Groothuis (edwin) · 4.0.4_4
Remove USE_REINPLACE from ports in categories starting with A.
179697185d
Ade Lovett (ade) · 4.0.4_4
Conversion to a single libtool environment.

Approved by:	portmgr (kris)
8503536d38
Edwin Groothuis (edwin) · 4.0.4_3
Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry Approved by:    krion@ PR:             ports/88711 (related)
ffbac30e7d
Greg Lewis (glewis) · 4.0.4_3
. Add SHA256. . SIZEify.
d363af3882
Ade Lovett (ade) · 4.0.4_3
Mass-conversion to the USE_AUTOTOOLS New World Order.  The code present in bsd.autotools.mk essentially makes this a no-op given that all the old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in exactly the same way as USE_AUTOTOOLS itself.

Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.

Preliminary documentation can be found at:
	http://people.FreeBSD.org/~ade/autotools.txt

which is in the process of being SGMLized before introduction into the
Porters Handbook.

Light blue touch-paper.  Run.
54a0b86543
Greg Lewis (glewis) · 4.0.4_3
. bzip2 has been in the base system since 4.4, so no need to check for it.

PR:		88985
Submitted by:	edwin
8272a42847
Greg Lewis (glewis) · 4.0.4_3
. Change rpmrc to support amd64 and also to indicate that i386 and amd64   are compatible.  This differs from PR 80922 in that amd64 is made the   canonical RPM architecture on that architecture rather than x86_64 as   it is under Linux. . Bump PORTREVISION.

PR:		80922 (based on)
38306e39d7
Greg Lewis (glewis) · 4.0.4_2
. Change the default path to search for the source when building an RPM   to be ${LOCALBASE}/src/portbld, which is created by the port during   installation.  Don't use ${LOCALBASE}/src/redhat as the default as   its not created by the port by default and is inappropriate for   FreeBSD.

Its quite likely ${LOCALBASE}/src/rpm is a better choice, but that
  requires more work than I have time for right now.

Submitted by:	Roman Neuhauser <neuhauser@chello.cz>
3957ad95fe
Greg Lewis (glewis) · 4.0.4_2
. Try to remove ${PREFIX}/src when deinstalling as the port creates this   directory.

Submitted by:	kris
1ec8e877e8
Kris Kennaway (kris) · 4.0.4_2
Clean up handling of locale directories at deinstall-time:

* Don't remove "system directories" (which were created by BSD.*.dist)
* Silently try to remove locale directories which we might have created
be3e1f7794
Volker Stolz (vs) · 4.0.4_2
s/mirror.ac.uk/mirrorservice.org

PR:		ports/69481
Submitted by:	Tim Bishop, lesi@
Approved by:	maintainer timeout
c750cb07a3
Greg Lewis (glewis) · 4.0.4_2
. Use libtool 1.3.x rather than 1.4.x (thus removing the last port   dependency on libtool14).

Submitted by:	ade
f9e82daec6
Kirill Ponomarev (krion) · 4.0.4_2
- Use USE_ICONV knob

Approved by:	portmgr
4efa9ce4ab
Greg Lewis (glewis) · 4.0.4_2
. /usr/local -> %%LOCALBASE%%.
cf9a75e8ae
Greg Lewis (glewis) · 4.0.4_2
. Link the python modules against libintl so they can actually be used. . Bump PORTREVISION.
fbb546122a
Greg Lewis (glewis) · 4.0.4_1
. No, it doesn't conflict with rpm2cpio as that installs rpm2cpio.pl, not   rpm2cpio.
020b6cd408
Greg Lewis (glewis) · 4.0.4_1
. Build and install API documentation if NOPORTDOCS isn't set. . Bump PORTREVISION for this change.
e96188d0c8
Greg Lewis (glewis) · 4.0.4
. The RPM web site now refers to it as the "RPM Package Manager", not the   "Red Hat Package Manager".  Fix this and reformat the text.
ed1a42fcb0
Greg Lewis (glewis) · 4.0.4
. Disable the javaglue for beecrypt.  Its pointless and its broken (breaks   the build). . Reformat CONFIGURE_ARGS.
60611a83d9
Greg Lewis (glewis) · 4.0.4
. Fix fetch.
00ba114b79
Greg Lewis (glewis) · 4.0.4
Add a port of rpm 4.0.4:

"The Red Hat Package Manager (RPM) is a powerful command line driven
 package management system capable of installing, uninstalling,
 verifying, querying, and updating computer software packages. Each
 software package consists of an archive of files along with information
 about the package like its version, a description, and the like.
 There is also a related API ("Application Program Interface"),
 permitting advanced developers to bypass 'shelling out' to a command
 line, and to manage such transactions from within a native coding
 language.

 WWW: http://www.rpm.org/"

4.0.4 was chosen because:
. The only newer version available as a tarball (4.1) is buggy.
. This version closely corresponds to our current default linux_base.
. This version uses the version of popt we have in the tree (unfortunately
  it uses an earlier version of beecrypt).
. This version is a lot less work to port than 4.2 (elfutils).

However, I am considering how best this port could be updated to a more
recent version (e.g. 4.1.1 or 4.2, probably the latter).

This wasn't an update to the current rpm port as I haven't done enough
testing of other ports that use rpm with it.

Tested on 4.9/i386, 5.2/sparc64 and 5.2/alpha.
63157dad83