Issued:

2011-12-06

Updated:

2011-12-06

RHBA-2011:1737 - rpm bug fix and enhancement update

Synopsis

rpm bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Topic

Updated rpm packages that fix several bugs and add one enhancement are now available for Red Hat Enterprise Linux 6.

Description

The RPM Package Manager (RPM) is a powerful command line driven package management system that can install, uninstall, verify, query and update software packages.

This update fixes the following bugs:

• Prior to this update, RPM did not allow for self-conflicts. As a result, a package could not be installed if a conflict was added against the name of this package. With this update self-conflicts are permitted. Now, packages can be installed as expected. (BZ#651951)

• The rpm2cpio.sh utility was omitted when RPM switched the default compression format for the package payload to xz. As a consequence, the utility was not able to extract files. This update adds the xz support for rpm2cpio.sh and the utility now extracts files successfully. (BZ#674348)

• Prior to this update, when installing a package containing the same files as an already installed package, the file with the less preferred architecture was overwritten silently even if the file was not a binary. With this update, only binary files can overwrite other binary files; conflicting non-identical and non-binary files print an error message. (BZ#705115)

• Previously, files, that were listed in the spec file with the %defattr(-) directive, did not keep the attributes they had in the build root. With this update, the modified RPM can now keep these attributes. (BZ#705993)

• Prior to this update, signing packages that had already been signed with the same key could cause the entire signing process to abort. With this update, RPM is modified so that packages with identical signatures are skipped and the others are signed. (BZ#707449)

• Prior to this update, passing packages with a broken signature could cause the librpm library to crash. The source code has been revised and broken signatures are now rejected. (BZ#721363)

This update also adds the following enhancement:

• Previously, importing GPG keys that had already been imported before could cause RPM to fail with an error message. RPM has been modified and now imports the keys successfully. (BZ#680889)

All users of RPM are advised to upgrade to these updated packages, which fix these bugs and add this enhancement.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/kb/docs/DOC-11259

Affected Products

Updated Packages

• rpm-debuginfo-4.8.0-19.el6.ppc64.rpm
• rpm-libs-4.8.0-19.el6.ppc.rpm
• rpm-apidocs-4.8.0-19.el6.noarch.rpm
• rpm-libs-4.8.0-19.el6.s390x.rpm
• rpm-debuginfo-4.8.0-19.el6.x86_64.rpm
• rpm-debuginfo-4.8.0-19.el6.i686.rpm
• rpm-build-4.8.0-19.el6.x86_64.rpm
• rpm-libs-4.8.0-19.el6.x86_64.rpm
• rpm-debuginfo-4.8.0-19.el6.s390.rpm
• rpm-devel-4.8.0-19.el6.x86_64.rpm
• rpm-build-4.8.0-19.el6.s390x.rpm
• rpm-build-4.8.0-19.el6.i686.rpm
• rpm-devel-4.8.0-19.el6.i686.rpm
• rpm-python-4.8.0-19.el6.x86_64.rpm
• rpm-4.8.0-19.el6.src.rpm
• rpm-4.8.0-19.el6.x86_64.rpm
• rpm-libs-4.8.0-19.el6.s390.rpm
• rpm-python-4.8.0-19.el6.s390x.rpm
• rpm-devel-4.8.0-19.el6.s390.rpm
• rpm-4.8.0-19.el6.i686.rpm
• rpm-debuginfo-4.8.0-19.el6.s390x.rpm
• rpm-libs-4.8.0-19.el6.ppc64.rpm
• rpm-4.8.0-19.el6.s390x.rpm
• rpm-libs-4.8.0-19.el6.i686.rpm
• rpm-devel-4.8.0-19.el6.ppc64.rpm
• rpm-4.8.0-19.el6.ppc64.rpm
• rpm-build-4.8.0-19.el6.ppc64.rpm
• rpm-python-4.8.0-19.el6.ppc64.rpm
• rpm-devel-4.8.0-19.el6.s390x.rpm
• rpm-devel-4.8.0-19.el6.ppc.rpm
• rpm-debuginfo-4.8.0-19.el6.ppc.rpm
• rpm-python-4.8.0-19.el6.i686.rpm
• rpm-cron-4.8.0-19.el6.noarch.rpm

Fixes

• This content is not included.BZ - 674348
• This content is not included.BZ - 705115
• This content is not included.BZ - 707449
• This content is not included.BZ - 721363
• This content is not included.BZ - 742499

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.