Backport patches for rpm-ostree in 8.2 for OCP4.4:
Side note, builds are getting blocked in Errata Tool due to what looks like a potential rust-lang regression around -fPIC, see
I raised it with Josh Stone but I think short term we should just ask the security team to waive this; it's mostly impacting i686 which we don't even ship with OpenShift, *and* using a memory safe language without null pointers etc. is a much stronger security improvement than PIC code - doesn't hurt to have both but we shouldn't allow weaker mitigations to block stronger ones.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.