Bug 2010979
| Summary: | pesign: roll changes from 9-beta into 9-ga | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 9 | Reporter: | Robbie Harwood <rharwood> |
| Component: | pesign | Assignee: | Bootloader engineering team <bootloader-eng-team> |
| Status: | CLOSED ERRATA | QA Contact: | Jeff Bastian <jbastian> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | unspecified | CC: | pjanda, rvr |
| Target Milestone: | rc | Keywords: | Triaged |
| Target Release: | --- | Flags: | pm-rhel:
mirror+
|
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | pesign-113-21.el9 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2022-05-17 13:29:29 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Robbie Harwood
2021-10-05 17:26:47 UTC
patch is in 9.0.0 build It seems the changes for this bug ("sync with beta") were done for bug 2030501 (which is fine). There are minimal differences between the two branches (just a release version and changelog difference). More development, including a rebase, has been done in the meantime so the current HEAD of the rhel-9.0.0 branch does look different (again, this is fine). Moving to VERIFIED.
$ cd dist-git/pesign
$ rhpkg pull
Already up to date.
$ rhpkg switch-branch rhel-9.0.0-beta
Branch 'rhel-9.0.0-beta' set up to track remote branch 'rhel-9.0.0-beta' from 'origin'.
$ ls -1
0001-efikeygen-Fix-the-build-with-nss-3.44.patch
0002-pesigcheck-Fix-a-wrong-assignment.patch
0003-Make-0.112-client-and-server-work-with-the-113-proto.patch
0004-Rename-var-run-to-run.patch
0005-Apparently-opensc-got-updated-and-the-token-name-cha.patch
0006-client-try-run-and-var-run-for-the-socket-path.patch
0007-client-remove-an-extra-debug-print.patch
0008-Move-most-of-macros.pesign-to-pesign-rpmbuild-helper.patch
0009-pesign-authorize-shellcheck.patch
0010-pesign-authorize-don-t-setfacl-etc-pki-pesign-foo.patch
0011-kernel-building-hack.patch
0012-Use-run-not-var-run.patch
0013-Turn-off-free-nonheap-object.patch
0014-macros.pesign-handle-centos-like-rhel-with-rhelver.patch
0015-Detect-the-presence-of-rpm-sign-when-checking-for-rh.patch
pesign.py
pesign.spec
rpminspect.yaml
sources
$ rhpkg switch-branch rhel-9.0.0
Branch 'rhel-9.0.0' set up to track remote branch 'rhel-9.0.0' from 'origin'.
$ git log --grep=beta
commit ee1e06c26dc51135910df0f7b8676ff38e2348bb
Author: Robbie Harwood <rharwood>
Date: Tue Dec 14 17:44:02 2021 +0000
Sync with beta changes
Resolves: rhbz#2030501
Signed-off-by: Robbie Harwood <rharwood>
$ git checkout -b bz2010979 ee1e06c26dc51135910df0f7b8676ff38e2348bb
Switched to a new branch 'bz2010979'
$ ls -1
0001-efikeygen-Fix-the-build-with-nss-3.44.patch
0002-pesigcheck-Fix-a-wrong-assignment.patch
0003-Make-0.112-client-and-server-work-with-the-113-proto.patch
0004-Rename-var-run-to-run.patch
0005-Apparently-opensc-got-updated-and-the-token-name-cha.patch
0006-client-try-run-and-var-run-for-the-socket-path.patch
0007-client-remove-an-extra-debug-print.patch
0008-Move-most-of-macros.pesign-to-pesign-rpmbuild-helper.patch
0009-pesign-authorize-shellcheck.patch
0010-pesign-authorize-don-t-setfacl-etc-pki-pesign-foo.patch
0011-kernel-building-hack.patch
0012-Use-run-not-var-run.patch
0013-Turn-off-free-nonheap-object.patch
0014-macros.pesign-handle-centos-like-rhel-with-rhelver.patch
0015-Detect-the-presence-of-rpm-sign-when-checking-for-rh.patch
pesign.py
pesign.spec
rpminspect.yaml
sources
$ git diff rhel-9.0.0-beta..bz2010979
diff --git a/pesign.spec b/pesign.spec
index 94d466649d22..5905a96ae299 100644
--- a/pesign.spec
+++ b/pesign.spec
@@ -3,7 +3,7 @@
Name: pesign
Summary: Signing utility for UEFI binaries
Version: 113
-Release: 20%{?dist}
+Release: 21%{?dist}
License: GPLv2
URL: https://github.com/vathpela/pesign
@@ -170,13 +170,9 @@ certutil -d %{_sysconfdir}/pki/pesign/ -X -L > /dev/null
%{python3_sitelib}/mockbuild/plugins/pesign.*
%changelog
-* Fri Oct 01 2021 Peter Jones <pjones> - 113-20
-- Also detect whether rpm-sign is present when detecting RHEL builds.
- Related: rhbz#1951104
-
-* Wed Sep 29 2021 Peter Jones <pjones> - 113-19
-- Detect the RHEL version number correctly in the rpm pesign macro
- Related: rhbz#1951104
+* Tue Dec 14 2021 Robbie Harwood <rharwood> - 113-21
+- Sync with beta changes
+- Resolves: rhbz#2030501
* Tue Aug 10 2021 Peter Jones <pjones> - 113-18
- Detect the CentOS version number correctly in rpm pesign macro
$ git log --oneline ee1e06c26dc51135^1..HEAD
accbbe601fe9 (HEAD -> rhel-9.0.0, origin/rhel-9.0.0) Fix explicit NULL deref wh>
e5d5442e583a Re-enable annocheck
f916227b5ecc Fix build on aarch64
3e888376b66e New upstream version (114)
3f30fa55436e Fix gating test name
0c4faa294574 Add gating.yaml - no code changes
ee1e06c26dc5 (bz2010979) Sync with beta changes
$ ls -1
0001-Revert-Move-license-to-GPLv3.patch
0002-Fix-format-strings-for-32-bit-arches.patch
0003-macros-drop-_pesign_args.patch
0004-Disable-pragmas-for-warnings-that-are-too-old.patch
0005-Handle-NULL-pwdata-in-cms_set_pw_data.patch
0006-fcf-protection-is-arch-specific.patch
gating.yaml
pesign.py
pesign.spec
rpminspect.yaml
sources
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (new packages: pesign), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:2520 |