14:03 Rodrigo Osorio (rodrigo) 

archivers/rpm4: update to version 4.18.0

Major changes:
    * Add a new Sequoia-based OpenPGP backend
    * Documentation updates
    * Fix intermediate symlinks not verified (CVE-2021-35939)
    * Fix subkey binding signatures not checked on PGP public keys
(CVE-2021-3521)
    * Refactor file and directory operations to use fd-based APIs throughout
(CVE-2021-35938)
    * Unbreak lua 2 for extensions

Full release note: https://rpm.org/wiki/Releases/4.18.0.html

Also remove version requirement for Lua dependency in port, we just use lua.

PR:			267291
Reported by:	Brian Zou <zoujiaqing@gmail.com>
Security:	CVE-2021-35939
Security:	CVE-2021-3521
Security:	CVE-2021-35938

    22f3de4

10:30 rodrigo 

archivers/rpm4: Upgrade to 4.16.0

 * Upgrade to 4.16.0
 * add sqlite support
 * remove deprecate config options

Major changes:
 * Database backends:
   * NDB backend promoted to stable
   * New sqlite-based backend
   * New experimental read-only BDB backend
   * BDB database backend deprecated
 * Powerful macro and %if expressions
 * Optional MIME type based file classification
 * Dependency generation by parametric macros
 * A new version parsing and comparison API in C and Python
 * Parallelise test-suite execution
 * Clarify RPM license

PR:		250573
Submitted by:	Brian Zou <zoujiaqing@gmail.com>

 

16:55 rodrigo 

Upgrade archivers/rpm4 from 4.14.2.1 to 4.15.0

Relnotes: https://rpm.org/wiki/Releases/4.15.0

PR:		240922
Submitted by:	pi