21:18 Rodrigo Osorio (rodrigo) 

archivers/rpm4: Update to 4.18.2

Cangelog: https://rpm.org/wiki/Releases/4.18.2.html

    7ab114b

16:20 Dimitry Andric (dim) 

archivers/rpm4: fix build with clang 15

During an exp-run for llvm 15 (see bug 265425), it turned out that
archivers/rpm4 failed to build with clang 15:

  tools/rpmuncompress.c:101:23: warning: call to undeclared function 'basename';
ISO C99 and later do not support implicit function declarations
[-Wimplicit-function-declaration]
              const char *bn = basename(fn);
                               ^
  tools/rpmuncompress.c:101:18: error: incompatible integer to pointer
conversion initializing 'const char *' with an expression of type 'int'
[-Wint-conversion]
              const char *bn = basename(fn);
                          ^    ~~~~~~~~~~~~

This is because basename(3) is defined in <libgen.h>. After this include
is added to rpmuncompress.c, link errors still occur:

  ld: error: undefined symbol: WIFEXITED
  >>> referenced by rpmuncompress.c
  >>>               tools/rpmuncompress.o:(main)

  ld: error: undefined symbol: WEXITSTATUS
  >>> referenced by rpmuncompress.c
  >>>               tools/rpmuncompress.o:(main)

This is because WIFEXITED() and WEXITSTATUS() are macros defined in
<sys/wait.h>.

PR:		268341
Approved by:	rodrigo (maintainer)
MFH:		2022Q4

    b069566

14:03 Rodrigo Osorio (rodrigo) 

archivers/rpm4: update to version 4.18.0

Major changes:
    * Add a new Sequoia-based OpenPGP backend
    * Documentation updates
    * Fix intermediate symlinks not verified (CVE-2021-35939)
    * Fix subkey binding signatures not checked on PGP public keys
(CVE-2021-3521)
    * Refactor file and directory operations to use fd-based APIs throughout
(CVE-2021-35938)
    * Unbreak lua 2 for extensions

Full release note: https://rpm.org/wiki/Releases/4.18.0.html

Also remove version requirement for Lua dependency in port, we just use lua.

PR:			267291
Reported by:	Brian Zou <zoujiaqing@gmail.com>
Security:	CVE-2021-35939
Security:	CVE-2021-3521
Security:	CVE-2021-35938

    22f3de4