disable header verification

diff --git a/disable-header-verification.patch b/disable-header-verification.patch
new file mode 100644 (file)
index 0000000..ab553fe
--- /dev/null
+++ b/disable-header-verification.patch
@@ -0,0 +1,20 @@
+http://lists.pld-linux.org/mailman/pipermail/pld-devel-en/2015-February/024241.html
+
+--- rpm-5.4.15/lib/verify.c~   2015-02-11 12:07:41.000000000 +0200
++++ rpm-5.4.15/lib/verify.c    2015-02-11 17:31:05.418447510 +0200
+@@ -563,6 +563,7 @@
+ 
+   {
+     /* Verify header digest/signature. */
++#if NOTYET
+     if (qva->qva_flags & (VERIFY_DIGEST | VERIFY_SIGNATURE))
+     {
+       const char * horigin = headerGetOrigin(h);
+@@ -577,6 +578,7 @@
+       uh = _free(uh);
+       msg = _free(msg);
+     }
++#endif
+ 
+     /* Verify file digests. */
+     if (fc > 0 && (qva->qva_flags & VERIFY_FILES))

diff --git a/rpm.spec b/rpm.spec
index ea4df58f5250498b630863497d8f907e057305d6..ead7168ab3bbff1ca5f600b9bd252bb46b224e95 100644 (file)
--- a/rpm.spec
+++ b/rpm.spec
@@ -51,7 +51,7 @@ Summary(ru.UTF-8):    Менеджер пакетов от RPM
 Summary(uk.UTF-8):     Менеджер пакетів від RPM
 Name:          rpm
 Version:       5.4.15
-Release:       10
+Release:       11
 License:       LGPL v2.1
 Group:         Base
 # http://rpm5.org/files/rpm/rpm-5.4/rpm-5.4.15-0.20140824.src.rpm
@@ -175,6 +175,7 @@ Patch85:    rpm-CVE-2013-6435.patch
 Patch86:       rpm-CVE-2014-8118.patch
 Patch87:       %{name}-file-output-for-ELF.patch
 Patch88:       %{name}-rpmtdnext.patch
+Patch89:       disable-header-verification.patch
 
 # Patches imported from Mandriva
 
@@ -956,6 +957,7 @@ cd -
 %patch86 -p1
 %patch87 -p1
 %patch88 -p1
+%patch89 -p1
 
 %patch1000 -p1
 %patch1001 -p1