Rpmlint

Latest version: v2.6.1

Safety actively analyzes 685507 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 3

5.33

Python 3.7.0b5 magic number is 3394
Update TagsCheck.py
pyc related tests: DRY
Fix getting pyc mtime on Python 3.7
Always import XDG desktop files as utf8
Fix Flake8 warnings
Update Magic values for Python 3.7 (Fixes 123)
Improve XDG Menu checks stability
Test added.
Ignore useless-provides on debuginfo provides (112)
Properly handle the exception on missing files
Avoid calling close on undefined fd variable
Code formatting fixed to meet the style.
Modify FakePkg to let the test.sh pass.
_sourcedir macro defined.
Avoid summary-not-capitalized warning on digits
Avoid catch-all except statements
Use ImportError to avoid catch-all except: statements
Handle E741: ambiguous identifier
Accept python(abi) as a valid versioned python dependency
Binariescheck: Check for chroot/chdir on ARM, PPC
Avoid false positives on is_elf check
Handle %post scripts that contain non-ascii characters
Further tweak lib_regex
split wrong-script-interpreter into env-script-interpreter
Validate Appdata also when appstream-util is unavailable
Remove dependency on unicodedata
Lower false-positives on summary-not-capitalized
Tighten wrong-script-interpreter check to lower false positives
Check for unexpanded macros in more Tags
Rename local file variable to fname
Skip binaryinfo-readelf-failed on non-ELF archives
Add check for validating file extensions
Do not report error if call positions are unknown
Execute chroot tests also on x86 rpms
Tighten lib_regex to avoid false positive in python bindings
Better details for wrong-script-interpreter
Extend scm_regex to capture more SCM system files
AppDataCheck: Pass --nonet to appstream-util if NetworkEnabled is False
test: Fix cpio location in centos6
test: Combine run commands in fedoradev container
test: Remove dnf upgrade from fedora containers
test: Dockerfile whitespace tweaks

2.6.1

This is a minor fix release. The release fixes a crash when trying to lint packages with folders or binaries with `tmpfiles.d` in the path.

This is the complete list of changes from the previous release:

* FilesCheck: Fix zero perm check with binaries
* FilesCheck: Fix zero permission check with folder
* Update openSUSE's licenses.toml
* configs/openSUSE/users-groups.toml: add user and group woodpecker
* configs/openSUSE/users-groups.toml: add user and group vault-sync
* configs/openSUSE/users-groups.toml: add user and group openbao
* configs/openSUSE/users-groups.toml: add user and group alloy

I want to thank the following new contributors for their efforts in this release:
DimStar77 and johanneskastl.

2.6

This is a minor feature release with the following improvements:

RPM Package Handling
- Added support for RPM packages containing files greater than 4GB.
- Use `rpm2archive` to unpack and left `rpm2cpio` as a fallback for distros without `rpm2archive`.
- Checked for Python dependencies like `python3.12dist(foo)`.
- PythonCheck: simplify requirement check using metadata.
- Add new check to FilesCheck to look for files with zero perms.
- Check usage of deprecated `%patch -pN` macro.
- Warn about no `%check` section in spec.
- BinariesCheck: do not mark as binary eBPF ELF files
- Added `pgadmin`, `forgejo`, `netdata`, `cady` user/group
- Fixed issues related to `readelf` output encoding handling.

Linting and Code Quality
- Reset all checks for each package.
- Cleaned up test files, creating mock packages to replace `.rpm` binaries.

I want to thank the following new contributors for their efforts in this release:
plageat, chaitanyabisht, antlarr, carlosrodfern, Idesmi, darix, mia-0 and i12momal.

Full author list with number of (non-merge) commits:

27 Daniel Garcia Moreno
8 Mikhail Campos Guadamuz
5 Luz Marina Montilla Marín
4 Chaitanya Bisht
3 afrid18
2 Luz Marina
1 Antonio Larrosa
1 Carlos Rodriguez-Fernandez
1 Dirk Müller
1 Idesmi
1 Marcus Rückert
1 Mia Herkt
1 Pi-Cla

2.6.0

2.5

This is a minor feature release with the following improvements:

* New check for python packages called PythonCheck with new warnings and
errors:
`python-module-def`, `python-sitelib-glob-in-files`,
`python-doc-in-package`, `python-tests-in-site-packages`,
`python-doc-in-site-packages`, `python-src-in-site-packages`,
`python-missing-require`, `python-leftover-require`,
`python-pyc-multiple-versions` and `python-sphinx-doctrees-leftover`.
* Do not consider files-duplicate for SMALL files (configurable with
`DuplicatesMinSize` that's 4 bytes by default)
* dump_stats.py: add one more category for filtering
* Remove shared-library-without-dependency and library-not-linked-against-libc
(969)
* Relax no-binary and noarch-with-lib64 checks, detect symlinks in /usr/lib64
as binaries.
* Support filtering of warnings/errors based on title
* Add new check: patchable-function-entry-in-archive
* SpecCheck: Improve patch applied regex to detect %patch -Pn and `%patch n`
* Adjust for rpm-4.19.0 API changes
* BinariesCheck: Allow ELF prefix in magic string
* Add iso_15924 to LANGUAGES so now language codes like `zh_Hant` are detected
as valid
* Add new check to detect links to scripts, `symlink-to-binary-with-shebang`
* Improve help in rpmdiff

Development Improvements:
* Improved the test framework so now it's easier to write simple tests.
* Migrate metadata from setup.py to pyproject.toml
* Releasing rpmlint as pre-commit hook

I want to thank the following new contributors for their efforts in this release:
afrid18, bkmgit, cyungmann, computersalat, emilianolangella,
fabiobarkoski, jpodivin, NeerajGartia21 and Pi-Cla.

Full author list with number of (non-merge) commits:

49 Daniel Garcia Moreno
43 Martin Liska
38 afrid18
10 Todd Zullinger
3 ChrisWi
3 fabiobarkoski
2 Ondřej Súkup
1 Benson Muite
1 Chris Yungmann
1 Emiliano Langella
1 Jan Engelhardt
1 Jiri Podivin
1 LGTM Migrator
1 Matthias Gerstner
1 Miro Hrončok
1 Neeraj Gartia
1 Pi-Cla

2.5.0

Page 1 of 3

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.