Rpmlint

Latest version: v2.7.0

Safety actively analyzes 723217 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 3

5.33

Python 3.7.0b5 magic number is 3394
Update TagsCheck.py
pyc related tests: DRY
Fix getting pyc mtime on Python 3.7
Always import XDG desktop files as utf8
Fix Flake8 warnings
Update Magic values for Python 3.7 (Fixes 123)
Improve XDG Menu checks stability
Test added.
Ignore useless-provides on debuginfo provides (112)
Properly handle the exception on missing files
Avoid calling close on undefined fd variable
Code formatting fixed to meet the style.
Modify FakePkg to let the test.sh pass.
_sourcedir macro defined.
Avoid summary-not-capitalized warning on digits
Avoid catch-all except statements
Use ImportError to avoid catch-all except: statements
Handle E741: ambiguous identifier
Accept python(abi) as a valid versioned python dependency
Binariescheck: Check for chroot/chdir on ARM, PPC
Avoid false positives on is_elf check
Handle %post scripts that contain non-ascii characters
Further tweak lib_regex
split wrong-script-interpreter into env-script-interpreter
Validate Appdata also when appstream-util is unavailable
Remove dependency on unicodedata
Lower false-positives on summary-not-capitalized
Tighten wrong-script-interpreter check to lower false positives
Check for unexpanded macros in more Tags
Rename local file variable to fname
Skip binaryinfo-readelf-failed on non-ELF archives
Add check for validating file extensions
Do not report error if call positions are unknown
Execute chroot tests also on x86 rpms
Tighten lib_regex to avoid false positive in python bindings
Better details for wrong-script-interpreter
Extend scm_regex to capture more SCM system files
AppDataCheck: Pass --nonet to appstream-util if NetworkEnabled is False
test: Fix cpio location in centos6
test: Combine run commands in fedoradev container
test: Remove dnf upgrade from fedora containers
test: Dockerfile whitespace tweaks

2.7

This is a minor feature release with the following improvements:

RPM Package Handling
- New groups in openSUSE user-groups config: xpra, sssd, proxy, traefik.
- New group in Fedora user-groups config: sssd
- Don't mask rpm2cpio failure in Pkg._extract_rpm()
- Strict policy to ERR on patch-macro-old-format for openSUSE
- New warning about the usage of `%suse_update_desktop_file`
- FilesCheck: Do not error about non-readable `%ghost`
- Don't show suse-update-desktop-file-deprecated for yast packages
- `%{autochangelog}` in the changelog section do not cause a warning anymore
- Handle the missing buildroot in rpm 4.20 gracefully
- FilesCheck: Update FSF address check to match new only remote
- Add declarative build support to SpecCheck

Linting and Code Quality
- Massive clean-up test files, creating mock packages to replace `.rpm` binaries.

I want to thank the following new contributors for their efforts in this release:
sbradnick, scabrero, 13ilya-old, weberhofer and mavit.

Full author list with number of (non-merge) commits:

46 Daniel Garcia Moreno
22 Luz Marina
4 Daniel Mach
1 Dirk Müller
1 Johannes Weberhofer
1 Peter Oliver
1 Samuel Cabrero
1 Scott Bradnick
1 Илья Индиго

2.7.0

2.6.1

This is a minor fix release. The release fixes a crash when trying to lint packages with folders or binaries with `tmpfiles.d` in the path.

This is the complete list of changes from the previous release:

* FilesCheck: Fix zero perm check with binaries
* FilesCheck: Fix zero permission check with folder
* Update openSUSE's licenses.toml
* configs/openSUSE/users-groups.toml: add user and group woodpecker
* configs/openSUSE/users-groups.toml: add user and group vault-sync
* configs/openSUSE/users-groups.toml: add user and group openbao
* configs/openSUSE/users-groups.toml: add user and group alloy

I want to thank the following new contributors for their efforts in this release:
DimStar77 and johanneskastl.

2.6

This is a minor feature release with the following improvements:

RPM Package Handling
- Added support for RPM packages containing files greater than 4GB.
- Use `rpm2archive` to unpack and left `rpm2cpio` as a fallback for distros without `rpm2archive`.
- Checked for Python dependencies like `python3.12dist(foo)`.
- PythonCheck: simplify requirement check using metadata.
- Add new check to FilesCheck to look for files with zero perms.
- Check usage of deprecated `%patch -pN` macro.
- Warn about no `%check` section in spec.
- BinariesCheck: do not mark as binary eBPF ELF files
- Added `pgadmin`, `forgejo`, `netdata`, `cady` user/group
- Fixed issues related to `readelf` output encoding handling.

Linting and Code Quality
- Reset all checks for each package.
- Cleaned up test files, creating mock packages to replace `.rpm` binaries.

I want to thank the following new contributors for their efforts in this release:
plageat, chaitanyabisht, antlarr, carlosrodfern, Idesmi, darix, mia-0 and i12momal.

Full author list with number of (non-merge) commits:

27 Daniel Garcia Moreno
8 Mikhail Campos Guadamuz
5 Luz Marina Montilla Marín
4 Chaitanya Bisht
3 afrid18
2 Luz Marina
1 Antonio Larrosa
1 Carlos Rodriguez-Fernandez
1 Dirk Müller
1 Idesmi
1 Marcus Rückert
1 Mia Herkt
1 Pi-Cla

2.6.0

Page 1 of 3

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.