flatpak/sources
Debarshi Ray 2591b14abf Rebase to 1.10.8 (CVE-2023-28100 and CVE-2023-28101)
The gpgme dependency was simplified to prefer pkg-config on
distributions released after 2016, as opposed to gpgme-config [1].
Unfortunately, on RHEL 8, gpgme-devel doesn't pull in libassuan-devel
even though gpgme.pc refers to it [2]:
  $ pkg-config --cflags --libs gpgme
  -I/usr/include/libassuan2 -lgpgme -lgpg-error -lassuan

... and libassuan-devel itself doesn't provide a libassuan.pc.

Last time when flatpak-1.10.7 was built for RHEL 8.7, something was
pulling python36 into the buildroot.  Now, on RHEL 8.9, something is
pulling python3.11 into the buildroot, and that requires the
python3.11-pyparsing RPM.

[1] Flatpak commit f1dd7d6076645b06
    https://github.com/flatpak/flatpak/commit/f1dd7d6076645b06

[2] https://bugzilla.redhat.com/show_bug.cgi?id=2222124

Resolves: #2180311, #2222103
2023-07-12 00:06:47 +02:00

2 lines
162 B
Plaintext

SHA512 (flatpak-1.10.8.tar.xz) = 0823aa522d5f5b0a6cb967609ef8db18390a1992578c7c15921494973759d83467f31112d81226797c741a4ed3732087ce6b290bd8d3cc103415094e32d0365a