public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
To: git-commits@fedoraproject.org
Subject: [rpms/glib2] cve-2026-58016-f44: Switch back to timestamp-based invalidation mode but fix seed
Date: Tue, 11 Aug 2026 10:36:46 GMT	[thread overview]
Message-ID: <178644460659.1.5566362817913244502.rpms-glib2-12007a228dee@fedoraproject.org> (raw)

            A new commit has been pushed.

            Repo   : rpms/glib2
            Branch : cve-2026-58016-f44
            Commit : 12007a228deec5ff2a4c457edfeb7b4f7f77eab3
            Author : Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
            Date   : 2019-03-13T10:13:50+01:00
            Stats  : +7/-3 in 1 file(s)
            URL    : https://src.fedoraproject.org/rpms/glib2/c/12007a228deec5ff2a4c457edfeb7b4f7f77eab3?branch=cve-2026-58016-f44

            Log:
            Switch back to timestamp-based invalidation mode but fix seed

It turns out the hashed-based invalidation mode is buggy.

---
diff --git a/glib2.spec b/glib2.spec
index 4e5fa61..ec743c4 100644
--- a/glib2.spec
+++ b/glib2.spec
@@ -2,7 +2,7 @@
 
 Name: glib2
 Version: 2.60.0
-Release: 2%{?dist}
+Release: 3%{?dist}
 Summary: A library of handy utility functions
 
 License: LGPLv2+
@@ -108,8 +108,9 @@ chrpath --delete $RPM_BUILD_ROOT%{_libdir}/*.so
 
 # Perform byte compilation manually to avoid issues with
 # irreproducibility of the default invalidation mode, see
-# https://www.python.org/dev/peps/pep-0552/.
-export SOURCE_DATE_EPOCH=0
+# https://www.python.org/dev/peps/pep-0552/ and
+# https://bugzilla.redhat.com/show_bug.cgi?id=1686078
+export PYTHONHASHSEED=0
 %py_byte_compile %{__python3} %{buildroot}%{_datadir}
 
 mv  $RPM_BUILD_ROOT%{_bindir}/gio-querymodules $RPM_BUILD_ROOT%{_bindir}/gio-querymodules-%{__isa_bits}
@@ -218,6 +219,9 @@ glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
 %{_datadir}/installed-tests
 
 %changelog
+* Wed Mar 13 2019 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.60.0-3
+- Switch back to timestamp-based pyc invalidation mode
+
 * Wed Mar  6 2019 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.60.0-2
 - Make sure all .py files have fixed timestamps (fixes issue with
   parallel installability of i686 and amd64 -devel packages)

                 reply	other threads:[~2026-08-11 10:36 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178644460659.1.5566362817913244502.rpms-glib2-12007a228dee@fedoraproject.org \
    --to=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox