Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-22602

Y238K: signed int32_t used in buildtime calculation

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Critical Critical
    • rhel-9.5
    • rhel-9.5
    • rpm
    • rpm-4.16.1.3-30.el9
    • None
    • Low
    • rhel-swm
    • ssg_core_services
    • 15
    • 17
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • No
    • None
    • Release Note Not Required
    • All
    • None

      Findings from https://issues.redhat.com/browse/RHEL-22390:

      getBuildTime() casts time_t values to int32_t, which is prone to Y2K38 matters. The value gets put into a header tag where all data is considered unsigned so this doesn't actually seem to affect anything, but we should fix these to uint32_t for clarity if nothing else.

      Fixed upstream in https://github.com/rpm-software-management/rpm/commit/97aa64d8281974fb369c66d5aef8650515b89c52

              mdomonko@redhat.com Michal Domonkos
              rhn-support-pmatilai Panu Matilainen
              packaging-team-maint packaging-team-maint
              Jan Blazek Jan Blazek
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: