Sam Varshavchik writes:
Looking at a diff between the 4.19.0 an 4.19.1 tags, a call to rpmfiStat()
was added to fill_archive_entry(). The backtrace above shows the execution
finding its way from rpmfiStat() into very-much-thread-unsafe code in rpmug.c
That code is used only by rpm2archive, though.
But the backtrace does show an execution path from packageBinaries into
rpmug.c.
I wonder what happens if someone were to try to rebuild texlive, and all of
its umpteen packages. That should thoroughly excersize the problematic code…