http://bugzilla.suse.com/show_bug.cgi?id=1114908 http://bugzilla.suse.com/show_bug.cgi?id=1114908#c1 Fabian Vogt changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |adrian@suse.com, | |dimstar@opensuse.org --- Comment #1 from Fabian Vogt --- (In reply to Fabian Vogt from comment #0)

The other issue is that "--plus-content" doesn't seem to work at all, at least for "debug" and "source". I had a look at the source and AFAICT the repo metadata is lacking keyword info, so it might not be a libzypp bug.

Adding Adrian and Dominique to CC. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1114908 http://bugzilla.suse.com/show_bug.cgi?id=1114908#c3 Fabian Vogt changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(fvogt@suse.com) | --- Comment #3 from Fabian Vogt --- (In reply to Michael Andres from comment #2)

(In reply to Fabian Vogt from comment #0)

...

There are two issues with "--plus-content":

...

zypper ar -d http://foo bar zypper --plus-content asdf in qwert zypper lr

-> bar is enabled!

@Fabian: Strange. It actually happened once on my system. I re-disbaled the repos, but it did not happen again. Would you please attach the log for 'zypper --plus-content asdf in qwert'.

Of course, after the refresh the metadata is there and zypper does not have to do the "force-enabled refresh" again.

Please attach the zypper logfile /var/log/zypper.log

Still needed? -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1114908 http://bugzilla.suse.com/show_bug.cgi?id=1114908#c5 Fabian Vogt changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(fvogt@suse.com) | --- Comment #5 from Fabian Vogt --- Created attachment 788787 --> http://bugzilla.suse.com/attachment.cgi?id=788787&action=edit zypper log for zypper --plus-content asdf in qwert (In reply to Michael Andres from comment #4)

Could you try:

...

zypper mr -d bar rm -rf /var/cache/zypp/raw/bar zypper --plus-content asdf in qwert zypper lr

Stayed disabled?

No.

...

zypper rr bar zypper ar -d http://foo bar rm -rf /var/cache/zypp/raw/bar zypper --plus-content asdf in qwert zypper lr

Got enabled?

Yes. I do not see a difference between those two scriptlets, so I expect identical results

If answer is YES,YES I don't need the log.

I'll attach log of pid 5915: 2018-11-07 11:50 5840 1.14.11 zypper ar obs://KDE:Frameworks5/openSUSE_Factory bar 2018-11-07 11:50 5879 1.14.11 zypper mr -d bar 2018-11-07 11:50 5915 1.14.11 zypper --plus-content asdf in qwert -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1114908 http://bugzilla.suse.com/show_bug.cgi?id=1114908#c7 Benjamin Zeller changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |IN_PROGRESS CC| |bzeller@suse.com --- Comment #7 from Benjamin Zeller --- https://github.com/openSUSE/libzypp/pull/161 -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1114908 http://bugzilla.suse.com/show_bug.cgi?id=1114908#c10 --- Comment #10 from Swamp Workflow Management --- This is an autogenerated message for OBS integration: This bug (1114908) was mentioned in https://build.opensuse.org/request/show/678909 Factory / libzypp -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1114908 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|maint:planned:update |maint:planned:update | |ibs:running:10948:moderate -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1114908 http://bugzilla.suse.com/show_bug.cgi?id=1114908#c15 --- Comment #15 from Swamp Workflow Management --- SUSE-SU-2019:2030-1: An update that solves three vulnerabilities and has 41 fixes is now available. Category: security (moderate) Bug References: 1047962,1049826,1053177,1065022,1099019,1102261,1110542,1111319,1112911,1113296,1114908,1115341,1116840,1118758,1119373,1119820,1119873,1120263,1120463,1120629,1120630,1120631,1121611,1122062,1122471,1123137,1123681,1123843,1123865,1123967,1124897,1125415,1127026,1127155,1127220,1130161,1131823,1135749,1137977,663358,764147,965786,978193,993025 CVE References: CVE-2018-20532,CVE-2018-20533,CVE-2018-20534 Sources used: SUSE Linux Enterprise Workstation Extension 15 (src): PackageKit-1.1.10-4.10.4 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (src): libsolv-0.7.5-3.12.2, libyui-ncurses-pkg-2.48.5.2-3.5.2, libyui-qt-pkg-2.45.15.2-3.5.3, libzypp-17.12.0-3.23.6, zypper-1.14.28-3.18.6 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (src): PackageKit-1.1.10-4.10.4, libsolv-0.7.5-3.12.2, libzypp-17.12.0-3.23.6, yast2-pkg-bindings-devel-doc-4.0.13-3.7.2, zypper-1.14.28-3.18.6 SUSE Linux Enterprise Module for Development Tools 15 (src): libsolv-0.7.5-3.12.2 SUSE Linux Enterprise Module for Desktop Applications 15 (src): PackageKit-1.1.10-4.10.4, libyui-qt-pkg-2.45.15.2-3.5.3 SUSE Linux Enterprise Module for Basesystem 15 (src): libsolv-0.7.5-3.12.2, libyui-ncurses-pkg-2.48.5.2-3.5.2, libyui-ncurses-pkg-doc-2.48.5.2-3.5.3, libyui-qt-pkg-2.45.15.2-3.5.3, libyui-qt-pkg-doc-2.45.15.2-3.5.3, libzypp-17.12.0-3.23.6, yast2-pkg-bindings-4.0.13-3.7.2, zypper-1.14.28-3.18.6 SUSE Linux Enterprise Installer 15 (src): libsolv-0.7.5-3.12.2, libyui-ncurses-pkg-2.48.5.2-3.5.2, libyui-qt-pkg-2.45.15.2-3.5.3, libzypp-17.12.0-3.23.6, yast2-pkg-bindings-4.0.13-3.7.2, zypper-1.14.28-3.18.6 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1114908 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |obs:running:10713:moderate -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1114908 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|obs:running:10713:moderate | -- You are receiving this mail because: You are on the CC list for the bug.