[Bug 812608] New: libzypp: different vendor, but still suggested for update
https://bugzilla.novell.com/show_bug.cgi?id=812608 https://bugzilla.novell.com/show_bug.cgi?id=812608#c0 Summary: libzypp: different vendor, but still suggested for update Classification: openSUSE Product: openSUSE 12.3 Version: Final Platform: All OS/Version: Linux Status: NEW Severity: Normal Priority: P5 - None Component: libzypp AssignedTo: zypp-maintainers@forge.provo.novell.com ReportedBy: jengelh@inai.de QAContact: qa-bugs@suse.de Found By: Beta-Customer Blocker: --- Created an attachment (id=532734) --> (http://bugzilla.novell.com/attachment.cgi?id=532734) zypper up --debug-solver; cd /var/log; tar -C zypp* I have currently installed blas-devel from the "science" build.opensuse.org repository. This looks like this: 21:56 gauss06:/var/log # rpm -qi blas-devel Name : blas-devel Version : 3.4.2 Release : 3.1.1 Architecture: x86_64 Install Date: Sat Mar 30 21:10:58 2013 Group : Development/Libraries/Parallel Size : 3165192 License : BSD-3-Clause Signature : RSA/SHA256, Sun Jan 27 14:31:36 2013, Key ID b88b2fd43dbdc284 Source RPM : lapack-3.4.2-3.1.1.src.rpm Build Date : Sun Jan 27 14:26:34 2013 Build Host : build20 Relocations : (not relocatable) Packager : http://bugs.opensuse.org Vendor : openSUSE URL : http://www.netlib.org/lapack/ Summary : Basic Linear Algebra Subprograms Description : BLAS (Basic Linear Algebra Subprograms) is a standard library for numerical algebra. BLAS provides a number of basic algorithms for linear algebra. BLAS is fast and well-tested, was written in FORTRAN 77 and built with gfortran. BLAS manual pages are available in the blas-man package. Distribution: openSUSE 12.3 Now, on `zypper update` with the "Education" repository enabled as well, it wants to replace a handful of the science packaged with Education ones, __despite being a different vendor__. There is nothing in /etc/zypp/vendors.d that would permit this, so why is it doing this? The following packages are going to be upgraded: blas-devel 3.4.2-3.1.1 -> 3.4.2-48.1 x86_64 education openSUSE-Education fftw3-devel 3.3.3-2.1.1 -> 3.3.3-5.2 x86_64 education openSUSE-Education fftw3-threads-devel 3.3.3-2.1.1 -> 3.3.3-5.2 x86_64 education openSUSE-Education [...] -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812608
https://bugzilla.novell.com/show_bug.cgi?id=812608#c1
--- Comment #1 from Michael Andres
https://bugzilla.novell.com/show_bug.cgi?id=812608
https://bugzilla.novell.com/show_bug.cgi?id=812608#c2
Michael Andres
https://bugzilla.novell.com/show_bug.cgi?id=812608
https://bugzilla.novell.com/show_bug.cgi?id=812608#c3
Jan Engelhardt
https://bugzilla.novell.com/show_bug.cgi?id=812608
https://bugzilla.novell.com/show_bug.cgi?id=812608#c4
--- Comment #4 from Lars Vogdt
Or we could just tell the Education project to not impersonate and use a "openSUSE" vendor string.
Sorry if I misunderstand, but openSUSE-Education should really be handled as different vendor than openSUSE. The name has been chosen by intention as the Education packages have a different review process than the ones from the official openSUSE repositories. So using the same vendor string is not an option - but the openSUSE-Education project is an accepted openSUSE project, so using this project name in the vendor field should not open a security nightmare: next project might name himself openSUSE-destroyers including (beside the ultimate multimedia app that everyone needs) bad RPMs replacing aaa_base ... Comparing just string prefixes is not a good idea in my eyes. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812608
https://bugzilla.novell.com/show_bug.cgi?id=812608#c5
--- Comment #5 from Michael Andres
Comparing just string prefixes is not a good idea in my eyes.
Admitted, but we can't change it without breaking customer products, nor do we want to have different semantic on opensuse and SLE. That's why we need a fix in libzypp for the "openSUSE" namespace. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812608
https://bugzilla.novell.com/show_bug.cgi?id=812608#c6
--- Comment #6 from Swamp Workflow Management
participants (1)
-
bugzilla_noreply@novell.com