On Fri, 6 May 2011 17:17:32 +0200 Marcus Meissner meissner@suse.de wrote:
It is the patchname, not the packagename, as libzip-devel is alphabetically before libzip1. (and the patchname is usually the first alphabetical package from the packagelist within the patch).
which very often makes for the worst possible patch names.
Why can't this algorithm just skip *devel packages when creating the patch name? It's very seldom the devel package which has the security problem after all.