Bug 230685

Summary: x86_64 MozillaFirefox binaries in security update repository
Product: [openSUSE] openSUSE 10.2 Reporter: Andreas Hanke <andreas.hanke>
Component: libzyppAssignee: Stefan Schubert <schubi>
Status: RESOLVED FIXED QA Contact: E-mail List <qa-bugs>
Severity: Major    
Priority: P5 - None CC: aj, ast, hmuelle, martin, Mathias.Homann, meissner, monkey9, msvec, wolfgang
Version: Final   
Target Milestone: ---   
Hardware: x86-64   
OS: Linux   
Whiteboard:
Found By: Other Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Attachments: testcase logs
list of rpms updated after updating libzypp
UI of yast2 indicating dependency problems
YaST2 log from resolver test
YaST2 log from resolver test

Description Andreas Hanke 2006-12-23 12:51:50 UTC
Found in the official security update repository:

http://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/MozillaFirefox-2.0.0.1-0.1.x86_64.rpm

This is almost a disaster for the following reasons:

- It will cause a lot of support requests about not working plugins
- It will break the beagle-firefox extension because that one is not prepared for an x86_64 firefox
- Rumours say that zmd has problems resolving the dependencies on update
Comment 1 Wolfgang Rosenauer 2006-12-23 13:09:37 UTC
It seems to be an accident that the x86-64 package is in the ftp instsource and in the security updates. But it shouldn't be a critical one.

It seems that the 32bit package is installed by default on any system if chosen for installation. (If that isn't the case please report in installer component)

An online update has to keep the same arch package for applying updates so nobody should see the x86-64 package because of the online update. If this is not true and ZMD breaks with it it has to be fixed for ZMD in the respective component.
Anyway at least it's never component Firefox and it shouldn't be a problem to have the packages out there since they shouldn't be used if the user actively choose it.
Comment 2 Andreas Hanke 2006-12-23 14:29:45 UTC
A separate report about zmd already exists: bug 230687, currently waiting for logfiles. Note that in the theoretical case that it would be fixed in zmd, zmd might not be able to update itself because 1 broken dependency tends to block zmd from updating anything. Maybe the "install package manager updates first" thing works now, but last time I checked, it did not.

Last time I had access to x86_64 hardware, the "keep the same arch" thing did _not_ work with yast2 online_update, it happily updated i586 packages to x86_64. Unfortunately I cannot test this now, maybe it works.

Besides that, many users are not using yast2 and/or zmd any more these days, so you will get support requests about not working plugins and/or beagle extensions in any case, but you could declare them "invalid/worksforme because of using an unsupported package manager". However, this will be difficult to communicate because in previous cases where other package managers broke the system, it was because of their habit to install i586 packages on x86_64 systems. Now it's the other way round.

There is also the case that MozillaFirefox might not be installed at all and the user selects it for installation, in that case YaST will pick what it thinks is the "better" arch: x86_64. So, the presence of an x86_64 MozillaFirefox really indicates that it is supported. But this case had been broken even before the online update...

I really don't know what to do about this report. => "Other"
Comment 3 Wolfgang Rosenauer 2006-12-26 12:14:00 UTC
OK, confirmed a problem now:
Installation of Firefox is 32bit for me at least, but I get a conflict immediately if I try an online update with YOU:
"Installation von MozillaFirefox-translations-2.0.0.1-0.1.x86_64[SUSE-Linux-10.2-Updates] nicht möglich
    MozillaFirefox-translations-2.0.0.1-0.1.x86_64[SUSE-Linux-10.2-Updates] kann nicht installiert werden, da MozillaFirefox-translations-2.0.0.1-0.1.i586[SUSE-Linux-10.2-Updates] bereits für die Installation gekennzeichnet ist"

I don't know why that happens. Seems like a bug in libzypp.

Comment 5 Wolfgang Rosenauer 2007-01-08 13:29:44 UTC
Created attachment 111825 [details]
testcase logs
Comment 6 Stefan Schubert 2007-01-09 09:44:38 UTC
*** Bug 232413 has been marked as a duplicate of this bug. ***
Comment 7 Marcus Meissner 2007-01-09 12:24:08 UTC
firefox has the problem that
it both provides and obsoletes MozillaFirebird.
Comment 8 Stefan Schubert 2007-01-09 15:21:46 UTC
OK, I can reproduce it:
SuSE-Linux-10_2-Branch/libzypp/testsuite/solver/data.deptestomatic/bugzilla-tests/bug230685-test.xml
Comment 9 Stefan Schubert 2007-01-09 17:08:20 UTC
Has been fixed:
update packages: changing architecture is only valid while an
system update and NOT while an update via a patch.

Thank you.
Comment 12 Stefan Schubert 2007-01-11 15:50:11 UTC
Added Anja for coordination.
Comment 16 Heiko Rommel 2007-01-15 17:25:13 UTC
Created attachment 113014 [details]
list of rpms updated after updating libzypp
Comment 17 Heiko Rommel 2007-01-15 17:25:55 UTC
Created attachment 113015 [details]
UI of yast2 indicating dependency problems
Comment 18 Stefan Schubert 2007-01-16 08:41:39 UTC
Heiko, please attach a generated Testcase described here:
http://en.opensuse.org/Bugs/YaST#I_want_to_report_a_bug_related_to_package_dependencies_and_libzypp_solver._Which_logs_to_attach.3F
Comment 19 Heiko Rommel 2007-01-16 13:11:47 UTC
Created attachment 113111 [details]
YaST2 log from resolver test
Comment 20 Stanislav Visnovsky 2007-01-16 13:14:44 UTC
Bug #230687 seems to be a duplicate of this one.
Comment 21 Stefan Schubert 2007-01-16 15:13:27 UTC
You have disabled the you source:
Source[4|YUM|20061219-175249]{http://you.suse.de/pub/suse/update/10.2/(/); cache /var/lib/zypp/cache/Source.RfcOOz; autorefresh: 1; enabled: 0}

So you are getting an incomplete libzypp patch cause the atom libzyy has not been installed:

2007-01-16 15:53:39 <999> waerden(25624) [solver] ResolverContext.cc(requirementIsMet):1519 ResolverContext::requirementIsMet([atom] (namedcap) libzypp == 2.11.2-2.1) N
2007-01-16 15:53:39 <999> waerden(25624) [solver] QueueItemEstablish.cc(process):240 Atom/Patch/Installed/Establishing I__s_[S1:0][patch]libzypp-2460-0.noarch has unfulfilled requirement [atom] (namedcap) libzypp == 2.11.2-2.1 -> incomplete

I cannot see the reasons why the atom has not been installed before. But it cannot be reinstalled cause it is not available anymore. Thats why you are noot see any package which belongs to the patch in the UI.

Please add the source and try again.
Comment 22 Heiko Rommel 2007-01-16 15:23:45 UTC
Created attachment 113144 [details]
YaST2 log from resolver test
Comment 23 Stefan Schubert 2007-01-16 15:42:10 UTC
Thanks Heiko.
After adding you again the not installed atom  is satisfied:

ResolverContext::itemIsPresent(<US_s_>U__s_[S5:0][atom]libzypp-2.11.2-2.1.i586) Y
ResolverContext::requirementIsMet([atom] (namedcap) libzypp == 2.11.2-2.1) Y
all requirements of I__s_[S1:0][patch]libzypp-2460-0.noarch met -> satisfied

So the patch is satisfied too and will not be installed again.
Comment 24 Stefan Schubert 2007-01-16 16:11:51 UTC
I have tested with a new installation again and the atoms has been installed correctly. So I cannot reproduce it. It does not matter cause this error would be handled by the solver automatically as long as the source is available.
I would like to close this bug again if noone has an objection.
Comment 25 Anja Stock 2007-01-17 11:38:21 UTC
released
Comment 26 Martin Schröder 2007-01-17 18:37:29 UTC
Will this also be fixed in 10.1? Upgrading to Firefox 2 is currently broken because of this bug.
Comment 27 Stefan Schubert 2007-01-24 15:18:09 UTC
Sorry, the fix does not fit for every case (only 50%). 
We will need an additional fix;-(
Comment 28 Stefan Schubert 2007-01-24 16:24:21 UTC
*** Bug 238182 has been marked as a duplicate of this bug. ***
Comment 30 Stefan Schubert 2007-01-26 13:58:52 UTC
Patchinfo created. Packages submitted.
Thanks !!!!
Comment 31 Stefan Schubert 2007-01-26 14:58:13 UTC
*** Bug 239199 has been marked as a duplicate of this bug. ***
Comment 32 Stefan Schubert 2007-01-29 14:53:55 UTC
*** Bug 239199 has been marked as a duplicate of this bug. ***
Comment 33 Anja Stock 2007-01-30 14:58:44 UTC
released
Comment 34 Stefan Schubert 2007-02-01 15:36:46 UTC
*** Bug 230687 has been marked as a duplicate of this bug. ***