Bug 243139

Summary: patch-chmlib-2536.xml does not update chmlib-devel
Product: [openSUSE] openSUSE 10.2 Reporter: Andreas Vetter <vetter>
Component: KDEAssignee: Ruediger Oertel <ro>
Status: RESOLVED FIXED QA Contact: E-mail List <qa-bugs>
Severity: Normal    
Priority: P5 - None CC: andreas.hanke, asklein, security-team
Version: Final   
Target Milestone: ---   
Hardware: Other   
OS: Other   
Whiteboard:
Found By: Other Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Andreas Vetter 2007-02-07 16:20:54 UTC 
patch-chmlib-2536.xml has no update for chmlib-devel. This results in a dependency conflict during update (zypper and you), when chmlib-devel is already installed.
Comment 1 Stephan Binner 2007-02-07 16:54:37 UTC 
Sec-team wrote patchinfo (bug 239747).
Comment 2 Thomas Biege 2007-02-08 09:06:12 UTC 
AFAIK we do not ship chmlib-devel with any distribution.
Comment 4 Andreas Hanke 2007-02-08 09:17:22 UTC 
This is actually a packaging bug.

%package  devel
Requires: %{name} = %{version}-%{release}

Should be:

%package  devel
Requires: %{name} = %{version}

But for released distributions, there is no way to get around re-releasing the patch.
Comment 5 Andreas Hanke 2007-02-08 09:20:25 UTC 
And chmlib-devel also includes a static library, so you would have to update that package as well in any case anyway.

The static /usr/lib/libchm.a is still vulnerable.
Comment 7 Thomas Biege 2007-02-09 14:11:37 UTC 
chmlib-devel released