Project

Profile

Help

Issue #1548

closed

published errata contain packages not in repo

Added by mhrivnak over 8 years ago. Updated about 5 years ago.

Status:
CLOSED - CURRENTRELEASE
Priority:
High
Assignee:
Sprint/Milestone:
-
Start date:
Due date:
Estimated time:
Severity:
2. Medium
Version:
Master
Platform Release:
2.8.1
OS:
Triaged:
Yes
Groomed:
No
Sprint Candidate:
No
Tags:
Pulp 2
Sprint:
Quarter:

Description

When an erratum has packages for multiple repos, for example el6 and el7, the sync operation will concatenate those packages onto the same erratum unit. At publish time, it appears that the whole package list is being published, which confuses yum on the client. For example an el6 client will see both el6 and el7 packages as available updates.

From the BZ:

Steps to Reproduce:
1. Synchronize multiple channels (RHEL5, RHEL6 and RHEL7)
2. Register a RHEL6 system to *only* the RHEL6 base channel
3. `yum updateinfo cve all`

Actual results:
When the errata info is displayed it lists rpms from the RHEL5 and RHEL7 channels.  I.e:

[root@rhel6host ~]# yum updateinfo cve all
Loaded plugins: boks-protect, changelog, fastestmirror, security, tmprepo, verify, versionlock
org-rhel-6                                   | 2.1 kB     00:00
org-rhel-6/primary                           |  993 B     00:00
org-rhel-6/updateinfo                        | 1.9 kB     00:00
i  CVE-2014-7169 Important/Sec. bash-3.2-33.el5_11.4.x86_64
i  CVE-2014-7186 Important/Sec. bash-3.2-33.el5_11.4.x86_64
i  CVE-2014-7187 Important/Sec. bash-3.2-33.el5_11.4.x86_64
i  CVE-2014-7169 Important/Sec. bash-4.1.2-15.el6_5.2.x86_64
i  CVE-2014-7186 Important/Sec. bash-4.1.2-15.el6_5.2.x86_64
i  CVE-2014-7187 Important/Sec. bash-4.1.2-15.el6_5.2.x86_64
   CVE-2014-7169 Important/Sec. bash-4.2.45-5.el7_0.4.x86_64
   CVE-2014-7186 Important/Sec. bash-4.2.45-5.el7_0.4.x86_64
   CVE-2014-7187 Important/Sec. bash-4.2.45-5.el7_0.4.x86_64
updateinfo list done

Expected results:
Should only display info relevant to the system.  i.e:

[root@rhel6host ~]# yum updateinfo cve all
Loaded plugins: boks-protect, changelog, fastestmirror, security, tmprepo, verify, versionlock
org-rhel-6                                   | 2.1 kB     00:00
org-rhel-6/primary                           |  993 B     00:00
org-rhel-6/updateinfo                        | 1.9 kB     00:00
i  CVE-2014-7169 Important/Sec. bash-4.1.2-15.el6_5.2.x86_64
i  CVE-2014-7186 Important/Sec. bash-4.1.2-15.el6_5.2.x86_64
i  CVE-2014-7187 Important/Sec. bash-4.1.2-15.el6_5.2.x86_64
updateinfo list done

Related issues

Is duplicate of RPM Support - Issue #1366: Advisory package list doesn't match packages in the repositoryCLOSED - CURRENTRELEASEsemyersActions

Also available in: Atom PDF