Bug 14598

Summary:	synthesis compressed with xz breaks apt
Product:	Mageia	Reporter:	Christiaan Welvaart <cjw>
Component:	RPM Packages	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Normal	CC:	rverschelde, sysadmin-bugs
Version:	4	Keywords:	validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA3TOO MGA4-32-OK MGA4-64-OK MGA3-32-OK MGA3-64-OK has_procedure advisory
Source RPM:	apt-0.5.15lorg3.94-11.2.mga4.src.rpm	CVE:
Status comment:

Description Christiaan Welvaart 2014-11-19 00:01:50 CET

The main package index files on the mirrors are now compressed using xz. The apt-rpm in mageia assumes these files with extension .cz are compressed using gzip, like they were up to now.

Due to this change, apt-get fails to update its package index, preventing the user from installing updates.

Reproducible: 

Steps to Reproduce:

Christiaan Welvaart 2014-11-19 00:02:22 CET

Status: NEW => ASSIGNED
Assignee: bugsquad => cjw

Christiaan Welvaart 2014-11-19 00:03:28 CET

Whiteboard: (none) => MGA3TOO

Comment 1 Christiaan Welvaart 2014-11-19 07:32:14 CET

Updated packages are ready for testing:

MGA3
Source RPM:
apt-0.5.15lorg3.94-9.3.mga3.src.rpm

Binary RPMS:
apt-0.5.15lorg3.94-9.3.mga3.i586.rpm
apt-common-0.5.15lorg3.94-9.3.mga3.i586.rpm
libapt-pkg4-0.5.15lorg3.94-9.3.mga3.i586.rpm
libapt-pkg4-devel-0.5.15lorg3.94-9.3.mga3.i586.rpm
apt-0.5.15lorg3.94-9.3.mga3.x86_64.rpm
apt-common-0.5.15lorg3.94-9.3.mga3.x86_64.rpm
lib64apt-pkg4-0.5.15lorg3.94-9.3.mga3.x86_64.rpm
lib64apt-pkg4-devel-0.5.15lorg3.94-9.3.mga3.x86_64.rpm

MGA4
Source RPM:
apt-0.5.15lorg3.94-11.3.mga4.src.rpm

Binary RPMS:
apt-0.5.15lorg3.94-11.3.mga4.i586.rpm
apt-common-0.5.15lorg3.94-11.3.mga4.i586.rpm
libapt-pkg4-0.5.15lorg3.94-11.3.mga4.i586.rpm
libapt-pkg-devel-0.5.15lorg3.94-11.3.mga4.i586.rpm
apt-0.5.15lorg3.94-11.3.mga4.x86_64.rpm
apt-common-0.5.15lorg3.94-11.3.mga4.x86_64.rpm
lib64apt-pkg4-0.5.15lorg3.94-11.3.mga4.x86_64.rpm
lib64apt-pkg-devel-0.5.15lorg3.94-11.3.mga4.x86_64.rpm


Proposed advisory:


Updated apt packages support different compression methods for main package index files:

The "synthesis.hdlist.cz" main package index files on Mageia mirrors used to be compressed with gzip but have recently started to use xz compression. Since apt-rpm in Mageia was not prepared for this change, package index files cannot be updated anymore, preventing users from installing updates using apt-get.





For a procedure see https://bugs.mageia.org/show_bug.cgi?id=14112#c7  (but this time ftp can also be used instead of http).

I tested the uploaded packages on MGA4 x86-64 and MGA3 x86-64.

Assignee: cjw => qa-bugs
Whiteboard: MGA3TOO => MGA3TOO MGA4-64-OK MGA3-64-OK has_procedure

Comment 2 Rémi Verschelde 2014-11-19 14:50:42 CET

Advisory uploaded.

CC: (none) => remi
Whiteboard: MGA3TOO MGA4-64-OK MGA3-64-OK has_procedure => MGA3TOO MGA4-64-OK MGA3-64-OK has_procedure advisory

Comment 3 David Walser 2014-11-19 16:46:19 CET

Installed apt from core/updates and added urpm entries in /etc/apt/sources.list for core/release and core/updates from my local mirror.  Ran "apt-get update" and noticed that it processed core/release fine but gave an error message for core/updates.  Used "apt-get install" to install a package that is in both core/release and core/updates.

For Mageia 3 i586:
tried to install vsftpd, noticed it was trying to install the core/release version, not the core/updates version.

For Mageia 4 i586:
tried to install kate, noticed error messages about dependencies relating to the 4.11.x version in core/release

Installed the updated apt packages and installing those packages worked fine, and it installed the correct version from core/updates.

Whiteboard: MGA3TOO MGA4-64-OK MGA3-64-OK has_procedure advisory => MGA3TOO MGA4-32-OK MGA4-64-OK MGA3-32-OK MGA3-64-OK has_procedure advisory

Comment 4 David Walser 2014-11-19 16:46:50 CET

Validating.

Sysadmins, please move to core/updates.  Thanks.

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Comment 5 Mageia Robot 2014-11-21 14:38:32 CET

An update for this issue has been pushed to Mageia Updates repository.

http://advisories.mageia.org/MGAA-2014-0198.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED