Bug 17726

Summary:	nettle2.7 & nettle binary file conflicts - missing package conflicts
Product:	Mageia	Reporter:	claire robinson <eeeemail>
Component:	RPM Packages	Assignee:	Mageia Bug Squad <bugsquad>
Status:	RESOLVED WONTFIX	QA Contact:
Severity:	normal
Priority:	Normal
Version:	5
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:	nettle nettle2.7	CVE:
Status comment:

Description claire robinson 2016-02-10 12:12:11 CET

Nettle & nettle2.7 should conflict to avoid file conflicts.
Cauldron is not affected as nettle2.7 is obsoleted.

$ urpmq --conflicts nettle2.7
$ urpmq --conflicts nettle

File conflicts, eg.

$ urpmf /usr/bin/nettle-hash
nettle2.7:/usr/bin/nettle-hash
nettle:/usr/bin/nettle-hash

Reproducible: 

Steps to Reproduce:

Comment 1 claire robinson 2016-02-10 12:12:33 CET

See update in bug 17669

Comment 2 David Walser 2016-02-12 00:13:11 CET

How this happened:

- nettle was updated to 3.0 during mga5 development cycle
- everything using nettle broke because they didn't support 3.0
- nettle2.7 package was created
- nettle (3.0) which wasn't used by anything was not removed (it should have been)

So, technically this is a bug and the packages should explicitly conflict, but nobody in reality will hit this issue as nothing uses nettle (3.0) in mga5 and it shouldn't have even been packaged.  In Cauldron (mga6) everything has been ported to nettle 3.x and nettle2.7 is no longer packaged, so nobody will have an issue when upgrading.  The nettle package in mga6 obsoletes nettle2.7 to ensure this.

Status: NEW => RESOLVED
Resolution: (none) => WONTFIX