Bug 14598 - synthesis compressed with xz breaks apt
Summary: synthesis compressed with xz breaks apt
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 4
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL:
Whiteboard: MGA3TOO MGA4-32-OK MGA4-64-OK MGA3-32...
Keywords: validated_update
Depends on:
Blocks:
 
Reported: 2014-11-19 00:01 CET by Christiaan Welvaart
Modified: 2014-11-21 14:38 CET (History)
2 users (show)

See Also:
Source RPM: apt-0.5.15lorg3.94-11.2.mga4.src.rpm
CVE:
Status comment:


Attachments

Description Christiaan Welvaart 2014-11-19 00:01:50 CET
The main package index files on the mirrors are now compressed using xz. The apt-rpm in mageia assumes these files with extension .cz are compressed using gzip, like they were up to now.

Due to this change, apt-get fails to update its package index, preventing the user from installing updates.

Reproducible: 

Steps to Reproduce:
Christiaan Welvaart 2014-11-19 00:02:22 CET

Status: NEW => ASSIGNED
Assignee: bugsquad => cjw

Christiaan Welvaart 2014-11-19 00:03:28 CET

Whiteboard: (none) => MGA3TOO

Comment 1 Christiaan Welvaart 2014-11-19 07:32:14 CET
Updated packages are ready for testing:

MGA3
Source RPM:
apt-0.5.15lorg3.94-9.3.mga3.src.rpm

Binary RPMS:
apt-0.5.15lorg3.94-9.3.mga3.i586.rpm
apt-common-0.5.15lorg3.94-9.3.mga3.i586.rpm
libapt-pkg4-0.5.15lorg3.94-9.3.mga3.i586.rpm
libapt-pkg4-devel-0.5.15lorg3.94-9.3.mga3.i586.rpm
apt-0.5.15lorg3.94-9.3.mga3.x86_64.rpm
apt-common-0.5.15lorg3.94-9.3.mga3.x86_64.rpm
lib64apt-pkg4-0.5.15lorg3.94-9.3.mga3.x86_64.rpm
lib64apt-pkg4-devel-0.5.15lorg3.94-9.3.mga3.x86_64.rpm

MGA4
Source RPM:
apt-0.5.15lorg3.94-11.3.mga4.src.rpm

Binary RPMS:
apt-0.5.15lorg3.94-11.3.mga4.i586.rpm
apt-common-0.5.15lorg3.94-11.3.mga4.i586.rpm
libapt-pkg4-0.5.15lorg3.94-11.3.mga4.i586.rpm
libapt-pkg-devel-0.5.15lorg3.94-11.3.mga4.i586.rpm
apt-0.5.15lorg3.94-11.3.mga4.x86_64.rpm
apt-common-0.5.15lorg3.94-11.3.mga4.x86_64.rpm
lib64apt-pkg4-0.5.15lorg3.94-11.3.mga4.x86_64.rpm
lib64apt-pkg-devel-0.5.15lorg3.94-11.3.mga4.x86_64.rpm


Proposed advisory:


Updated apt packages support different compression methods for main package index files:

The "synthesis.hdlist.cz" main package index files on Mageia mirrors used to be compressed with gzip but have recently started to use xz compression. Since apt-rpm in Mageia was not prepared for this change, package index files cannot be updated anymore, preventing users from installing updates using apt-get.





For a procedure see https://bugs.mageia.org/show_bug.cgi?id=14112#c7  (but this time ftp can also be used instead of http).

I tested the uploaded packages on MGA4 x86-64 and MGA3 x86-64.

Assignee: cjw => qa-bugs
Whiteboard: MGA3TOO => MGA3TOO MGA4-64-OK MGA3-64-OK has_procedure

Comment 2 Rémi Verschelde 2014-11-19 14:50:42 CET
Advisory uploaded.

CC: (none) => remi
Whiteboard: MGA3TOO MGA4-64-OK MGA3-64-OK has_procedure => MGA3TOO MGA4-64-OK MGA3-64-OK has_procedure advisory

Comment 3 David Walser 2014-11-19 16:46:19 CET
Installed apt from core/updates and added urpm entries in /etc/apt/sources.list for core/release and core/updates from my local mirror.  Ran "apt-get update" and noticed that it processed core/release fine but gave an error message for core/updates.  Used "apt-get install" to install a package that is in both core/release and core/updates.

For Mageia 3 i586:
tried to install vsftpd, noticed it was trying to install the core/release version, not the core/updates version.

For Mageia 4 i586:
tried to install kate, noticed error messages about dependencies relating to the 4.11.x version in core/release

Installed the updated apt packages and installing those packages worked fine, and it installed the correct version from core/updates.

Whiteboard: MGA3TOO MGA4-64-OK MGA3-64-OK has_procedure advisory => MGA3TOO MGA4-32-OK MGA4-64-OK MGA3-32-OK MGA3-64-OK has_procedure advisory

Comment 4 David Walser 2014-11-19 16:46:50 CET
Validating.

Sysadmins, please move to core/updates.  Thanks.

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Comment 5 Mageia Robot 2014-11-21 14:38:32 CET
An update for this issue has been pushed to Mageia Updates repository.

http://advisories.mageia.org/MGAA-2014-0198.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.