richardphibel / rpms / dnf

Forked from rpms/dnf 2 years ago
Clone

Blame SOURCES/0002-Add-only-relevant-pkgs-to-upgrade-transaction-RhBug-.patch

321a78
From f32eff294aecaac0fd71cd8888a25fa7929460b9 Mon Sep 17 00:00:00 2001
321a78
From: =?UTF-8?q?Ale=C5=A1=20Mat=C4=9Bj?= <amatej@redhat.com>
321a78
Date: Mon, 4 Jul 2022 09:43:25 +0200
321a78
Subject: [PATCH] Add only relevant pkgs to upgrade transaction (RhBug:2097757)
321a78
321a78
https://bugzilla.redhat.com/show_bug.cgi?id=2097757
321a78
321a78
Without this patch dnf can create the following transaction during dnf upgrade --security when there is an advisory for B-2-2:
321a78
321a78
```
321a78
repo @System 0 testtags <inline>
321a78
#>=Pkg: A 1 1 x86_64
321a78
#>=Pkg: B 1 1 x86_64
321a78
#>=Req: A = 1-1
321a78
321a78
repo available 0 testtags <inline>
321a78
#>=Pkg: A 2 2 x86_64
321a78
#>=Pkg: B 2 2 x86_64
321a78
#>=Req: A = 2-2
321a78
system x86_64 rpm @System
321a78
job update oneof A-1-1.x86_64@@System B-2-2.x86_64@available [targeted,setevr,setarch]
321a78
result transaction,problems
321a78
```
321a78
321a78
Problem is that without forcebest nothing gets upgraded despite the available advisory and --security switch.
321a78
321a78
This can also be seen in CI test case: rpm-software-management/ci-dnf-stack#1130
321a78
---
321a78
 dnf/base.py | 19 ++++++++++++++++++-
321a78
 1 file changed, 18 insertions(+), 1 deletion(-)
321a78
321a78
diff --git a/dnf/base.py b/dnf/base.py
321a78
index caace028..92fb3bd0 100644
321a78
--- a/dnf/base.py
321a78
+++ b/dnf/base.py
321a78
@@ -2118,7 +2118,24 @@ class Base(object):
321a78
             query.filterm(reponame=reponame)
321a78
         query = self._merge_update_filters(query, pkg_spec=pkg_spec, upgrade=True)
321a78
         if query:
321a78
-            query = query.union(installed_query.latest())
321a78
+            # Given that we use libsolv's targeted transactions, we need to ensure that the transaction contains both
321a78
+            # the new targeted version and also the current installed version (for the upgraded package). This is
321a78
+            # because if it only contained the new version, libsolv would decide to reinstall the package even if it
321a78
+            # had just a different buildtime or vendor but the same version
321a78
+            # (https://github.com/openSUSE/libsolv/issues/287)
321a78
+            #   - In general, the query already contains both the new and installed versions but not always.
321a78
+            #     If repository-packages command is used, the installed packages are filtered out because they are from
321a78
+            #     the @system repo. We need to add them back in.
321a78
+            #   - However we need to add installed versions of just the packages that are being upgraded. We don't want
321a78
+            #     to add all installed packages because it could increase the number of solutions for the transaction
321a78
+            #     (especially without --best) and since libsolv prefers the smallest possible upgrade it could result
321a78
+            #     in no upgrade even if there is one available. This is a problem in general but its critical with
321a78
+            #     --security transactions (https://bugzilla.redhat.com/show_bug.cgi?id=2097757)
321a78
+            #   - We want to add only the latest versions of installed packages, this is specifically for installonly
321a78
+            #     packages. Otherwise if for example kernel-1 and kernel-3 were installed and present in the
321a78
+            #     transaction libsolv could decide to install kernel-2 because it is an upgrade for kernel-1 even
321a78
+            #     though we don't want it because there already is a newer version present.
321a78
+            query = query.union(installed_query.latest().filter(name=[pkg.name for pkg in query]))
321a78
             sltr = dnf.selector.Selector(self.sack)
321a78
             sltr.set(pkg=query)
321a78
             self._goal.upgrade(select=sltr)
321a78
-- 
321a78
2.36.1
321a78