Bug 75233 – Applying GLSA 200408-16 would end in an emerge of a masked version of glibc

• Status: RESOLVED FIXED
• Product: Portage Development

[Description Richard Hartmann 2004-12-21 13:38:26 UTC]

After running

"glsa-check -f 200408-16"

portage emerged the following packages:

Tue Dec 21 18:42:42 2004 --> sys-libs/glibc-2.3.2-r12
Tue Dec 21 21:32:45 2004 --> sys-libs/glibc-2.3.3.20040420-r2

which ended in the need of an emerge of a masked version of the glibc package.

Reproducible: Didn't try
Steps to Reproduce:

Actual Results:  
 * Caching service dependencies...                             [ ok ] 
>>> Auto-cleaning packages ... 
 
>>> No outdated packages were found on your system. 
 
 
 * Regenerating GNU info directory index... 
 * Processed 293 info files. 
 
>>> merging sys-libs/glibc-2.3.4.20040619-r2 
Calculating dependencies 
!!! All ebuilds that could satisfy "=sys-libs/glibc-2.3.4.20040619-r2" have 
been masked. 
!!! One of the following masked packages is required to complete your request: 
- sys-libs/glibc-2.3.4.20040619-r2 (masked by: -* keyword) 
 
For more information, see MASKED PACKAGES section in the emerge man page or 
section 2.2 "Software Availability" in the Gentoo Handbook. 
 

Expected Results:  
 
When I now try to apply the glsa again with 
 
"glsa-check -f 200408-16" 
 
I got the following results: 
 
Checking GLSA 200408-16 
The following updates will be performed for this GLSA: 
     sys-libs/glibc-2.3.4.20040619-r2 (2.3.3.20040420-r2) 
     sys-libs/glibc-2.3.4.20040808-r1 (2.3.3.20040420-r2) 
 
Why does the GLSA try to emerge the masked version "glibc-2.3.4.20040619-r2" 
and does not directly skip to the "glibc-2.3.4.20040808-r1" version? 

ash-2.05b# emerge info 
Portage 2.0.51-r3 (default-linux/x86/2004.0, gcc-3.3.2, 
glibc-2.3.3.20040420-r2, 2.4.26-gentoo-r13 i686) 
================================================================= 
System uname: 2.4.26-gentoo-r13 i686 Pentium III (Katmai) 
Gentoo Base System version 1.4.3.13 
Autoconf: sys-devel/autoconf-2.58 
Automake: sys-devel/automake-1.7.7 
Binutils: sys-devel/binutils-2.14.90.0.7-r4 
Headers:  sys-kernel/linux-headers-2.4.21 
Libtools: sys-devel/libtool-1.4.3-r3 
ACCEPT_KEYWORDS="x86" 
AUTOCLEAN="yes" 
CFLAGS="-O2 -march=pentium3 -fomit-frame-pointer" 
CHOST="i686-pc-linux-gnu" 
COMPILER="" 
CONFIG_PROTECT="/etc /usr/X11R6/lib/X11/xkb /usr/kde/2/share/config /usr/kde/3.2/share/config /usr/kde/3/share/config /usr/lib/mozilla/defaults/pref /usr/share/config /var/qmail/control" 
CONFIG_PROTECT_MASK="/etc/gconf /etc/env.d" 
CXXFLAGS="-O2 -march=pentium3 -fomit-frame-pointer" 
DISTDIR="/usr/portage/distfiles" 
FEATURES="autoaddcvs autoconfig ccache distlocks sandbox sfperms" 
GENTOO_MIRRORS="http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/" 
MAKEOPTS="-j2" 
PKGDIR="/usr/portage/packages" 
PORTAGE_TMPDIR="/var/tmp" 
PORTDIR="/usr/portage" 
PORTDIR_OVERLAY="" 
SYNC="rsync://rsync.gentoo.org/gentoo-portage/" 
USE="X apm arts avi berkdb bitmap-fonts bonobo cdr crypt cups encode esd f77 
fam flac foomaticdb fortran gdbm gif gnome gpm gtk gtk2 gtkhtml guile imlib 
java jpeg junit kde ldap libg++ libwww mad mikmod mmx motif mozilla mpeg mysql 
ncurses nls oggvorbis opengl oss pam pdflib perl png python qt quicktime 
readline sdl slang spell sse ssl svga tcltk tcpd tiff truetype x86 xml xml2 
xmms xv zlib linguas_de"

[Comment 1 Thierry Carrez (RETIRED) 2004-12-22 04:32:35 UTC]

Looks like a dupe of bug 68050. Please upgrade to gentoolkit-0.2.0 (stable), try again and report back.

[Comment 2 Richard Hartmann 2004-12-22 16:23:41 UTC]

I use already the stable version of gentoolkit.

*  app-portage/gentoolkit :
        [   ] 0.2.0_pre8-r1 (0)
        [M~ ] 0.2.0_pre10-r1 (0)
        [M~ ] 0.2.0_rc1 (0)
        [M~ ] 0.2.0_rc1-r1 (0)
        [  I] 0.2.0 (0)

So this is unfortunately not the solution.

[Comment 3 Thierry Carrez (RETIRED) 2004-12-23 01:10:40 UTC]

Then I suspect it's a real glsa-check bug :)
Reassigning to tools-portage so that they can analyze (and fix).

[Comment 4 Marius Mauch (RETIRED) 2005-04-07 21:00:05 UTC]

just for clarification:
which version of glibc
- is installed
- does glsa-check want to install
- should glsa-check install (according to the GLSA)
?

[Comment 5 Richard Hartmann 2005-04-08 12:19:33 UTC]

- installed was: sys-libs/glibc-2.3.2-r9
- glsa-check wanted to install: sys-libs/glibc-2.3.4.20040619-r2 

- glsa-check should have installed: glibc-2.3.4.20040808-r1
(in my opinion, because glibc-2.3.4.20040808-r1 was not masked)

- According to the glsa, all users should have upgraded to the latest version.
(whatever that means)

http://www.gentoo.org/security/en/glsa/glsa-200408-16.xml

[Comment 6 Marius Mauch (RETIRED) 2005-04-24 21:23:07 UTC]

fixed in 0.2.1_pre1. Sorry for the long delay.