Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 643310 - app-arch/createrepo: uses problematic dev-python/pyliblzma
Summary: app-arch/createrepo: uses problematic dev-python/pyliblzma
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Alon Bar-Lev (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 643308
  Show dependency tree
 
Reported: 2018-01-03 19:21 UTC by Michał Górny
Modified: 2018-11-28 14:23 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2018-01-03 19:21:05 UTC
pyliblzma installs 'lzma' module that is incompatible with the same-named module of Python 3.3+. As a result, it randomly wreaks havoc in programs not written to account for its existence and it will never support Python 3. Besides, it's dead.

Please look into the possibility of making this package work with the built-in 'lzma' module of Python 3 and/or dev-python/backports-lzma that uses a separate (safe) namespace and a compatible API.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2018-10-01 07:48:51 UTC
Ping.
Comment 2 Alon Bar-Lev (RETIRED) gentoo-dev 2018-10-01 16:57:52 UTC
The same solution should be applied to sys-apps/yum as it shares the same issue, luckily the backports-lzma is helpful in this case as you suggested.
Comment 3 Alon Bar-Lev (RETIRED) gentoo-dev 2018-10-01 16:59:57 UTC
In any case these packages will not work with python3, so I do not understand the point.
Comment 4 Larry the Git Cow gentoo-dev 2018-10-01 17:00:29 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f1b13c15aadac7c2777cf304df6b9c3ea4e5f304

commit f1b13c15aadac7c2777cf304df6b9c3ea4e5f304
Author:     Alon Bar-Lev <alonbl@gentoo.org>
AuthorDate: 2018-10-01 16:55:35 +0000
Commit:     Alon Bar-Lev <alonbl@gentoo.org>
CommitDate: 2018-10-01 17:00:18 +0000

    app-arch/createrepo: use backports-lzma instead of pyliblzma
    
    Package-Manager: Portage-2.3.49, Repoman-2.3.10
    Closes: https://bugs.gentoo.org/show_bug.cgi?id=643310
    Signed-off-by: Alon Bar-Lev <alonbl@gentoo.org>

 app-arch/createrepo/createrepo-0.10.4-r1.ebuild    | 51 ++++++++++++++++++++++
 .../createrepo/files/createrepo-0.10.4-lzma.patch  | 14 ++++++
 2 files changed, 65 insertions(+)
Comment 5 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2018-11-28 14:16:49 UTC
Can we please remove the old revision now?
Comment 6 Larry the Git Cow gentoo-dev 2018-11-28 14:23:22 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=dceabe7b6a9fe6e7ab771c399780c8229413409c

commit dceabe7b6a9fe6e7ab771c399780c8229413409c
Author:     Alon Bar-Lev <alonbl@gentoo.org>
AuthorDate: 2018-11-28 14:22:40 +0000
Commit:     Alon Bar-Lev <alonbl@gentoo.org>
CommitDate: 2018-11-28 14:22:40 +0000

    app-arch/createrepo: remove old
    
    Bug: https://bugs.gentoo.org/show_bug.cgi?id=643310
    Signed-off-by: Alon Bar-Lev <alonbl@gentoo.org>
    Package-Manager: Portage-2.3.51, Repoman-2.3.11

 app-arch/createrepo/createrepo-0.10.4.ebuild | 50 ----------------------------
 1 file changed, 50 deletions(-)