[CentOS-devel] freetype package missed in repo

On Wed, Aug 4, 2021 at 6:14 AM Leon Fauster via CentOS-devel
<centos-devel at centos.org> wrote:
>
> On 04.08.21 03:33, Nico Kadel-Garcia wrote:
> > On Tue, Aug 3, 2021 at 7:49 PM Leon Fauster via CentOS-devel
> > <centos-devel at centos.org> wrote:
> >>
> >> I wonder why this package not available anymore?
> >>
> >> # LANG=C yum reinstall freetype
> >> Last metadata expiration check: 1:04:59 ago on Wed Aug  4 00:38:21 2021.
> >> Installed package freetype-2.9.1-5.el8.x86_64 (from baseos) not available.
> >> Error: No packages marked for reinstall.
> >>
> >> Any clues?
> >
> > Because the CentOS 8.4 package is freetype-2.9.1-4, according to the
> > local mirrors. Did you perhaps install that from a CentOS 8 Stream
> > repo?
> >
>
> Here my context: I am comparing two nodes
> based on CS8 (Centos 8 Stream ). One have
>
> freetype-2.9.1-5.el8.x86_64
> and the other have
> freetype-2.9.1-4.el8_3.1.x86_64

At one point in time during RHEL 8.4 development, freetype-2.9.1-5.el8
was set to be shipped.  However, it only fixed a CVE and that CVE was
already fixed by the freetype-2.9.1-4.el8_3.1 that as shipped as part
of a batch update.  There was no reason to ship a build that didn't do
anything, so it was dropped on the RHEL side.

My educated guess is that Stream 8 picked up the -5.el8 build during
the course of RHEL 8.4 development as expected, and then when it was
dropped on the RHEL side it used the -4.el8_3.1 update because that is
indeed the latest available even today.

This is one of the unintended consequences of how Stream 8 is produced.

> The mirror
> http://mirror.centos.org/centos/8-stream/BaseOS/x86_64/os/Packages/
> shows freetype-2.9.1-4.el8_3.1.x86_64 has the latest.
>
> I wonder where this version 2.9.1-5 is coming from? The node was
> regularly installed with C8 and then swapped to CS8 ...
>
>
> # LANG=C rpm -q freetype -i |head -17
> Name        : freetype
> Version     : 2.9.1
> Release     : 5.el8
> Architecture: x86_64
> Install Date: Thu Mar 25 23:54:00 2021
> Group       : System Environment/Libraries
> Size        : 811895
> License     : (FTL or GPLv2+) and BSD and MIT and Public Domain and zlib
> with acknowledgement
> Signature   : RSA/SHA256, Wed Dec  2 16:11:08 2020, Key ID 05b555b38483c65d
> Source RPM  : freetype-2.9.1-5.el8.src.rpm
> Build Date  : Mon Nov 16 22:58:59 2020
> Build Host  : x86-02.mbox.centos.org
> Relocations : (not relocatable)
> Packager    : CentOS Buildsys <bugs at centos.org>
> Vendor      : CentOS
> URL         : http://www.freetype.org
> Summary     : A free and portable font rendering engine
>
>
> I see it here
>
> https://koji.mbox.centos.org/koji/packageinfo?packageID=408
>
> but not on the mirrors ...
>
> A retired package?

Not retired, just a build that will never be shipped at this point.

josh