[CentOS-devel] freetype package missed in repo

On Wed, Aug 4, 2021 at 7:01 AM Josh Boyer <jwboyer at redhat.com> wrote:
>
> On Wed, Aug 4, 2021 at 6:14 AM Leon Fauster via CentOS-devel
> <centos-devel at centos.org> wrote:
> >
> > On 04.08.21 03:33, Nico Kadel-Garcia wrote:
> > > On Tue, Aug 3, 2021 at 7:49 PM Leon Fauster via CentOS-devel
> > > <centos-devel at centos.org> wrote:
> > >>
> > >> I wonder why this package not available anymore?
> > >>
> > >> # LANG=C yum reinstall freetype
> > >> Last metadata expiration check: 1:04:59 ago on Wed Aug  4 00:38:21 2021.
> > >> Installed package freetype-2.9.1-5.el8.x86_64 (from baseos) not available.
> > >> Error: No packages marked for reinstall.
> > >>
> > >> Any clues?
> > >
> > > Because the CentOS 8.4 package is freetype-2.9.1-4, according to the
> > > local mirrors. Did you perhaps install that from a CentOS 8 Stream
> > > repo?
> > >
> >
> > Here my context: I am comparing two nodes
> > based on CS8 (Centos 8 Stream ). One have
> >
> > freetype-2.9.1-5.el8.x86_64
> > and the other have
> > freetype-2.9.1-4.el8_3.1.x86_64
>
> At one point in time during RHEL 8.4 development, freetype-2.9.1-5.el8
> was set to be shipped.  However, it only fixed a CVE and that CVE was
> already fixed by the freetype-2.9.1-4.el8_3.1 that as shipped as part
> of a batch update.  There was no reason to ship a build that didn't do
> anything, so it was dropped on the RHEL side.
>
> My educated guess is that Stream 8 picked up the -5.el8 build during
> the course of RHEL 8.4 development as expected, and then when it was
> dropped on the RHEL side it used the -4.el8_3.1 update because that is
> indeed the latest available even today.
>
> This is one of the unintended consequences of how Stream 8 is produced.

This guess is exactly correct.  2.9.1-5 is identical to
2.9.1-4.el8_3.1, which is the only reason we felt it was appropriate
to drop the former build entirely.  If/when this package is updated
again in the 8 lifecycle, I expect the release will be at least -6,
providing the correct upgrade path regardless of which release a user
currently has installed.

>
> > The mirror
> > http://mirror.centos.org/centos/8-stream/BaseOS/x86_64/os/Packages/
> > shows freetype-2.9.1-4.el8_3.1.x86_64 has the latest.
> >
> > I wonder where this version 2.9.1-5 is coming from? The node was
> > regularly installed with C8 and then swapped to CS8 ...
> >
> >
> > # LANG=C rpm -q freetype -i |head -17
> > Name        : freetype
> > Version     : 2.9.1
> > Release     : 5.el8
> > Architecture: x86_64
> > Install Date: Thu Mar 25 23:54:00 2021
> > Group       : System Environment/Libraries
> > Size        : 811895
> > License     : (FTL or GPLv2+) and BSD and MIT and Public Domain and zlib
> > with acknowledgement
> > Signature   : RSA/SHA256, Wed Dec  2 16:11:08 2020, Key ID 05b555b38483c65d
> > Source RPM  : freetype-2.9.1-5.el8.src.rpm
> > Build Date  : Mon Nov 16 22:58:59 2020
> > Build Host  : x86-02.mbox.centos.org
> > Relocations : (not relocatable)
> > Packager    : CentOS Buildsys <bugs at centos.org>
> > Vendor      : CentOS
> > URL         : http://www.freetype.org
> > Summary     : A free and portable font rendering engine
> >
> >
> > I see it here
> >
> > https://koji.mbox.centos.org/koji/packageinfo?packageID=408
> >
> > but not on the mirrors ...
> >
> > A retired package?
>
> Not retired, just a build that will never be shipped at this point.
>
> josh
>
> _______________________________________________
> CentOS-devel mailing list
> CentOS-devel at centos.org
> https://lists.centos.org/mailman/listinfo/centos-devel
>


-- 
Carl George