Bug 1783238

Summary:	yum/dnf downgrades packages to resolv dependencies
Product:	Red Hat Enterprise Linux 8	Reporter:	Jaroslav Mracek <jmracek>
Component:	inkscape	Assignee:	Jan Horak <jhorak>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Desktop QE <desktop-qa-list>
Severity:	urgent	Docs Contact:
Priority:	urgent
Version:	8.1	CC:	adam.winberg, dmach, james.antill, psabata, qe-baseos-security, stransky, tpelka, tpopela
Target Milestone:	rc	Keywords:	Triaged
Target Release:	8.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	inkscape-0.92.3-12.module+el8.1.0+4737+97b227b1	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	1777819	Environment:
Last Closed:	2020-04-20 12:37:10 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1783244
Bug Blocks:	1777819, 1833074

Description Jaroslav Mracek 2019-12-13 12:18:07 UTC

+++ This bug was initially created as a clone of Bug #1777819 +++

Description of problem:
Stumbled on this because of https://bugzilla.redhat.com/show_bug.cgi?id=1727105. 

Installing inkscape on RHEL8.1 results in yum downgrading a lot of packages in order to fulfil dependencies, since inkscape depends on an older version of poppler:

=========================================================================================================================================================================
 Package                                     Architecture          Version                                                  Repository                              Size
=========================================================================================================================================================================
Installing:
 inkscape                                    x86_64                0.92.3-11.module+el8+2446+0a10e1ae                       tfolinux-rhel-appstream                 17 M
Installing dependencies:
 python2-scour                               noarch                0.35-9.module+el8+2446+0a10e1ae                          tfolinux-rhel-appstream                 87 k
 openblas                                    x86_64                0.3.3-2.el8                                              tfolinux-rhel-appstream                4.3 M
 python2-lxml                                x86_64                4.2.3-3.module+el8.1.0+3111+de3f2d8e                     tfolinux-rhel-appstream                1.5 M
 gsl                                         x86_64                2.5-1.el8                                                tfolinux-rhel-appstream                1.0 M
 python2-nose                                noarch                1.3.7-30.module+el8.1.0+3111+de3f2d8e                    tfolinux-rhel-appstream                270 k
 gtkmm24                                     x86_64                2.24.5-5.el8                                             tfolinux-rhel-appstream                820 k
 openblas-threads                            x86_64                0.3.3-2.el8                                              tfolinux-rhel-appstream                4.4 M
 potrace                                     x86_64                1.15-2.el8                                               tfolinux-rhel-appstream                122 k
 python2-numpy                               x86_64                1:1.14.2-13.module+el8.1.0+3323+7ac3e00f                 tfolinux-rhel-appstream                3.7 M
Downgrading:
 libreoffice-ure                             x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                2.3 M
 libreoffice-impress                         x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                667 k
 libreoffice-pyuno                           x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                316 k
 libreoffice-pdfimport                       x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                310 k
 libreoffice-help-en                         x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                5.0 M
 libreoffice-core                            x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                 77 M
 libreoffice-langpack-en                     x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                174 k
 cups-filters-libs                           x86_64                1.20.0-14.el8_0.1                                        tfolinux-rhel-appstream                134 k
 libreoffice-x11                             x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                324 k
 poppler                                     x86_64                0.66.0-11.el8_0.12                                       tfolinux-rhel-appstream                940 k
 poppler-utils                               x86_64                0.66.0-11.el8_0.12                                       tfolinux-rhel-appstream                225 k
 libreoffice-help-sv                         x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                6.6 M
 libreoffice-draw                            x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                 97 k
 poppler-glib                                x86_64                0.66.0-11.el8_0.12                                       tfolinux-rhel-appstream                162 k
 libreoffice-gtk3                            x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                345 k
 libreoffice-ure-common                      noarch                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                519 k
 libreoffice-opensymbol-fonts                noarch                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                258 k
 libreoffice-graphicfilter                   x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                503 k
 libreoffice-langpack-sv                     x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                691 k
 libreoffice-calc                            x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                8.8 M
 libreoffice-writer                          x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                4.0 M
 cups-filters                                x86_64                1.20.0-14.el8_0.1                                        tfolinux-rhel-appstream                781 k
 libreoffice-data                            noarch                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                3.4 M
 libreoffice-gtk2                            x86_64                1:6.0.6.1-13.el8                                         tfolinux-rhel-appstream                324 k
Enabling module streams:
 inkscape                                                          0.92.3                                                                                               

Transaction Summary
=========================================================================================================================================================================
Install    10 Packages
Downgrade  24 Packages


How can I disable this behaviour? I don't want yum to fail if dependencies are not fulfilled, not downgrade packages and thereby leaving my system in an undesired state (i.e. not up-to-date). 


Version-Release number of selected component (if applicable):
yum-4.2.7-7.el8_1.noarch

How reproducible:
Always

Steps to Reproduce:
1. 'yum install' on package with deps to an old version of a package (inkscape for example, currently)
2.
3.

Actual results:
yum downgrades packages to fulfil the dependencies

Expected results:
yum should fail because dependencies are not met

Additional info:

--- Additional comment from adam winberg on 2019-11-28 11:51:45 UTC ---

Typo correction - i _do_ want yum to fail if dependencies are not fulfilled

--- Additional comment from adam winberg on 2019-12-06 08:11:06 UTC ---

Anyone? On an enterprise distro you hardly want to downgrade packages and risk end up in a vulnerable state, just to satisfy dependencies. 

Is there really no way to make yum/dnf fail instead?

--- Additional comment from Jaroslav Mracek on 2019-12-11 14:14:42 UTC ---

Thank you very much for the report. Please could you provide an additional information about your system? It is needed to properly decide what we can do for you.

Please could you provide outputs form following commands?

yum repolist

yum repoquery --info --installed --available libreoffice-ure inkscape

yum module list


Thanks a lot.

--- Additional comment from adam winberg on 2019-12-11 14:23:35 UTC ---

We're using local yum mirrors so the repolist is not so useful to you I think. In the example with inkscape there is only one repo involved (tfolinux-rhel-appstream), which is a copy of the AppStream repo from Red Hat. The repo is copied nightly from Red Hats CDN using Pulp. 

-------------------------------------------
$ yum repoquery --info --installed --available libreoffice-ure inkscape
Name         : inkscape
Version      : 0.92.3
Release      : 11.module+el8+2446+0a10e1ae
Architecture : x86_64
Size         : 17 M
Source       : inkscape-0.92.3-11.module+el8+2446+0a10e1ae.src.rpm
Repository   : tfolinux-rhel-appstream
Summary      : Vector-based drawing program using SVG
URL          : http://inkscape.sourceforge.net/
License      : GPLv2+ and CC-BY
Description  : Inkscape is a vector graphics editor, with capabilities similar to
             : Illustrator, CorelDraw, or Xara X, using the W3C standard Scalable Vector
             : Graphics (SVG) file format.  It is therefore a very useful tool for web
             : designers and as an interchange format for desktop publishing.
             : 
             : Inkscape supports many advanced SVG features (markers, clones, alpha
             : blending, etc.) and great care is taken in designing a streamlined
             : interface. It is very easy to edit nodes, perform complex path operations,
             : trace bitmaps and much more.

Name         : inkscape
Version      : 0.92.3
Release      : 11.module+el8.1.0+3666+f1394dd4
Architecture : x86_64
Size         : 17 M
Source       : inkscape-0.92.3-11.module+el8.1.0+3666+f1394dd4.src.rpm
Repository   : tfolinux-rhel-appstream
Summary      : Vector-based drawing program using SVG
URL          : http://inkscape.sourceforge.net/
License      : GPLv2+ and CC-BY
Description  : Inkscape is a vector graphics editor, with capabilities similar to
             : Illustrator, CorelDraw, or Xara X, using the W3C standard Scalable Vector
             : Graphics (SVG) file format.  It is therefore a very useful tool for web
             : designers and as an interchange format for desktop publishing.
             : 
             : Inkscape supports many advanced SVG features (markers, clones, alpha
             : blending, etc.) and great care is taken in designing a streamlined
             : interface. It is very easy to edit nodes, perform complex path operations,
             : trace bitmaps and much more.

Name         : libreoffice-ure
Epoch        : 1
Version      : 6.0.6.1
Release      : 13.el8
Architecture : x86_64
Size         : 2.3 M
Source       : libreoffice-6.0.6.1-13.el8.src.rpm
Repository   : tfolinux-rhel-appstream
Summary      : UNO Runtime Environment
URL          : http://www.libreoffice.org/
License      : (MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
Description  : UNO is the component model of LibreOffice. UNO offers interoperability between
             : programming languages, other components models and hardware architectures,
             : either in process or over process boundaries, in the Intranet as well as in the
             : Internet. UNO components may be implemented in and accessed from any
             : programming language for which a UNO implementation (AKA language binding) and
             : an appropriate bridge or adapter exists

Name         : libreoffice-ure
Epoch        : 1
Version      : 6.0.6.1
Release      : 19.el8
Architecture : x86_64
Size         : 2.3 M
Source       : libreoffice-6.0.6.1-19.el8.src.rpm
Repository   : tfolinux-rhel-appstream
Summary      : UNO Runtime Environment
URL          : http://www.libreoffice.org/
License      : (MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
Description  : UNO is the component model of LibreOffice. UNO offers interoperability between
             : programming languages, other components models and hardware architectures,
             : either in process or over process boundaries, in the Intranet as well as in the
             : Internet. UNO components may be implemented in and accessed from any
             : programming language for which a UNO implementation (AKA language binding) and
             : an appropriate bridge or adapter exists

Name         : libreoffice-ure
Epoch        : 1
Version      : 6.0.6.1
Release      : 19.el8
Architecture : x86_64
Size         : 8.5 M
Source       : libreoffice-6.0.6.1-19.el8.src.rpm
Repository   : @System
From repo    : tfolinux-rhel-appstream
Summary      : UNO Runtime Environment
URL          : http://www.libreoffice.org/
License      : (MPLv1.1 or LGPLv3+) and LGPLv3 and LGPLv2+ and BSD and (MPLv1.1 or GPLv2 or LGPLv2 or Netscape) and Public Domain and ASL 2.0 and MPLv2.0 and CC0
Description  : UNO is the component model of LibreOffice. UNO offers interoperability between
             : programming languages, other components models and hardware architectures,
             : either in process or over process boundaries, in the Intranet as well as in the
             : Internet. UNO components may be implemented in and accessed from any
             : programming language for which a UNO implementation (AKA language binding) and
             : an appropriate bridge or adapter exists

-------------------------------------------

$ yum module list
RHEL8 AppStream
Name                        Stream               Profiles                                       Summary                                                                  
389-ds                      1.4                                                                 389 Directory Server (base)                                              
ant                         1.10 [d]             common [d]                                     Java build tool                                                          
container-tools             rhel8 [d][e]         common [d]                                     Common tools and dependencies for container runtimes                     
container-tools             1.0                  common [d]                                     Common tools and dependencies for container runtimes                     
freeradius                  3.0 [d]              server [d]                                     High-performance and highly configurable free RADIUS server              
gimp                        2.8 [d][e]           common [d], devel                              gimp module                                                              
go-toolset                  rhel8 [d]            common [d]                                     Go                                                                       
httpd                       2.4 [d]              common [d], devel, minimal                     Apache HTTP Server                                                       
idm                         DL1                  common [d], adtrust, client, dns, server       The Red Hat Enterprise Linux Identity Management system module           
idm                         client [d]           common [d]                                     RHEL IdM long term support client module                                 
inkscape                    0.92.3 [d]           common [d]                                     Vector-based drawing program using SVG                                   
javapackages-runtime        201801 [d][e]        common [d]                                     Basic runtime utilities to support Java applications                     
libselinux-python           2.8                  common                                         Python 2 bindings for libselinux                                         
llvm-toolset                rhel8 [d][e]         common [d]                                     LLVM                                                                     
mailman                     2.1 [d]              common [d]                                     Electronic mail discussion and e-newsletter lists managing software      
mariadb                     10.3 [d]             client, server [d], galera                     MariaDB Module                                                           
maven                       3.5 [d]              common [d]                                     Java project management and project comprehension tool                   
mercurial                   4.8 [d]              common [d]                                     Mercurial -- a distributed SCM                                           
mod_auth_openidc            2.3                                                                 Apache module suporting OpenID Connect authentication                    
mysql                       8.0 [d]              client, server [d]                             MySQL Module                                                             
nginx                       1.14 [d]             common [d]                                     nginx webserver                                                          
nginx                       1.16                 common [d]                                     nginx webserver                                                          
nodejs                      10 [d]               common [d], development, minimal, s2i          Javascript runtime                                                       
nodejs                      12                   common [d], development, minimal, s2i          Javascript runtime                                                       
parfait                     0.5                  common                                         Parfait Module                                                           
perl                        5.24                 common [d], minimal                            Practical Extraction and Report Language                                 
perl                        5.26 [d]             common [d], minimal                            Practical Extraction and Report Language                                 
perl-App-cpanminus          1.7044 [d]           common [d]                                     Get, unpack, build and install CPAN modules                              
perl-DBD-MySQL              4.046 [d]            common [d]                                     A MySQL interface for Perl                                               
perl-DBD-Pg                 3.7 [d]              common [d]                                     A PostgreSQL interface for Perl                                          
perl-DBD-SQLite             1.58 [d]             common [d]                                     SQLite DBI driver                                                        
perl-DBI                    1.641 [d]            common [d]                                     A database access API for Perl                                           
perl-FCGI                   0.78 [d]             common [d]                                     FastCGI Perl bindings                                                    
perl-YAML                   1.24 [d][e]          common [d]                                     Perl parser for YAML                                                     
php                         7.2 [d]              common [d], devel, minimal                     PHP scripting language                                                   
php                         7.3                  common [d], devel, minimal                     PHP scripting language                                                   
pki-core                    10.6                                                                PKI Core module for PKI 10.6 or later                                    
pki-deps                    10.6                                                                PKI Dependencies module for PKI 10.6 or later                            
postgresql                  9.6 [x]              client, server [d]                             PostgreSQL server and client module                                      
postgresql                  10 [d][x]            client, server [d]                             PostgreSQL server and client module                                      
python27                    2.7 [d][e]           common [d]                                     Python programming language, version 2.7                                 
python36                    3.6 [d][e]           common [d], build                              Python programming language, version 3.6                                 
redis                       5 [d]                common [d]                                     Redis persistent key-value database                                      
rhn-tools                   1.0 [d]              common [d]                                     Red Hat Satellite 5 tools for RHEL                                       
ruby                        2.5 [d][e]           common [d]                                     An interpreter of object-oriented scripting language                     
ruby                        2.6                  common [d]                                     An interpreter of object-oriented scripting language                     
rust-toolset                rhel8 [d]            common [d]                                     Rust                                                                     
satellite-5-client          1.0 [d]              common [d], gui                                Red Hat Satellite 5 client packages                                      
scala                       2.10 [d]             common [d]                                     A hybrid functional/object-oriented language for the JVM                 
squid                       4 [d]                common [d]                                     Squid - Optimising Web Delivery                                          
subversion                  1.10 [d]             common [d], server                             Apache Subversion                                                        
swig                        3.0 [d]              common [d], complete                           Connects C/C++/Objective C to some high-level programming languages      
varnish                     6 [d]                common [d]                                     Varnish HTTP cache                                                       
virt                        rhel [d]             common [d]                                     Virtualization module                                                    

RHEL8 CodeReady-builder
Name                        Stream               Profiles                                       Summary                                                                  
javapackages-tools          201801               common                                         Tools and macros for Java packaging support                              
mariadb-devel               10.3                                                                MariaDB Module                                                           
virt-devel                  rhel                                                                Virtualization module                                                    

Hint: [d]efault, [e]nabled, [x]disabled, [i]nstalled





-------------------------------------------

Comment 1 Jaroslav Mracek 2019-12-13 12:21:43 UTC

Installation of inkscape result in upgradable system due to dependencies of inkscape. The bug could be resolved by rebuild of inkscape with the latest dependencies.

sudo dnf upgrade
Updating Subscription Management repositories.
Last metadata expiration check: 0:09:04 ago on Fri 13 Dec 2019 07:07:37 AM EST.
Error: 
 Problem 1: package inkscape-0.92.3-11.module+el8+2446+0a10e1ae.x86_64 requires libpoppler.so.77()(64bit), but none of the providers can be installed
  - cannot install both poppler-0.66.0-26.el8.x86_64 and poppler-0.66.0-11.el8_0.12.x86_64
  - cannot install both poppler-0.66.0-26.el8.x86_64 and poppler-0.66.0-10.el8.x86_64
  - cannot install the best update candidate for package poppler-0.66.0-11.el8_0.12.x86_64
  - cannot install the best update candidate for package inkscape-0.92.3-11.module+el8+2446+0a10e1ae.x86_64
 Problem 2: problem with installed package inkscape-0.92.3-11.module+el8+2446+0a10e1ae.x86_64
  - package inkscape-0.92.3-11.module+el8+2446+0a10e1ae.x86_64 requires libpoppler.so.77()(64bit), but none of the providers can be installed
  - cannot install both poppler-0.66.0-26.el8.x86_64 and poppler-0.66.0-11.el8_0.12.x86_64
  - cannot install both poppler-0.66.0-26.el8.x86_64 and poppler-0.66.0-10.el8.x86_64
  - package cups-filters-1.20.0-18.el8.x86_64 requires libpoppler.so.78()(64bit), but none of the providers can be installed
  - cannot install the best update candidate for package cups-filters-1.20.0-14.el8_0.1.x86_64
(try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)