Bug 451229 - rootfiles package was pulled straight from RHEL
Summary: rootfiles package was pulled straight from RHEL
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: rootfiles
Version: 9
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Ondrej Vasik
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2008-06-13 14:41 UTC by Justin Sherrill
Modified: 2008-11-09 03:22 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2008-11-09 03:22:36 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Justin Sherrill 2008-06-13 14:41:42 UTC 
Description of problem:

The package rootfiles-8.1-1.1.1.noarch was pulled straight from RHEL and was not
rebuilt.  It was simply resigned.  This means that the vendor field still says
"Red Hat, Inc." .  

Not sure if this was intentional or not, but it doesn't seem proper.
Comment 1 Justin Sherrill 2008-06-13 16:00:27 UTC 
Talking with Jon Stanley, he is going to rebuild all the Fedora packages with
the correct vendor that need them. Assigning to him.
Comment 2 Jon Stanley 2008-11-09 03:22:36 UTC 
The problem was actually solved another way in Spacewalk (which was the initial reason this was noticed). We now take into account the md5sums of packages (thereby catching patches signed with different keys). The root of the problem was that many vendors (RH, Fedora, CentOS) included files with the same NEVRA but signed with different keys, and Spacewalk/Satellite keyed off of the NEVRA for determining the uniqueness of a package.

This bug can be closed.
Note You need to log in before you can comment on or make changes to this bug.