Description of problem: I'm not sure this is the right component, the root cause of the problems really needs to be against rel-eng etc. I think. Anyway... yum/RHN provides update notices via. the updateinfo.xml file, part of that data is the packages which need to be downloaded/updated to fix that specific problem. However RHEA-2007:0128-3 contains all of the pkgs for all of the releases. Eg. RHBA-2007:0129-2 contains (relevant to .x86_64) Files : net-snmp-5.3.1-14.0.1.el5.i386.rpm : net-snmp-libs-5.3.1-14.0.1.el5.x86_64.rpm : net-snmp-devel-5.3.1-14.0.1.el5.i386.rpm : net-snmp-perl-5.3.1-14.0.1.el5.x86_64.rpm : net-snmp-utils-5.3.1-14.0.1.el5.i386.rpm : net-snmp-5.3.1-14.0.1.el5.x86_64.rpm : net-snmp-utils-5.3.1-14.0.1.el5.x86_64.rpm : net-snmp-devel-5.3.1-14.0.1.el5.x86_64.rpm : net-snmp-libs-5.3.1-14.0.1.el5.i386.rpm : net-snmp-perl-5.3.1-14.0.1.el5.i386.rpm ...but RHEA-2007:0128-3 contains: Files : tzdata-2007d-1.el5.noarch.rpm : tzdata-2007d-1.el3.noarch.rpm : tzdata-2007d-1.el4.noarch.rpm : tzdata-2007d-1.el2_1.noarch.rpm ...while this is not _that_ bad atm. ... it will soon be much more visible with a yum/yum-security change going into 5.3, and while I could probably work around it AFAICS this is the only notice with bad packages in it.
Dennis-- can you take a look?
This actually sounds like an issue for James Bowes.
I am extremely pleased to find this fixed along with other changes included in moving the repodata generation to Java layer. By manually inspecting the updateinfo.xml file on a RHEL5 box, it shows only this package info: <pkglist> <collection short="rhel-i386-server-5"> <name>Red Hat Enterprise Linux (v. 5 for 32-bit x86)</name> <package name="tzdata" version="2007d" release="1.el5" epoch="0" arch="noarch" src="tzdata-2007d-1.el5.src.rpm"> <filename>tzdata-2007d-1.el5.noarch.rpm</filename> <sum type="md5">7c801d25ca4e0dbfb9225b709aa2cbc3</sum> </package> </collection> </pkglist>