fixed in file-4.17-15.el5_3.1

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2009-0456.html

I try it here in desperate hope someone is still reading comments about this issue.
The Errata is out in the open: RHBA-2009-0456.
It is a Bug-Fix-Errata, nothing serious though.
Why is it drawing that much dependencies?

# yum list file
Installed Packages
file.x86_64                              4.17-15                                      installed
Available Packages
file.x86_64                              4.17-15.el5_3.1                              rhel-5-updates

# yum upgrade file
(...)
Dependencies Resolved

====================================================================================================
 Package                     Arch          Version                      Repository             Size
====================================================================================================
Updating:
 file                        x86_64        4.17-15.el5_3.1              rhel-5-updates        318 k
Installing for dependencies:
(...)
Transaction Summary
====================================================================================================
Install    112 Package(s)
Update       1 Package(s)
Remove       0 Package(s)

Total size: 52 M
Total download size: 10 M
Is this ok [y/N]: n
Exiting on user Command
Complete!

In a productive environment i defenitely would not apply a patch that pulls in 112 packages - amongst them gnome-vfs2, gnome-keyring, audiofile, alsa-lib, cups-libs - on a system where those packages are not needed and with the previous file-package installed aren't needed too.

# yum list installed|wc -l
213

This was a core-install with openssh and yum installed afterwards to achieve a minimal set.

The requires from both packages are the same:

file-4.17-15

Requires

/sbin/ldconfig
/sbin/ldconfig
libc.so.6()(64bit)
libc.so.6(GLIBC_2.2.5)(64bit)
libc.so.6(GLIBC_2.3)(64bit)
libc.so.6(GLIBC_2.3.4)(64bit)
libc.so.6(GLIBC_2.4)(64bit)
libmagic.so.1()(64bit)
libz.so.1()(64bit)
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rtld(GNU_HASH)

Provides

file = 4.17-15
libmagic.so.1()(64bit)

file-4.17-15.el5_3.1

Requires

/sbin/ldconfig
/sbin/ldconfig
libc.so.6()(64bit)
libc.so.6(GLIBC_2.2.5)(64bit)
libc.so.6(GLIBC_2.3)(64bit)
libc.so.6(GLIBC_2.3.4)(64bit)
libc.so.6(GLIBC_2.4)(64bit)
libmagic.so.1()(64bit)
libz.so.1()(64bit)
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rtld(GNU_HASH)

Provides

file = 4.17-15.el5_3.1
libmagic.so.1()(64bit)

So who is causing this and could this be fixed?

Gerrit, will you try "yum update" instead of "yum upgrade" ?

also, please post here the dependency resolve list

Hello

I did
# yum clean all
# yum update file

This worked without pulling the other rpms in.