openssl multilib broken

[Michael Schwendt]

On Fri, 15 Nov 2013 21:41:11 +0100, Reindl Harald wrote:

> >> yum --enablerepo=updates-testing update openssl\* did not work because
> >> different versions for x86_64 and i686 and so i downloaded it from koji
> > 
> > Why did you have openssl.i686 installed on x86_64 to begin with?
> > You have messed up your installation. :-(
> > Have you use rpm -Uvh instead of rpm -Fvh? Or why have you installed
> > openssl.i686?
> 
> because "yum update *.rpm" from a local folder is broken if you download
> all the x86_64 and i686 packages from koji to a local folder resulting
> in not only update the instaleld ones and installs the not required
> i686 packages too which i would expect from "rpm -Uvh" but not a yum
> localupdate

That sounds like a bug indeed. "man yum" for the "localupdate" command (deprecated)
explains that Yum will only update the specified rpm files, if an older version
is already installed. It points out that the "update" command does the same.

  # yum update openssl-libs-1.0.1e-31.fc21.i686.rpm 
  Loaded plugins: auto-update-debuginfo, langpacks, refresh-packagekit
  Examining openssl-libs-1.0.1e-31.fc21.i686.rpm: 1:openssl-libs-1.0.1e-31.fc21.i686
  Package openssl-libs.i686 not installed, cannot update it. Run yum install to install it instead.
  No packages marked for update

That doesn't work in all cases. It even marks the i686 rpm as an update for
the installed x86_64 package:

  # yum localupdate openssl-libs-1.0.1e-33.fc21.i686.rpm openssl-libs-1.0.1e-33.fc21.x86_64.rpm 
  Loaded plugins: auto-update-debuginfo, langpacks, refresh-packagekit
  Examining openssl-libs-1.0.1e-33.fc21.i686.rpm: 1:openssl-libs-1.0.1e-33.fc21.i686
  Marking openssl-libs-1.0.1e-33.fc21.i686.rpm as an update to 1:openssl-libs-1.0.1e-31.fc21.x86_64
    (!)
  Examining openssl-libs-1.0.1e-33.fc21.x86_64.rpm: 1:openssl-libs-1.0.1e-33.fc21.x86_64
  Marking openssl-libs-1.0.1e-33.fc21.x86_64.rpm as an update to 1:openssl-libs-1.0.1e-31.fc21.x86_64
  Resolving Dependencies
  --> Running transaction check
  [...]

Or:

  # yum localupdate openssl-libs-1.0.1e-33.fc21.i686.rpm 
  Loaded plugins: auto-update-debuginfo, langpacks, refresh-packagekit
  Examining openssl-libs-1.0.1e-33.fc21.i686.rpm: 1:openssl-libs-1.0.1e-33.fc21.i686
  Marking openssl-libs-1.0.1e-33.fc21.i686.rpm as an update to 1:openssl-libs-1.0.1e-31.fc21.x86_64
    (!)
  Resolving Dependencies
  --> Running transaction check

So, this is highly unsafe to use with a downloaded set of mixed arch rpm files.