CentOS - Jul 2008 - pm-utils - ATrpms updates a system package on the stable branch

I performed a clean minimal CentOS 5.2 install, fully updated the 
system, and then added the ATrpms repository.  When I perform an update 
after adding the ATrpms repository, the package pm-utils is updated the 
the ATrpms repository.  My understanding is there should not have been 
any updates as the stable version does not update system packages, right?

"The CentOS 5/RHEL 5 repository from atrpms.net is safe to use, if you 
only use the stable version. Packages in there do not overwrite system 
packages." [1]

If this is true, why did this package get updated?

Thanks,
Kenneth


[1] http://wiki.centos.org/AdditionalResources/Repositories/

on 7-7-2008 12:45 PM Kenneth Burgener spake the
following:
> I performed a clean minimal CentOS 5.2 install, fully updated the 
> system, and then added the ATrpms repository.  When I perform an update 
> after adding the ATrpms repository, the package pm-utils is updated the 
> the ATrpms repository.  My understanding is there should not have been 
> any updates as the stable version does not update system packages, right?
> 
> "The CentOS 5/RHEL 5 repository from atrpms.net is safe to use, if you
> only use the stable version. Packages in there do not overwrite system 
> packages." [1]
> 
> If this is true, why did this package get updated?
> 
> Thanks,
> Kenneth
> 
> 
> [1] http://wiki.centos.org/AdditionalResources/Repositories/
You need to use the priorities plugin if you are going to use 3rd party repos. 
There is no other safe way about it.

-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 258 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.centos.org/pipermail/centos/attachments/20080707/15ae55c2/attachment-0002.sig>

>If this is true, why did this package get updated?
Can't answer that, but do you use yum-priorities? I was actually
just looking at ATRPMS and about to see if it had what I needed
for a new install. It would be good to know if that problem happened
with the repo protection in place...

jlc

On 7/7/2008 2:26 PM, Scott Silva wrote:
> on 7-7-2008 12:45 PM Kenneth Burgener spake the following:
>> "The CentOS 5/RHEL 5 repository from atrpms.net is safe to use, if
you
>> only use the stable version. Packages in there do not overwrite system 
>> packages." [1]
>>
>> [1] http://wiki.centos.org/AdditionalResources/Repositories/
> You need to use the priorities plugin if you are going to use 3rd party 
> repos. There is no other safe way about it.

I am not worried about what is did to my system, as this is a minor 
package.  What I am more interested in is if this is a bug that needs to 
be reported?

Thanks,
Kenneth