Package: icc-utils
Version: 1.4.0-7
Severity: serious
User: trei...@debian.org
Usertags: edos-file-overwrite

Architecture: amd64
Distribution: squeeze->wheezy (partial) upgrade

Hi,

automatic installation tests of packages that share a file and at the
same time do not conflict by their package dependency relationships has
detected the following problem:

  Selecting previously deselected package libicc2.
  (Reading database ... 6286 files and directories currently installed.)
  Unpacking libicc2 (from .../libicc2_2.12+argyll1.1.1-1_amd64.deb) ...
  Setting up libicc2 (2.12+argyll1.1.1-1) ...

  Selecting previously deselected package icc-utils.
  (Reading database ... 6352 files and directories currently installed.)
  Unpacking icc-utils (from .../icc-utils_1.4.0-7_amd64.deb) ...
  dpkg: error processing /var/cache/apt/archives/icc-utils_1.4.0-7_amd64.deb 
(--unpack):
   trying to overwrite '/usr/bin/iccdump', which is also in package libicc2 
2.12+argyll1.1.1-1


This is a serious bug as it makes installation/upgrade fail, and
violates sections 7.6.1 and 10.1 of the policy.

As this problem can be demonstrated during partial upgrades from squeeze
to wheezy (but not within squeeze or wheezy itself), this indicates a
missing or insufficiently versioned Replaces+Breaks relationship.
But since this particular upgrade ordering is not forbidden by any
dependency relationship, it is possible that apt (or $PACKAGE_MANAGER)
will use this erroneus path on squeeze->wheezy upgrades.

Here is a list of files that are known to be shared by both packages
(according to the Contents files for squeeze and wheezy on amd64, which
may be slightly out of sync):

  usr/bin/iccdump
  usr/bin/icclu


The icc-utils package was added recently:

  argyll (1.4.0-2) unstable; urgency=low
   * Move binaries from libicc2 package to a new icc-utils package (Closes:


The following relationships are currently defined:

  Package: icc-utils
  Depends: libicc2
  Conflicts: n/a
  Breaks:    n/a
  Replaces:  libicc2 (<= 1.4.0-1)

But libicc2 has the version number prefixed with "2.12+argyll", so
this does not match.

The following relationships should be added for a clean takeover of
these files
(http://www.debian.org/doc/debian-policy/ch-relationships.html#s-replaces):

  Package:  icc-utils
  Breaks:   libicc2 (<< 2.12+argyll1.4.0-2)
  Replaces: libicc2 (<< 2.12+argyll1.4.0-2)

IMO (<< 2.12+argyll1.4.0-2) is preferable over (<= 2.12+argyll1.4.0-1)
as the latter does now cover binNMUs like 2.12+argyll1.4.0-1+b1.


Cheers,

Andreas

PS: for more information about the detection of file overwrite errors
of this kind see http://edos.debian.net/file-overwrites/.

Attachment: libicc2=2.12+argyll1.1.1-1_icc-utils=1.4.0-7.log.gz
Description: GNU Zip compressed data

Reply via email to