Bug 1219780

Summary:	security: Unable to update from cpe:/o:opensuse:tumbleweed:20240131 with "download.opensuse.org/repositories/security/" repository added due to absence of "'./noarch/libfido2-udev-1.14.0-50.1.noarch.rpm'".
Product:	[openSUSE] openSUSE.org	Reporter:	roke beedell <rokejulianlockhart+1674683091>
Component:	3rd party software	Assignee:	Marcus Meissner <meissner>
Status:	RESOLVED FEATURE	QA Contact:	E-mail List <screening-team-bugs>
Severity:	Normal
Priority:	P5 - None	CC:	Sauerlandlinux
Version:	unspecified
Target Milestone:	---
Hardware:	x86-64
OS:	openSUSE Tumbleweed
URL:	https://forums.opensuse.org/t/cant-update-libfido2-udev-1-14-0-50-1-noarch-rpm-not-found-on-download-opensuse-org-repositories-security-opensuse-tumbleweed/172250
Whiteboard:
Found By:	Other	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description roke beedell 2024-02-09 15:31:18 UTC

When I attempt to perform

Using https://bugzilla.opensuse.org/enter_bug.cgi?classification=7340&product=openSUSE.org&component=3rd%20party%20software&assigned_to=meissner@suse.com&short_desc=security:%20Bug, here appears to be the best place to file this bug.

That is because, as

1.  https://github.com/veracrypt/VeraCrypt/issues/1303#issue-2127322799 and
1.  https://github.com/Cisco-Talos/clamav/issues/1172#issue-2127364716

demonstrate, two packages installed on my system are affected, whose sole connection is https://build.opensuse.org/project/show/security.

Comment 1 roke beedell 2024-02-09 15:34:57 UTC

> https://bugzilla.opensuse.org/show_bug.cgi?id=1219780#c0

The bug entry form appears to have redacted some of my explanation. Ignore it. I'll explain again below:

I am trying to to update my system from cpe:/o:opensuse:tumbleweed:20240131. However, with the "download.opensuse.org/repositories/security/" repository added, I am unable to, because

> Retrieving: libfido2-udev-1.14.0-50.1.noarch.rpm .................................................................................................................................................................................................................[not found]
> File './noarch/libfido2-udev-1.14.0-50.1.noarch.rpm' not found on medium 'https://download.opensuse.org/repositories/security/openSUSE_Tumbleweed/'

appears.

Comment 2 roke beedell 2024-02-09 15:41:49 UTC

Per https://forums.opensuse.org/t/cant-update-libfido2-udev-1-14-0-50-1-noarch-rpm-not-found-on-download-opensuse-org-repositories-security-opensuse-tumbleweed/172250/11, this appears to be due to the lack of the "auto-refresh" flag on my repository.

Comment 3 Stephan Hemeier 2024-02-09 15:47:59 UTC

There is Release 4 and not 1 in the Repo:
https://download.opensuse.org/repositories/security/openSUSE_Tumbleweed/noarch/libfido2-udev-1.14.0-50.4.noarch.rpm

So your Repo list is out of sync.......

Comment 4 roke beedell 2024-02-20 04:25:56 UTC

(In reply to Stephan Hemeier from comment #3)
> There is Release 4 and not 1 in the Repo:
> https://download.opensuse.org/repositories/security/openSUSE_Tumbleweed/
> noarch/libfido2-udev-1.14.0-50.4.noarch.rpm
> 
> So your Repo list is out of sync.......

Any idea of how to remediate that, and why it might have occurred?