[Pkg-kde-extras] Bug#870435: libkpmcore5: removal of libkpmcore5 makes files disappear from libkpmcore4

[Andreas Beckmann]

Package: libkpmcore5
Version: 3.1.2-1
Severity: serious
User: debian-qa at lists.debian.org
Usertags: piuparts replaces-without-breaks

Hi,

during a test with piuparts and DOSE tools I noticed your package causes
removal of files that also belong to another package.
This is caused by using Replaces without corresponding Breaks.

The installation sequence to reproduce this problem is

  apt-get install libkpmcore4
  # (1)
  apt-get install libkpmcore5
  apt-get remove libkpmcore5
  # (2)

The list of installed files at points (1) and (2) should be identical,
but the following files have disappeared:

  /usr/lib/x86_64-linux-gnu/qt5/plugins/libpmdummybackendplugin.so
  /usr/lib/x86_64-linux-gnu/qt5/plugins/libpmlibpartedbackendplugin.so
  /usr/share/kservices5/pmdummybackendplugin.desktop
  /usr/share/kservices5/pmlibpartedbackendplugin.desktop
  /usr/share/kservicetypes5/pmcorebackendplugin.desktop

This is a serious bug violating policy 7.6, see
https://www.debian.org/doc/debian-policy/ch-relationships.html#s-replaces
and also see the footnote that describes this incorrect behavior
https://www.debian.org/doc/debian-policy/footnotes.html#f53

The libkpmcore5 package has the following relationships with libkpmcore4:

  Conflicts: n/a
  Breaks:    n/a
  Replaces:  libkpmcore3, libkpmcore4

>From the attached log (scroll to the bottom...):

3m54.1s ERROR: FAIL: After purging files have disappeared:
  /usr/lib/x86_64-linux-gnu/qt5/plugins/libpmdummybackendplugin.so       owned by: libkpmcore5
  /usr/lib/x86_64-linux-gnu/qt5/plugins/libpmlibpartedbackendplugin.so   owned by: libkpmcore5
  /usr/share/kservices5/pmdummybackendplugin.desktop     owned by: libkpmcore5
  /usr/share/kservices5/pmlibpartedbackendplugin.desktop         owned by: libkpmcore5
  /usr/share/kservicetypes5/pmcorebackendplugin.desktop  owned by: libkpmcore5

3m54.1s ERROR: FAIL: After purging files have been modified:
  /var/lib/dpkg/info/libkpmcore4.list    not owned

(note that ownership was recorded after libkpmcore5 claimes these files)


cheers,

Andreas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: libkpmcore4=3.0.2-2_libkpmcore5=3.1.2-1.log.gz
Type: application/gzip
Size: 61699 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-kde-extras/attachments/20170802/52ad45a3/attachment-0001.bin>