[Pkg-javascript-devel] Bug#694469: node-backbone: missing Breaks+Replaces: libjs-backbone (<< 0.5.3-3)

[Andreas Beckmann]

Package: node-backbone
Version: 0.5.3-3
Severity: serious
User: treinen at debian.org
Usertags: edos-file-overwrite

Architecture: amd64
Distribution: wheezy->sid (partial) upgrade

Hi,

automatic installation tests of packages that share a file and at the
same time do not conflict by their package dependency relationships has
detected the following problem:

  Selecting previously unselected package libjs-backbone.
  Unpacking libjs-backbone (from .../libjs-backbone_0.5.3-2+deb7u1_all.deb) ...
  Setting up libjs-underscore (1.1.6-1+deb7u1) ...
  Setting up libjs-backbone (0.5.3-2+deb7u1) ...

  Selecting previously unselected package node-backbone.
  Unpacking node-backbone (from .../node-backbone_0.9.2-2_all.deb) ...
  dpkg: error processing /var/cache/apt/archives/node-backbone_0.9.2-2_all.deb (--unpack):
   trying to overwrite '/usr/lib/nodejs/backbone.js', which is also in package libjs-backbone 0.5.3-2+deb7u1


This is a serious bug as it makes installation/upgrade fail, and
violates sections 7.6.1 and 10.1 of the policy.

As this problem can be demonstrated during partial upgrades from wheezy
to sid (but not within wheezy or sid itself), this indicates a
missing or insufficiently versioned Replaces+Breaks relationship.
But since this particular upgrade ordering is not forbidden by any
dependency relationship, it is possible that apt (or $PACKAGE_MANAGER)
will use this erroneus path on wheezy->sid upgrades.

Here is a list of files that are known to be shared by both packages
(according to the Contents files for wheezy and sid on amd64, which
may be slightly out of sync):

	usr/lib/nodejs/backbone.js

node-backbone was split from libjs-backbone in 0.5.3-3

The following relationships are currently defined:

  Package:   node-backbone
  Depends:   libjs-backbone
  Conflicts: n/a
  Breaks:    n/a
  Replaces:  n/a

The following relationships should be added for a clean takeover of
these files
(http://www.debian.org/doc/debian-policy/ch-relationships.html#s-replaces):

  Package:  node-backbone
  Breaks:   libjs-backbone (<< 0.5.3-3)
  Replaces: libjs-backbone (<< 0.5.3-3)


Cheers,

Andreas

PS: for more information about the detection of file overwrite errors
of this kind see http://edos.debian.net/file-overwrites/.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: libjs-backbone=0.5.3-2+deb7u1_node-backbone=0.9.2-2.log.gz
Type: application/x-gzip
Size: 6612 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-javascript-devel/attachments/20121126/f960d5b0/attachment.bin>