chromium security update deinstalls chromium?

Hi: This is odd - Yast wants to update Chromium but then reports nothing supplies the required libxkbcommon.so.0(V_1.0.0)(64bit) - so the only option is to deinstall chromium (or “break” it).
I’ve waited a week or so, but this still happens (and now there are 2 such patches). Search doesn’t reveal much discussion of this, so something’s obviously wrong with my system - ideas how to trouble-shoot? Other updates won’t go without resolving this one.

Thanks,
Patti

#### YaST2 conflicts list - generated 2022-04-20 18:17:14 ####

nothing provides 'libxkbcommon.so.0(V_1.0.0)(64bit)' needed by the to be installed chromium-100.0.4896.127-bp153.2.85.1.x86_64

     ] Following actions will be done:
do not install patch:openSUSE-2022-112-1.noarch
do not install patch:openSUSE-2022-114-1.noarch
     ] deinstallation of chromium-99.0.4844.84-bp153.2.75.1.x86_64

     ] break chromium-100.0.4896.127-bp153.2.85.1.x86_64 by ignoring some of its dependencies




#### YaST2 conflicts list END ###

That seems odd. I’m not seeing that problem here.

Looking at the system that I checked, the package “libxkbcommon0” (version 1.3.0-150300.10.3.1) seems to provide the library mentioned. You might see what happens if you try to install just that package.

YaST2 conflicts list - generated 2022-04-20 18:17:14

nothing provides ‘libxkbcommon.so.0(V_1.0.0)(64bit)’ needed by the to be installed **chromium-100.0.4896.127-bp153.2.85.1.x86_64
**
] Following actions will be done:
do not install patch:openSUSE-2022-112-1.noarch
do not install patch:openSUSE-2022-114-1.noarch
] deinstallation of chromium-99.0.4844.84-bp153.2.75.1.x86_64

 ] break chromium-100.0.4896.127-bp153.2.85.1.x86_64 by ignoring some of its dependencies

YaST2 conflicts list END

I would deinstall the old Version.

It is still unclear where this conflict comes from. This sounds like chromium-99.0.4844.84-bp153.2.75.1 blocks update of libxkbcommon0, but chromium-99.0.4844.84-bp153.2.75.1 requires libxkbcommon.so.0()(64bit) and libxkbcommon.so.0(V_0.5.0)(64bit) which are still provided by libxkbcommon0-1.3.0-150300.10.3.1. It would be interesting to see generated solver debug information (zypper patch --debug-solver, see man zypper for details).

Thank You! Searching in Yast, this is what I find…

# Status             Package                        | Summary                                  | Installed (Available)     | 5

[Keep]               libxkbcommon0                  | Library for handling xkb descriptions    | 0.8.2-3.3.1               |  277.4 KiB
[Do Not Install]     libxkbcommon0-32bit            | Library for handling xkb descriptions    | (0.8.2-3.3.1)             |  269.8 KiB

I can’t interpret the version number from Yast in relation to your version number, but it is installed. I tried updating libxkbcommon0 in Yast, but afterward chromium still won’t install the Security Patches - same error. When I choose to not update chromium in Online Update in Yast (to try to bypass the problem), then there are no other “Security Updates” listed in “Needed Patches.” But when I select “All Patches,” I see lots of updates, including many security updates. These don’t/won’t install after deselecting the chromium Security Update. This seems odd and unsafe as other listed security updates apparently aren’t being installed. Color me confused.

Thanks much - I’m not sure how to debug but I’ll fiddle with it… What do you think of the idea of deinstalling the old chromium then installing the updated version?

Loading repository data... 
Warning: Repository 'openSUSE:Backports:SLE-15-SP3' appears to be outdated. Consider using a different mirror or server. 
Reading installed packages... 
Resolving package dependencies... 
Generating solver test case... 
Solver test case generated successfully at /var/log/zypper.solverTestCase. 
**linux-lhkc:/home/patti #** cat /var/log/zypper.solverTestCase 
cat: /var/log/zypper.solverTestCase: Is a directory 
**linux-lhkc:/home/patti #** cd /var/log/zypper.solverTestCase 
**linux-lhkc:/var/log/zypper.solverTestCase #** ls 
brave-browser.repo.gzopenSUSE_Leap_15.3_1.repo.gzrepo-oss.repo.gz             testcase.t 
http-download.opensuse.org-327dee1b.repo.gzopenSUSE_Leap_15.3_2.repo.gzrepo-update-non-oss.repo.gz  y2log 
http-ftp.gwdg.de-4e218b07.repo.gzopenSUSE_Leap_15.3.repo.gzrepo-update.repo.gz          zypp-autoinst.yaml 
http-opensuse-guide.org-2fd9014a.repo.gzrepo-backports-update.repo.gz  solver.result                zypp-control.yaml 
https-download.opensuse.org-ee923ad5.repo.gzrepo-non-oss.repo.gz@System.repo.gz              zypp-modalias.yaml 
**linux-lhkc:/var/log/zypper.solverTestCase #** cat solver.result 
erase chromium-99.0.4844.84-bp153.2.75.1.x86_64@@System 
install patch:openSUSE-2022-114-1.noarch@repo-backports-update 
problem 3651721b info nothing provides libxkbcommon.so.0(V_1.0.0)(64bit) needed by chromium-100.0.4896.127-bp153.2.85.1.x86_64 
problem 3651721b solution 59b20342 deljob install pkg patch:openSUSE-2022-112-1.noarch@repo-backports-update 
problem 3651721b solution 59b20342 deljob install pkg patch:openSUSE-2022-114-1.noarch@repo-backports-update 
problem 3651721b solution 5dc2f374 erase chromium-99.0.4844.84-bp153.2.75.1.x86_64@@System 
**linux-lhkc:/var/log/zypper.solverTestCase #**



Try running

zypper refresh -f

from the command line. It looks as if one or more of your repos is not being refreshed properly.

OK. now it is clear what happens. Patch explicitly conflicts with earlier versions of packages that are “patched” thus forcing their removal. So on one hand installing patch removes currently installed chromium (which is exactly what patch is designed to do) but on the other hand newer version of chromium cannot be installed due to missing libxkbcommon0 update.

Well, zypper (or whatever GUI you are using) actually gave you the correct choice of not installing patch. Whether choice of removing existing chromium version without installing update is justified in this case is open to discussion. You may consider opening bug report.

But technically there is no bug and everything behaves as designed. Check mirrors you are using, may be they do not get update for some time.

Probably don’t need/want that repo - I think it’s SLE

Well, it does look better now to my inexperienced eyes. I guess I’ll try uninstalling the old version of chromium then reinstalling the latest version. Hmmm… Don’t want to accidentally blow away all my chromium settings.

**linux-lhkc:/var/log/zypper.solverTestCase #** zypper patch --debug-solver        
Loading repository data... 
Warning: Repository 'openSUSE:Backports:SLE-15-SP3' appears to be outdated. Consider using a different mirror or server. 
Reading installed packages... 
Resolving package dependencies... 
Generating solver test case... 
Solver test case generated successfully at /var/log/zypper.solverTestCase. 
**linux-lhkc:/var/log/zypper.solverTestCase #** cat solver.result           
erase chromium-99.0.4844.84-bp153.2.75.1.x86_64@@System 
install patch:openSUSE-2022-114-1.noarch@repo-backports-update 
problem 3651721b info nothing provides libxkbcommon.so.0(V_1.0.0)(64bit) needed by chromium-100.0.4896.127-bp153.2.85.1.x86_64 
problem 3651721b solution 59b20342 deljob install pkg patch:openSUSE-2022-112-1.noarch@repo-backports-update 
problem 3651721b solution 59b20342 deljob install pkg patch:openSUSE-2022-114-1.noarch@repo-backports-update 
problem 3651721b solution 5dc2f374 erase chromium-99.0.4844.84-bp153.2.75.1.x86_64@@System 
**linux-lhkc:/var/log/zypper.solverTestCase #** 

It is time for obligatory “zypper lr -d”.

OK, I uninstalled chromium then tried to install the latest version.


#### YaST2 conflicts list - generated 2022-04-21 11:54:54 ####

nothing provides 'libxkbcommon.so.0(V_1.0.0)(64bit)' needed by the to be installed chromium-100.0.4896.127-bp153.2.85.1.x86_64

     ] break chromium-100.0.4896.127-bp153.2.85.1.x86_64 by ignoring some of its dependencies

     ] do not install chromium-100.0.4896.127-bp153.2.85.1.x86_64




#### YaST2 conflicts list END ###

So I installed version 99 - unsafe - but usable.

**linux-lhkc:/home/patti #** zypper lr -d 
#  | Alias                                | Name                                                                                        | Enabled | GPG Check | Refresh | Priority | Type   | URI                                                                                  | Service 
---+--------------------------------------+---------------------------------------------------------------------------------------------+---------+-----------+---------+----------+--------+--------------------------------------------------------------------------------------+-------- 
 1 | brave-browser                        | brave-browser                                                                               | Yes     | (r ) Yes  | No      |   99     | rpm-md | https://brave-browser-rpm-release.s3.brave.com/x86_64/                               |  
 2 | http-download.opensuse.org-327dee1b  | openSUSE:Leap:15.3:Update                                                                   | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.3/oss/                                   |  
 3 | http-ftp.gwdg.de-4e218b07            | Packman Repository                                                                          | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Leap_15.3/                   |  
 4 | http-opensuse-guide.org-2fd9014a     | libdvdcss repository                                                                        | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://opensuse-guide.org/repo/openSUSE_Leap_15.3/                                   |  
 5 | https-download.opensuse.org-ee923ad5 | openSUSE:Backports:SLE-15-SP3                                                               | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://download.opensuse.org/repositories/openSUSE:/Backports:/SLE-15-SP3/standard/ |  
 6 | openSUSE_Leap_15.3                   | games/openSUSE_Leap_15.3/                                                                   | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://download.opensuse.org/repositories/games/openSUSE_Leap_15.3/                 |  
 7 | openSUSE_Leap_15.3_1                 | science/openSUSE_Leap_15.3/                                                                 | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/repositories/science/openSUSE_Leap_15.3/                |  
 8 | openSUSE_Leap_15.3_2                 | hamradio/openSUSE_Leap_15.3/                                                                | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://download.opensuse.org/repositories/hamradio/openSUSE_Leap_15.3/              |  
 9 | repo-backports-debug-update          | Update repository with updates for openSUSE Leap debuginfo packages from openSUSE Backports | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/update/leap/15.3/backports_debug/                       |  
10 | repo-backports-update                | Update repository of openSUSE Backports                                                     | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.3/backports/                             |  
11 | repo-debug                           | Debug Repository                                                                            | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/distribution/leap/15.3/repo/oss/                  |  
12 | repo-debug-non-oss                   | Debug Repository (Non-OSS)                                                                  | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/distribution/leap/15.3/repo/non-oss/              |  
13 | repo-debug-update                    | Update Repository (Debug)                                                                   | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/update/leap/15.3/oss/                             |  
14 | repo-debug-update-non-oss            | Update Repository (Debug, Non-OSS)                                                          | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/update/leap/15.3/non-oss/                         |  
15 | repo-non-oss                         | Non-OSS Repository                                                                          | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/distribution/leap/15.3/repo/non-oss/                    |  
16 | repo-oss                             | Main Repository                                                                             | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/distribution/leap/15.3/repo/oss/                        |  
17 | repo-source                          | Source Repository                                                                           | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/source/distribution/leap/15.3/repo/oss/                 |  
18 | repo-update                          | Main Update Repository                                                                      | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.3/oss                                    |  
19 | repo-update-non-oss                  | Update Repository (Non-Oss)                                                                 | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.3/non-oss/                               |  
**linux-lhkc:/home/patti #**



I miss this one:

17 | repo-sle-update                    | Update repository with updates from SUSE Linux Enterprise 15 | Ja        | (r ) Ja         | Ja             |   99      | rpm-md   | http://download.opensuse.org/update/leap/15.3/sle/                                                          | 

And why this:

5 | https-download.opensuse.org-ee923ad5 | openSUSE:Backports:SLE-15-SP3                                                               | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://download.opensuse.org/repositories/openSUSE:/Backports:/SLE-15-SP3/standard/ | 

You miss SLE updates repository which means you miss updates to core packages (actually most updates are from this repository). I do not know how you managed it (repository definition is installed automatically by openSUSE-release package update) unless you deliberately removed this definition.

Welcome to one click install.

There were some packages - for instance, Signal messenger - which wanted other repos for one click install. I’m a little uncomfortable installing but can’t find an Opensuse build of Signal Desktop - I use that constantly. Suggestions for Signal Desktop?

I didn’t remove except maybe by accident, any installer-installed repos (including updates). I’d better fix that right away. Do you know a link to a web page with the latest repos for 15.3? Pages such as:

https://build.opensuse.org/repositories/openSUSE:Leap:15.3
https://forums.opensuse.org/showthread.php/565594-Leap-15-3-repository-list-what-to-delete-change-priority-etc
https://lists.opensuse.org/archives/list/users@lists.opensuse.org/thread/QSBJBXXDIA2MMMMG6XQH57XMDN3SY6T5/

…and such web pages are pretty confusing since I normally only use a couple of extra repos (packman, science) in addition to the stock installer-installed LEAP repos.

No.

zypper in -f openSUSE-release

should install two standard repositories - backports and SLE updates.

bor@leap15:~> cat /etc/zypp/repos.d/repo-sle-update.repo 
[repo-sle-update]
name=Update repository with updates from SUSE Linux Enterprise 15
enabled=1
autorefresh=1
baseurl=https://download.opensuse.org/update/leap/$releasever/sle/
path=/
type=rpm-md
keeppackages=0
bor@leap15:~> 

What about this:

pluto:~ # LANG=C zypper lr -d Signal
Alias          : openSUSE_Leap_${releasever}_3
Name           : Signal
URI            : https://download.opensuse.org/repositories/network:/im:/signal/openSUSE_Leap_15.3/
Enabled        : Yes
GPG Check      : (r ) Yes
Priority       : 99 (default priority)
Autorefresh    : On
Keep Packages  : Off
Type           : rpm-md
GPG Key URI    : 
Path Prefix    : /
Parent Service : 
Keywords       : ---
Repo Info Path : /etc/zypp/repos.d/openSUSE_Leap_15.2_3.repo
MD Cache Path  : /var/cache/zypp/raw/openSUSE_Leap_${releasever}_3
pluto:~ # 

I’m not sure what’s going on here… it’s still absolute magic that anyone can find these sorts of things in some (obscure?) repo. I see this time and time again. Most of the internet searches return nothing useful. Not sure why I have such bad luck. How did you find this repo? For instance, there was also a repo for HAM radio apps which I knew nothing about - an admin here did. Internet searches turned up nothing.

**linux-lhkc:/home/patti #** zypper lr -d Signal 
Repository 'Signal' not found by its alias, number, or URI.
Use 'zypper repos' to get the list of defined repositories. 
**linux-lhkc:/home/patti #** LANG=C zypper lr -d Signal 
Repository 'Signal' not found by its alias, number, or URI.
Use 'zypper repos' to get the list of defined repositories. 
**linux-lhkc:/home/patti #**


Still need to solve the chromium noninstall problem.