Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-40913

AppStream metadata allow user uninstallation of PackageKit

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Undefined Undefined
    • None
    • rhel-10.0
    • PackageKit
    • None
    • None
    • Moderate
    • EasyFix
    • rhel-display-hw-multimedia
    • ssg_display
    • 1
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • Red Hat Enterprise Linux
    • None
    • None
    • None
    • None

      Because of a missing tags in the AppStream metainfo file, PackageKit is shown as user uninstallable in GNOME Software and other GUI/TUI package managers based on AppStream metadata. This is incorrect and potentially dangerous.

      The issue was already fixed in upstream and its fix was added as a downstream patch into Fedora 40. Please, consider backporting this patch into RHEL 10 as well.

      Additional information:

      Upstream ticket - https://github.com/PackageKit/PackageKit/issues/759
      Fedora fix - https://src.fedoraproject.org/rpms/PackageKit/c/21cc1936d5bb36c099eb02c7efab623eb236a75a?branch=f40

      How reproducible:

      Every time.

      Steps to reproduce

      1. Use latest RHEL10 Workstation compose.
      2. Open the "Software" app.
      3. Switch to the Installed tab, scroll down and find "PackageKit".
      4. Open its details page.

      Expected results

      There is no "Uninstall" button.

      Actual results

      There is a clickable "Uninstall" button.

              rhn-engineering-rhughes Richard Hughes
              daniel.rusek Daniel Rusek
              Richard Hughes Richard Hughes
              Bohdan Milar Bohdan Milar
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: