repository breakage

[seth vidal]

> https://devel.linux.duke.edu/bugzilla/show_bug.cgi?id=296
> 
> It seems that given that the presence of any third party repos that
> can block FC+FE security updates (and even FC updates can sometimes be
> blocked by FE packages that haven't been upgraded!), wouldn't a
> prudent approach be to allow at least the packages that aren't blocked
> be upgraded and hold back the other ones (as apt-get does)?
> 

We can't KNOW what the value of one package is over the other. We don't
have any severity information in the metadata. How can we rank which
package is a more important update?

-sv