Odd bug with pinning repository

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am using apt-0.5.15cnc7 on a Fedora Core 3 box.

I have an internal repository that contains rebuilt distro packages where the 
standard package doesn't work for us (needs different compile options, etc.)  I 
have it pinned like this:

  Package: *
  Pin: release o=apt-internal, c=os-devel
  Pin-Priority: 1001

But when I do this, apt keeps wanting to downgrade packages that are already at 
the correct version:

  The following packages will be DOWNGRADED
     cpan2rpm (2.027-4 => 2.027-1)
     perl-Attribute-Handlers (0.78_01-0 => 0.78_01-0)
     perl-CPAN (1.76_01-0 => 1.76_01-0)
     perl-Class-ISA (0.32-0 => 0.32-0)
     perl-Devel-DProf (20030813.00-0 => 20030813.00-0)
     perl-Digest-MD5 (2.33-0 => 2.33-0)
     perl-File-Temp (0.14-0 => 0.14-0)
     perl-Getopt-Long (2.34-0 => 2.34-0)
     perl-IO (1.21-0 => 1.21-0)
     perl-IO-Zlib (1.04-1 => 1.04-1)
     perl-IPC-SysV (1.04-0 => 1.04-0)
     perl-Image-Size (2.992-1 => 2.992-1)
     perl-Math-Round (0.05-1 => 0.05-1)
     perl-Memoize (1.01-0 => 1.01-0)
     perl-NEXT (0.60-0 => 0.60-0)
     perl-Net-Ping (2.31-0 => 2.31-0)
     perl-Opcode (1.05-0 => 1.05-0)
     perl-PerlIO-via-QuotedPrint (0.06-0 => 0.06-0)
     perl-PodParser (1.14-0 => 1.14-0)
     perl-Switch (2.10-0 => 2.10-0)
     perl-Term-ANSIColor (1.08-0 => 1.08-0)
     perl-Test-Differences (0.47-1 => 0.47-1)
     perl-Text-Balanced (1.95-0 => 1.95-0)
     perl-Text-Diff (0.35-1 => 0.35-1)
     perl-Text-Soundex (1.01-0 => 1.01-0)
     perl-Tie-IxHash (1.21-1 => 1.21-1)
     perl-Unicode-UCD (0.22-0 => 0.22-0)
     perl-XML-Writer (0.520-1 => 0.520-1)
     perl-bignum (0.15-0 => 0.15-0)
     perl-if (0.03-0 => 0.03-0)

The upgrade fails because the desired versions of these packages are already 
installed:

  Preparing...                ########################################### [100%]
        package perl-Getopt-Long-2.34-0 is already installed
        package perl-Text-Diff-0.35-1 is already installed
        package perl-Text-Balanced-1.95-0 is already installed
        package perl-IO-1.21-0 is already installed
        package perl-Attribute-Handlers-0.78_01-0 is already installed
        package perl-CPAN-1.76_01-0 is already installed
        package perl-Class-ISA-0.32-0 is already installed
        package perl-Devel-DProf-20030813.00-0 is already installed
        package perl-Digest-MD5-2.33-0 is already installed
        package perl-File-Temp-0.14-0 is already installed
        package perl-IO-Zlib-1.04-1 is already installed
        package perl-IPC-SysV-1.04-0 is already installed
        package perl-Image-Size-2.992-1 is already installed
        package perl-Math-Round-0.05-1 is already installed
        package perl-Memoize-1.01-0 is already installed
        package perl-NEXT-0.60-0 is already installed
        package perl-Net-Ping-2.31-0 is already installed
        package perl-Opcode-1.05-0 is already installed
        package perl-PerlIO-via-QuotedPrint-0.06-0 is already installed
        package perl-PodParser-1.14-0 is already installed
        package perl-Switch-2.10-0 is already installed
        package perl-Term-ANSIColor-1.08-0 is already installed
        package perl-Test-Differences-0.47-1 is already installed
        package perl-Text-Soundex-1.01-0 is already installed
        package perl-Tie-IxHash-1.21-1 is already installed
        package perl-Unicode-UCD-0.22-0 is already installed
        package perl-XML-Writer-0.520-1 is already installed
        package perl-bignum-0.15-0 is already installed
        package perl-if-0.03-0 is already installed

I've tried debugging this myself, but I can't for the life of me figure out the 
code that handles package versions.  I'd greatly appreciate a fix for this.

- -- 
Stephen Clouse <[email protected]>
Senior Programmer/DBE, Core Technology Developer
The IQ Group, Inc. <http://www.theiqgroup.com/>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFCVblEy3uolkRT3A0RAjtjAJ4lZocy3kMfr7eq+eVA+smEa9j5/gCfZxwc
5HzrZOOXYtKlP2rCr/YHkr0=
=dyz4
-----END PGP SIGNATURE-----