For every attempt to upgrade TDE to the latest release, full upgrade is blocked, unless package rootcerts is first upgraded, a blocker to trinity-tdelibs. This is an ancient problem that caused me to write a urpmipre script 3 years ago to upgrade rootcerts (and a few other packages) before any process to upgrade TDE.