Bug#874778: pkg-perl-tools: Use of /var/lib/apt/lists internals

[gregor herrmann]

Control: severity -1 minor
Control: tag -1 + confirmed pending

On Sat, 09 Sep 2017 16:11:11 +0200, Julian Andres Klode wrote:

> your package appears to be relying on the internal layout of /var/lib/apt/lists
> and the location of that directory (which is configurable), as it matches the
> following regular expression (and a quick check did not rule out a false positive):
> 
>     /var/lib/apt/lists/.*(Packages|Sources)
> 
> For the matches found, you can have a quick look at:
> 
>     https://codesearch.debian.net/search?q=%2Fvar%2Flib%2Fapt%2Flists%2F.*%28Packages%7CSources%29+package%3Apkg-perl-tools

This is only in an example pbuilder hook script, hence lowering the
severity.

Nevertheless fixed in git; note that the old code is still there but
is only used if apt < 1.1 (i.e. in oldoldstable chroots).
 

Cheers,
gregor

-- 
 .''`.  https://info.comodo.priv.at/ - Debian Developer https://www.debian.org
 : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D  85FA BB3A 6801 8649 AA06
 `. `'  Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe
   `-   NP: Johnny Shines: Too Wet To Plow
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: Digital Signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-perl-maintainers/attachments/20170909/e1a18348/attachment.sig>