Package: devscripts Version: 2.18.6 Severity: normal File: /usr/bin/dd-list
dd-list looks at the apt lists directory with a glob: $source_files = [glob('/var/lib/apt/lists/*_source_Sources')]; This will break when the user has enabled Acquire::GzipIndexes to store compressed index files since the filenames will be different. It will also break if the filenames of the Sources files ever change format. If apt ever introduces a compression format that isn't yet supported by dd-list then it would also break. A better alternative is to ask apt for all the Sources files and then ask apt to decompress them using these commands: apt-get indextargets --format '$(FILENAME)' 'Created-By: Sources' | xargs -d '\n' /usr/lib/apt/apt-helper cat-file This would also allow dd-list to automatically work with chdist and apt-venv, which set the APT_CONFIG environment variable to a specific directory that contains a different sources.list and different apt config that is independent of the system apt sources and config. -- Package-specific info: --- /etc/devscripts.conf --- --- ~/.devscripts --- -- System Information: Debian Release: buster/sid APT prefers testing-debug APT policy: (900, 'testing-debug'), (900, 'testing'), (800, 'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.18.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8), LANGUAGE=en_AU.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages devscripts depends on: ii dpkg-dev 1.19.2 ii libc6 2.27-6 ii libfile-homedir-perl 1.004-1 ii perl 5.26.2-7+b1 ii python3 3.6.6-1 ii sensible-utils 0.0.12 Versions of packages devscripts recommends: ii apt 1.7.0 ii at 3.1.23-1 ii curl 7.61.0-1 ii dctrl-tools 2.24-3 ii debian-keyring 2018.09.30 ii dput 1.0.2 ii dupload 2.9.2 ii equivs 2.1.0 ii fakeroot 1.23-1 ii file 1:5.34-2 ii gnupg 2.2.10-3 ii gnupg2 2.2.10-3 ii libdistro-info-perl 0.20 ii libdpkg-perl 1.19.2 ii libencode-locale-perl 1.05-1 ii libfile-which-perl 1.22-1 pn libgit-wrapper-perl <none> ii libipc-run-perl 20180523.0-1 pn liblist-compare-perl <none> ii liblwp-protocol-https-perl 6.07-2 ii libmoo-perl 2.003004-1 ii libsoap-lite-perl 1.27-1 ii libstring-shellquote-perl 1.04-1 ii libtry-tiny-perl 0.30-1 ii liburi-perl 1.74-1 ii libwww-perl 6.35-2 ii licensecheck 3.0.31-2 ii lintian 2.5.109 ii man-db 2.8.4-2+b1 ii patch 2.7.6-3 ii patchutils 0.3.4-2 ii pseudo [fakeroot] 1.8.1+git20161012-2 ii python3-apt 1.7.0 ii python3-debian 0.1.33 ii python3-magic 2:0.4.15-2 ii python3-requests 2.18.4-2 pn python3-unidiff <none> ii python3-xdg 0.25-4 ii strace 4.21-1 ii unzip 6.0-21 ii wdiff 1.2.2-2+b1 ii wget 1.19.5-1 ii xz-utils 5.2.2-1.3 Versions of packages devscripts suggests: ii adequate 0.15.1 ii autopkgtest 5.6 ii bls-standalone 0.20151231 ii bsd-mailx [mailx] 8.1.2-0.20180807cvs-1 ii build-essential 12.5 ii check-all-the-things 2017.05.20 pn cvs-buildpackage <none> pn devscripts-el <none> ii diffoscope 103 ii disorderfs 0.5.4-2 ii dose-extra 5.0.1-11+b1 ii duck 0.13 ii faketime 0.9.7-3 pn gnuplot <none> ii gpgv 2.2.10-3 ii how-can-i-help 16 ii libauthen-sasl-perl 2.1600-1 pn libdbd-pg-perl <none> ii libfile-desktopentry-perl 0.22-1 pn libnet-smtps-perl <none> ii libterm-size-perl 0.209-1 ii libtimedate-perl 2.3000-2 ii libyaml-syck-perl 1.30-1 ii mozilla-devscripts 0.53 ii mutt 1.10.1-2 ii openssh-client [ssh-client] 1:7.8p1-1 ii piuparts 0.92 ii postgresql-client 10+193 ii postgresql-client-10 [postgresql-client] 10.5-1 ii quilt 0.65-2 pn ratt <none> ii reprotest 0.7.8 ii svn-buildpackage 0.8.7 ii w3m 0.5.3-36+b1 -- no debconf information -- bye, pabs https://wiki.debian.org/PaulWise
signature.asc
Description: This is a digitally signed message part