Package: openssl
Version: 1.1.1c-1
Severity: normal
Dear Maintainer,
the perl script /usr/bin/c_rehash contains a line (#123)
FILE: foreach $fname (grep {/\.(pem)|(crt)|(cer)|(crl)$/} @flist) {
where I think the regex grouping is wrong.
Obviously it is intended to find only files with the listed suffixes.
But it also finds files with "crt" or "cer" just anywhere within the
filename. For example it would find the file "i_am_not_a_cert_file.pdf"
My suggestion for a propper regex would be
FILE: foreach $fname (grep {/\.(pem|crt|cer|crl)$/} @flist) {
Hope this will be fixed, because I changed it locally on my debian
stretch machine quite a while ago and stumbled over this again when
upgrading to buster (file /usr/bin/c_rehash got silently overwritten) .
Thanks, Andreas
-- System Information:
Debian Release: 10.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-5-amd64 (SMP w/1 CPU core)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8),
LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages openssl depends on:
ii libc6 2.28-10
ii libssl1.1 1.1.1c-1
openssl recommends no packages.
Versions of packages openssl suggests:
ii ca-certificates 20190110
-- no debconf information
Report will be sent to Debian Bug Tracking System <sub...@bugs.debian.org>
