Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 602618 - glsa-201612-40.xml contains incomplete atom squashfs-tools and prevents all GLSAs to be applied in "emerge @security"
Summary: glsa-201612-40.xml contains incomplete atom squashfs-tools and prevents all G...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: GLSA Errors (show other bugs)
Hardware: All Linux
: Normal major (vote)
Assignee: Gentoo Security
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-12-14 10:07 UTC by Jan-Matthias Braun
Modified: 2016-12-14 11:27 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jan-Matthias Braun 2016-12-14 10:07:50 UTC 
Typically, the glsas contain a full package atom, but glsa-201612-40.xml does not.
<package name="squashfs-tools" auto="yes" arch="*">

Please change to sys-fs/squashfs-tools
<package name="sys-fs/squashfs-tools" auto="yes" arch="*">


Now, emerge -v @security fails with two exceptions
portage.exception.InvalidAtom: squashfs-tools
portage.glsa.GlsaFormatException: invalid package name: squashfs-tools

This breaks the complete @security mechanism, even when squashfs-tools is not installed. Probably, it would be best to only ignore wrong definitions bit still process valid GLSAs?

Cheers,

Jan

Reproducible: Always
Comment 1 Aaron Bauman (RETIRED) gentoo-dev 2016-12-14 10:22:32 UTC 
Fixed.
Comment 2 Jan-Matthias Braun 2016-12-14 11:27:53 UTC 
(In reply to Aaron Bauman from comment #1)
> Fixed.

Great! Thanks & keep up the good work!

Jan