The GLSA contains empty slot which is not part of specification. See the same error bug in https://bugs.gentoo.org/show_bug.cgi?id=625212 Paludis gives following error when trying to update security affected packages: Error: * In program cave resolve --lazy security: * When adding targets from commandline: * When adding set target 'security': * When building security or insecurity package set: * When parsing security advisory '/var/paludis/repositories/portage/metadata/glsa/glsa-201708-08.xml': * When handling GLSA '201708-08' from '/var/paludis/repositories/portage/metadata/glsa/glsa-201708-08.xml': * When parsing elike package dep spec 'app-arch/bzip2:': * When parsing generic package dep spec 'app-arch/bzip2:': * Empty slot dependency specified (paludis::PackageDepSpecError) Reproducible: Always
https://gitweb.gentoo.org/data/glsa.git/commit/?id=f94153464311aedbfb3eb91ec00818784ba09171
Confirm. Thanks.