Bug 602618

Summary:	glsa-201612-40.xml contains incomplete atom squashfs-tools and prevents all GLSAs to be applied in "emerge @security"
Product:	Gentoo Security	Reporter:	Jan-Matthias Braun <jan_braun>
Component:	GLSA Errors	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	major
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Jan-Matthias Braun 2016-12-14 10:07:50 UTC

Typically, the glsas contain a full package atom, but glsa-201612-40.xml does not.
<package name="squashfs-tools" auto="yes" arch="*">

Please change to sys-fs/squashfs-tools
<package name="sys-fs/squashfs-tools" auto="yes" arch="*">


Now, emerge -v @security fails with two exceptions
portage.exception.InvalidAtom: squashfs-tools
portage.glsa.GlsaFormatException: invalid package name: squashfs-tools

This breaks the complete @security mechanism, even when squashfs-tools is not installed. Probably, it would be best to only ignore wrong definitions bit still process valid GLSAs?

Cheers,

Jan

Reproducible: Always

Comment 1 Aaron Bauman (RETIRED) gentoo-dev

2016-12-14 10:22:32 UTC

Fixed.

Comment 2 Jan-Matthias Braun 2016-12-14 11:27:53 UTC

(In reply to Aaron Bauman from comment #1)
> Fixed.

Great! Thanks & keep up the good work!

Jan