Your message dated Sat, 08 Oct 2022 02:34:08 +0000
with message-id <[email protected]>
and subject line Bug#944926: fixed in cruft-ng 0.9.45
has caused the Debian Bug report #944926,
regarding cruft: Scripts access internal dpkg databases
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
944926: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=944926
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: cruft
Version: 0.9.38
Severity: important
User: [email protected]
Usertags: dpkg-db-access-blocker
Hi!
This package contains several scripts [S], which directly accesses the
dpkg internal database. Instead of using one of the public interfaces
provided by dpkg.
The file «explain/dpkg» access the file list files directly, and should
be switched to use either «dpkg-query --listfiles» instead, or the
dpkq-query db-fsys:Files virtual field with --show. If using the former
and to avoid a performance hit, the code should batch multiple packages
on each call, taking into account command-line length limits. Each
package will get a paragraph separated by a blank line (even if it is
not installed).
The files «explain/dpkg» and «explain/DIVERSIONS» access the
diversions database directly instead of using «dpkg-divert».
The file «explain/ALTERNATIVES» accesses the alternatives database
directly instead of using «update-alternatives».
This is a problem for several reasons, because even though the layout and
format of the dpkg database is administrator friendly, and it is expected
that those might need to mess with it, in case of emergency, this
“interface” does not extend to other programs besides the dpkg suite of
tools. The admindir can also be configured differently at dpkg build or
run-time. And finally, the contents and its format, will be changing in
the near future.
Thanks,
Guillem
--- End Message ---
--- Begin Message ---
Source: cruft-ng
Source-Version: 0.9.45
Done: Alexandre Detiste <[email protected]>
We believe that the bug you reported is fixed in the latest version of
cruft-ng, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Alexandre Detiste <[email protected]> (supplier of updated cruft-ng
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 08 Oct 2022 04:09:13 +0200
Source: cruft-ng
Architecture: source
Version: 0.9.45
Distribution: unstable
Urgency: medium
Maintainer: Alexandre Detiste <[email protected]>
Changed-By: Alexandre Detiste <[email protected]>
Closes: 944926 1021297
Changes:
cruft-ng (0.9.45) unstable; urgency=medium
.
* Rewrite most DPKG data acquisition using the
official static C library (Closes: #944926).
This also makes this tool much faster.
* Adding a new build dependency on "libdpkg-dev"
.
* Fix plocate invocation to also detect
extraneous files without '.' in their name.
Thank you Piotr Engelking (Closes: #1021297)
.
* Add missing "closedir()" that leaded to
file descriptor exhaustion.
* Remove extraneous *.pyc filters, now built
into the main engine
* Misc changes to various embedded rules for:
UsrMerge, (b)eid-archive, RabbitMQ, dpkg-cross,
udisks2, virtualbox, util-linux, systemd.
Checksums-Sha1:
68fbfc2dcaefb6cba8d155dfbdd89846f1a05378 1632 cruft-ng_0.9.45.dsc
1e7f5b92361c9b73a00886de536b0a85fcc2dcba 42796 cruft-ng_0.9.45.tar.xz
161b6eb91d7ad87b173f2f7a3a89d28ff7155461 6462 cruft-ng_0.9.45_source.buildinfo
Checksums-Sha256:
e97fe1f5f3bfac05ab9f30a395db6021065c974c5dc6021011cfd5a88fdbf905 1632
cruft-ng_0.9.45.dsc
9f41080e99004fc97234b7e54679b6ff19b6908d4f3bf18f489efe74fb2d5d90 42796
cruft-ng_0.9.45.tar.xz
3597207e2f24a0e160b0e2f6c580de88e71002c391ef7d6869983599dff9da95 6462
cruft-ng_0.9.45_source.buildinfo
Files:
e4a7d253a26ad25373c19dc698421c4e 1632 admin optional cruft-ng_0.9.45.dsc
18c04421ebfa9cafe719180132779367 42796 admin optional cruft-ng_0.9.45.tar.xz
2c194f2db89f13ae34615d06d6a5ffce 6462 admin optional
cruft-ng_0.9.45_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=NbEN
-----END PGP SIGNATURE-----
--- End Message ---