Bug#840094: blends-dev: Does not recognize multiline dependencies

[Ole Streicher <olebole@debian.org>]

Package: blends-dev
Version: 0.6.94
Severity: serious

When a "Depends:" field in a task file contains more than one line, only
the first line is used to create the dependency in debian/control. All
others are silently ignored.

I observed this on the "debian-astro" package which uses blends-dev.

Since this is quite dangerous (it is not recognized unless one really
checks the generated d/control file) and generates incorrect blends
packages, I make it severity "serious".

Short code inspection shows that there seem to be *two* places where the
list is parsed (in blend-gen-control): once on gen_control (aroound line
250), and then in load_task (around line 570). In the first appearance,
only the first line is used, while in the second one the full list is
there. Unfortunately, my perl is not enough to fix this...

Best regards

Ole