Re: [SECURITY] [DSA 1704-1] New xulrunner packages fix several vulnerabilities

[Celejar <celejar@gmail.com>]

On Fri, 16 Jan 2009 00:53:06 +0100
Cyril Brulebois <kibi@debian.org> wrote:

> Celejar <celejar@gmail.com> (15/01/2009):
> > Is there any automatic way to check whether a given system has any of
> > the binary packages built from a given source package installed?
> 
> (without any deb-src) It looks like the following does what you want:
> | grep-status -sPackage -F Package $source_package
> 
> Works for me with blender, xulrunner, graphviz as source package names.

Thanks, but I don't think this is correct.  On my system:

$ grep-status -sPackage -F Package xulrunner
Package: xulrunner-1.9
Package: xulrunner-gnome-support
Package: xulrunner-1.9-gnome-support
Package: liferea-xulrunner

These are just the packages whose names contain the string xulrunner,
regardless if they're installed (e.g., liferea-xulrunner isn't), and it
omits many of the packages that are built from the xulrunner source
package, even installed ones, whose names don't contain the string
(e.g., I tried installing spidermonkey-bin, and it didn't show up).

According to the man page, your command merely prints the package
fields of those packages whose package fields contains the string
$source_package, as above.  Have I missed something?

> Mraw,
> KiBi.

Celejar
--
mailmin.sourceforge.net - remote access via secure (OpenPGP) email
ssuds.sourceforge.net - A Simple Sudoku Solver and Generator