Bug#822849: qemubuilder: fix --update by checking for the correct asprintf() return value

[James Clarke]

Control: severity -1 important

On Fri, May 13, 2016 at 03:25:44PM +0200, Michael Prokop wrote:
> * Peter Pentchev [Thu Apr 28, 2016 at 01:28:54PM +0300]:
> > Package: qemubuilder
> > Version: 0.79
> > Severity: grave
> > Tags: patch
>
> What's the rational for marking this as grave?
>
> (Asking because packages like jenkins-debian-glue are marked for
> autoremoval because of their dependency on qemubuilder [related]
> packages and this bug report doesn't look like it would satisfy
> severity grave to me)

Indeed, this should not be grave:

> grave
>     makes the package in question unusable or mostly so, or causes
>     data loss, or introduces a security hole allowing access to the
>     accounts of users who use the package.
>
> serious
>     is a severe violation of Debian policy (roughly, it violates a
>     must or required directive), or, in the package maintainer's or
>     release manager's opinion, makes the package unsuitable for
>     release.
>
> important
>     a bug which has a major effect on the usability of a package,
>     without rendering it completely unusable to everyone.

I class this as important. It does not make the package "completely
unusable to everyone", as it only affects updating. There is a very
simple workaround: re-create the image.

Regards,
James
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pbuilder-maint/attachments/20160513/cd63b73b/attachment.sig>