On May 26, 2024 6:14:40 PM UTC, Bastian Blank <wa...@debian.org> wrote:
>On Sun, May 26, 2024 at 05:43:54PM +0000, Scott Kitterman wrote:
>> On May 26, 2024 5:35:27 PM UTC, Santiago Vila <sanv...@debian.org> wrote:
>> >https://people.debian.org/~sanvila/build-logs/trixie-time-bomb/
>> The clamav issue looks like a false positive. The distro-info data will get
>> updated between now and then.
>
>I see this failure:
>
>| Test that clam can trust an EXE based on an authenticode certificate check.
>
>This clearly sounds like an expiration date somewhere, esp as this looks
>like a shipped binary.
>
>So, you where talking about developers-reference. However I don't see
>how a probable update of distro-info would make this a false positive.
>In fact, it is an explicit time bomb.
I don't think that's wrong, but I think it's a distro-info bug if it's out of
date. I don't think that a package is inherently buggy for relying on it. I
don't think distro-info is currently buggy either. It will require a future
update, but that's not a current bug.
Scott K
