debian package update fails - wrong package name

[twarnick]

Hi,

there is an advisory for perl on debian bookworm DSA-5902-1.

First:
The suggested script can't work correctly, because the line with the package names, must be a list and then iterated.

Second:
the second package name perl-modules-5.28=5.36.0-7+deb12u2 can't be found and does not exist on the debian repo.
It should be: perl-modules-5.36 ??

@atomic111 - thank for the github invitation :)

Regards,
Thomas

[chris-rock]

Thank you @twarnick for the feedback. I agree that we want to turn this into a list, this would also make it easier to understand.

I also see the issue with perl modules. This is caused by the fact that we detect perl-modules-5.28 by its origin. But the updated perl-base will replace the per-modules package, so we probably want to exclude the dependent package. This does not work in all cases since sometimes only partial packages are installed.