Bug#1125317: apt: 'show -a' command shows the same outdated Description for all package versions

David Kalnischkies <[email protected]> Mon, 23 Mar 2026 13:17:54 +0100
Newsgroups gmane.linux.debian.apt.devel
Message-ID <acEn9GI_AqoUcCTm__39144.9547767238$1774268874$gmane$org@gosurf.lan>
Am Sun, Mar 22, 2026 at 02:59:46PM +0100, schrieb Michael Prokop:
> I also stumbled upon this, with apt v3.0.3 on trixie, because a
> transitional package wasn't displayed as such, given the wrong
> package description showed up.

This is probably the result of
https://salsa.debian.org/apt-team/apt/-/commit/b24d6a1f3aff12f32f6a7024aac6961089f99719

As the descriptions will have the same (empty) md5 value they
are considered the same and will hence be shared across all
versions 'with the same description' (as identified by md5).


Requiring all repositories to generate their Packages files
with a Description-md5 seems kinda silly – even apt-ftparchive
does not do it. It does if you tell it to generate a Translation-en
file as its main point is linking translations together and
many (bigger) repositories split out the long descriptions
in this way, but for the smaller ones it seems overkill.


I suppose we could simply go with handling empty md5 explicitly
by not merging descriptions in that case. It's a bit wasteful I
guess, but so be it.

The alternative would be to generate some value (it doesn't
need to be MD5) and leave the rest of the code unchanged.
I think part of the motivation to remove this was also that
it "wasted" cache generation runtime for little practical gain.


Best regards

David Kalnischkies
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=IRHw
-----END PGP SIGNATURE-----