Description of problem:

Running the 'appstream-builder' binary, part of the appstream-util package, creates several directories under the current directory. One of them, ./tmp/ will destroy an existing 'tmp' directory if you have it, with whatever contents it has.

This does not happen for the other directories (cache, logs) that this tool creates, but if you have something valueable under ~/tmp/ and run appstream-builder from ~, that will be gone, without any warning.

Not that I keep anything valuable in such a directory, but a running GNU Screen, for instance, does.

I'll set severity as 'Critical' since it can lead to data loss, even if not commonly, and not for many users.



Version-Release number of selected component (if applicable):

appstram-util-0.2.5-3.mga5
(appstream-builder does not provide a --version option)


How reproducible:

Every time I run the 'appstream-build' binary.


Steps to Reproduce:
1. Open a terminal, and to be safe, create a new directory and enter it.
2. Create a 'tmp' directory here, and create files or folders inside it.
3. Go back to the directory you originally created, an run 'appstream-builder'.
4. Check the contents of ./tmp/ and see that there's only a 'icons' directory.