Your message dated Fri, 02 May 2008 14:32:08 +0000 with message-id <[EMAIL PROTECTED]> and subject line Bug#477220: fixed in dupload 2.6.4 has caused the Debian Bug report #477220, regarding Proposing NMU for feature enhancements to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [EMAIL PROTECTED] immediately.) -- 477220: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=477220 Debian Bug Tracking System Contact [EMAIL PROTECTED] with problems
--- Begin Message ---Package: dupload Version: 2.6.3.3 Severity: normal Tags: patch I've prepared a new upload for dupload with some fixes and support for the new checksums-* fields. Please comment whether you approve the upload. (May I also suggest that I add my names to Uploaders, given that would be my third consecutive upload of this package?) Gruesse, Frank Lichtenheld -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (900, 'unstable'), (900, 'testing'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.25-rc8-686 (SMP w/2 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages dupload depends on: ii perl 5.8.8-12 Larry Wall's Practical Extraction ii perl-modules [libnet-perl] 5.8.8-12 Core Perl modules Versions of packages dupload recommends: ii openssh-client 1:4.7p1-8 secure shell client, an rlogin/rsh ii ssh 1:4.7p1-8 secure shell client and server (me -- no debconf informationdiff -Nru dupload-2.6.3.3/debian/changelog dupload-2.6.3.4/debian/changelog --- dupload-2.6.3.3/debian/changelog 2006-11-15 15:50:22.000000000 +0100 +++ dupload-2.6.3.4/debian/changelog 2008-04-21 22:37:23.000000000 +0200 @@ -1,3 +1,18 @@ +dupload (2.6.3.4) unstable; urgency=low + + * Update mentors.debian.net configuration. Patch by Charles Plessy. + (Closes: #226101) + * Add volatile configuration. (Closes: #420693) + * Add backports.org configuration. + * Abort upload if distribution is UNRELEASED. (Closes: #384703) + (also remove support for "frozen") + * Add support for parsing and testing new checksums-* fields. + dupload will not complain if the fields are absent. + (Closes: #473518) + * Check file sizes, too. (Closes: #360161) + + -- Frank Lichtenheld <[EMAIL PROTECTED]> Mon, 21 Apr 2008 22:35:34 +0200 + dupload (2.6.3.3) unstable; urgency=low * NMU (with maintainers consent) diff -Nru /tmp/EXP6Qtz2Vz/dupload-2.6.3.3/dupload /tmp/cfrM8LWfgf/dupload-2.6.3.4/dupload --- dupload-2.6.3.3/dupload 2006-11-11 23:14:14.000000000 +0100 +++ dupload-2.6.3.4/dupload 2008-04-21 22:31:26.000000000 +0200 @@ -298,18 +298,39 @@ # distribution code and the files # avoid duplicate mail addressees open(C, "<$cf") or fatal("Can't read $cf: $!\n"); + my ($field); while (<C>) { chomp; - /^changes:\s*/i and $fields{changes}++; - /^architecture:\s+/i and chomp($arch{$job} = $'), next; + /^changes:\s*/i and do { + $fields{changes}++; + $field = undef; + next; + }; + /^architecture:\s+/i and do { + chomp($arch{$job} = "$'"); + $field = undef; + next; + }; /^distribution:\s+/i and do { $_ = " $'"; /\Wstable/i and $mailto{$mailto}++; /\Wunstable/i and $mailto{$mailtx}++; - /\Wfrozen/i and $mailto{$mailtx}++; /\Wexperimental/i and $mailto{$mailtx}++; + /\WUNRELEASED/ and fatal "distribution: UNRELEASED"; + $field = undef; next; }; - /^files:\s*$/i and last; + /^(files|checksums-(?:sha1|sha256)):\s*$/i and do { + $field = lc $1; + push @{$fields{$field}}, $' if $'; + next; + }; + /^\s+/ and $field and do { + push @{$fields{$field}}, $' if $'; + next; + }; + /^[\w.-]+:/ and do { + $field = undef; + }; } foreach (keys %mailto) { my $k = $_; @@ -336,38 +357,69 @@ $extra{$job} = [EMAIL PROTECTED]; } - # read the files from the changes file - while (<C>) { + my %checksums; + foreach my $alg (qw(sha1 sha256)) { + foreach (@{$fields{"checksums-$alg"}}) { chomp; - /^ / and do { - my ($md5, $size, $sect, $pri, $file) = split; - $md5{$file} = $md5; + my ($chksum, $size, $file) = split; + $checksums{$file}{$alg} = $chksum; + if (exists $checksums{$file}{size} + and $checksums{$file}{size} != $size) { + fatal "differing sizes for file $file: $size != $checksums{$file}{size}"; } + $checksums{$file}{size} = $size; + } + } + foreach (@{$fields{files}}) { + chomp; + my ($chksum, $size, undef, undef, $file) = split; + $checksums{$file}{md5} = $chksum; + if (exists $checksums{$file}{size} + and $checksums{$file}{size} != $size) { + fatal "differing sizes for file $file: $size != $checksums{$file}{size}"; + } + $checksums{$file}{size} = $size; } close(C); - %md5 && $fields{changes} or p(": not a changes file ]\n"), next PACKAGE; + %checksums && $fields{changes} or p(": not a changes file ]\n"), next PACKAGE; # test the md5sums - foreach (keys %md5) { - my $file = $_; - p "\n $file"; - if (-r $file) { $_ = `md5sum $file`; $_ = (split)[0]; } - else { print ": $!"; $_ = ""; } - $md5{$file} eq $_ or do { - $keep or fatal("MD5sum mismatch for $file\n"); - w("MD5sum mismatch for $file", - ", skipping $job\n"); - push @skipped, $cf; - next PACKAGE; - }; - p ", md5sum ok"; - if (!$force && @done && grep(/^u \Q${file}\E/, @done)) { - p ", already done for $host"; - } else { - push @files, $file; - } - next; - }; + foreach my $file (keys %checksums) { + p "\n $file"; + if ($checksums{$file}{size} != -s $file) { + $keep or fatal("Size mismatch for $file\n"); + w("Size mismatch for $file, skipping $job\n"); + push @skipped, $cf; + next PACKAGE; + } + p ", size ok"; + + foreach my $alg (qw(md5 sha1 sha256)) { + next unless $checksums{$file}{$alg}; + + if (-r $file) { + $_ = `${alg}sum $file`; + $_ = (split)[0]; + } else { + print ": $!"; + $_ = ""; + } + + $checksums{$file}{$alg} eq $_ or do { + $keep or fatal(uc($alg)."sum mismatch for $file\n"); + w(uc($alg)."sum mismatch for $file, skipping $job\n"); + push @skipped, $cf; + next PACKAGE; + }; + p ", ${alg}sum ok"; + } + if (!$force && @done && grep(/^u \Q${file}\E/, @done)) { + p ", already done for $host"; + } else { + push @files, $file; + } + next; + } # The changes file itself p "\n $cf ok"; diff -Nru /tmp/EXP6Qtz2Vz/dupload-2.6.3.3/dupload.1pod /tmp/cfrM8LWfgf/dupload-2.6.3.4/dupload.1pod --- dupload-2.6.3.3/dupload.1pod 2002-10-11 20:53:02.000000000 +0200 +++ dupload-2.6.3.4/dupload.1pod 2008-04-21 22:27:58.000000000 +0200 @@ -20,7 +20,7 @@ E<quot>.changesE<quot>. Further processing is done chdir'ed into the directories of the changes files. -B<dupload> tests the MD5 sum for each file listed in the F<.changes> file, +B<dupload> tests the available checksums and size for each file listed in the F<.changes> file, and fails if it finds a mismatch. If all this goes well, B<dupload> checks if there is an F<.upload> file with the basename of the F<.changes> file. If the file to be uploaded is recorded to have already been uploaded to the @@ -97,7 +97,7 @@ =item B<-k> B<--keep> -Keep going, skipping packages whose MD5sums don't match. +Keep going, skipping packages whose checksums don't match. =item B<-c> B<--configfile> diff -Nru /tmp/EXP6Qtz2Vz/dupload-2.6.3.3/dupload.conf /tmp/cfrM8LWfgf/dupload-2.6.3.4/dupload.conf --- dupload-2.6.3.3/dupload.conf 2006-11-11 22:54:13.000000000 +0100 +++ dupload-2.6.3.4/dupload.conf 2008-04-21 21:48:19.000000000 +0200 @@ -78,6 +78,15 @@ dinstall_runs => 1, }; +# see http://www.debian.org/devel/debian-volatile/ for more information +$cfg{'volatile'} = { + fqdn => "volatile-master.debian.org", + incoming => "/pub/UploadQueue/", + # files pass on to dinstall on ftp-master which sends emails itself + dinstall_runs => 1, + passive => 1, +}; + # For Delayed uploads use this. You can use 0-day, which is uploaded # one hour before dinstall runs. $delay = (defined($ENV{DEBDELAY}) ? $ENV{DEBDELAY} : 7); @@ -90,22 +99,18 @@ }; # Mentors upload queue, see -# http://mentors.debian.net/signup.php +# http://mentors.debian.net/cgi-bin/maintainer-intro $cfg{'mentors'} = { fqdn =>'mentors.debian.net', - method =>'scpb', - login =>'incoming', - incoming=>'~', -# Change these to the user and domain part of your email address -# and uncomment them -# visibleuser=>'hugo', -# visiblename=>'mydomain.tld', - mailtx =>'[EMAIL PROTECTED]', - preupload=> { - deb=>'chmod 0644 %1', - changes=>'chmod 0644 %1', - file=>'chmod 0644 %1', - }, + incoming=>'/', + dinstall_runs => 1, + passive => 1, +}; + +# see http://www.backports.org/dokuwiki/doku.php?id=contribute for more information +$cfg{'bpo'} = { + fqdn => "www.backports.org", + incoming => "/", }; # NOTE: Do _NOT_ upload a package to the security upload queue
--- End Message ---
--- Begin Message ---Source: dupload Source-Version: 2.6.4 We believe that the bug you reported is fixed in the latest version of dupload, which is due to be installed in the Debian FTP archive: dupload_2.6.4.dsc to pool/main/d/dupload/dupload_2.6.4.dsc dupload_2.6.4.tar.gz to pool/main/d/dupload/dupload_2.6.4.tar.gz dupload_2.6.4_all.deb to pool/main/d/dupload/dupload_2.6.4_all.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Frank Lichtenheld <[EMAIL PROTECTED]> (supplier of updated dupload package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [EMAIL PROTECTED]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Fri, 02 May 2008 13:43:03 +0200 Source: dupload Binary: dupload Architecture: source all Version: 2.6.4 Distribution: unstable Urgency: low Maintainer: Frank Lichtenheld <[EMAIL PROTECTED]> Changed-By: Frank Lichtenheld <[EMAIL PROTECTED]> Description: dupload - utility to upload Debian packages Closes: 54344 56877 65630 98949 101882 222934 222938 225400 226101 226101 229744 249341 251286 279308 319910 321126 345078 356780 360161 384703 387678 395593 398135 420693 473518 477220 Changes: dupload (2.6.4) unstable; urgency=low . * Add myself to Uploaders with Josip's approval + acknowledge NMUs * Make a few clean-ups I refrained from in the NMUs: + Increase debhelper compat level to 5 + Add some missing dh_* calls (md5sums and installman) + Use dh_install and dh_link instead of install and ln + Bump Standards-Version to 3.7.3 (no changes) . dupload (2.6.3.4) unstable; urgency=low . * Non-maintainer upload (Closes: #477220) * Update mentors.debian.net configuration. Patch by Charles Plessy. (Closes: #226101) * Add volatile configuration. (Closes: #420693) * Add backports.org configuration. * Abort upload if distribution is UNRELEASED. (Closes: #384703) (also remove support for "frozen") * Add support for parsing and testing new checksums-* fields. dupload will not complain if the fields are absent. (Closes: #473518) * Check file sizes, too. (Closes: #360161) . dupload (2.6.3.3) unstable; urgency=low . * NMU (with maintainers consent) (Closes: #398135) * Recommend openssh-client instead of ssh, keep ssh as alternative for now. Reported by Aaron Schrab (Closes: #387678) * Setting $default_host from a local dupload.conf is now possible again. Reported by martin f krafft (Closes: #249341) * Add empty binary-arch target in debian/rules. Reported by Aurelien Jarno (Closes: #395593) * Treat DEBDELAY=0 correctly. Patch by Matej Vela (Closes: #356780) * Fix headers of man pages. Reported by Denis Barbier (Closes: #222934) * Update location of security upload queues. Reported by adrian (Closes: #345078) * Fix move of files to the queuedir. Patch by Bob Proulx (Closes: #279308) * Remove build-stamp in debian/rules' clean target . dupload (2.6.3.2) unstable; urgency=low . * NMU during BSP. * Try to differentiate between different gpg --verify error reasons to allow uploads from hosts where the public key is not available. (Closes: #321126) . dupload (2.6.3.1) unstable; urgency=low . * NMU to remove obsolete queues, based on http://www.debian.org/doc/developers-reference/ch-pkgs.en.html and http://lists.debian.org/debian-devel/2004/debian-devel-200401/msg01950.html> also cleaned up the bug list. * Removed non-functioning upload queues: anonymous-non-us, non-us, chiark, erlangen, uk, jp, and samosa. (Closes: #222938, #229744) * Added notes extracted from the Developer's reference regarding uploads to security and commented out these entries to prevent developers from uploading there unintentionally. (Closes: #251286) * Added a default configuration for uploading to mentors.debian.net (Closes: #226101) * Changed default (commented) upload queue to be anonymous-ftp-master * Use Goswin's patch to add an 'options' field in the configuration file which can be used to setup --progress and -L in rsync calls, or additional options to SSH if needed (Closes: #98949, #319910, #225400) * Check the .changes signature using gpg or pgp (if available) in order to prevent unsigned uploads. This is active by default for GPG but can be disabled in dupload.conf at will. Also, added two new simple scripts gpg-check and pgp-check to provide a wrapper to the check so that the error message in case of a failure is more user-friendly. I've implemented this as hooks rather than as new code in dupload to allow users to customise as needed. Note: DSC files are not checked since that should be done in a separate hook (and there is none for those files). (Closes: #54344, #56877, #65630, #101882) * Related to the above add references to the preupload/postupload hooks in the dupload.conf file. Checksums-Sha1: 6330ce84c99a3e8bfca994743dfc93e514f3b9e2 775 dupload_2.6.4.dsc e3c7bfc39ad5b2f3ca187efd6cf9a92df35d3dc4 23738 dupload_2.6.4.tar.gz 33541d515c2d1380c9eeb4753dd2768e538e8423 30728 dupload_2.6.4_all.deb Checksums-Sha256: db4548b8b0e019ea9152a3c5ddea367845b21ecabe81387c1d87613d59a73572 775 dupload_2.6.4.dsc f6a0e8885d2175f47051d3e750c24f11fdc6e6269d191a10111a895c30be9a79 23738 dupload_2.6.4.tar.gz 85c5807b763f646dcc81aec80a0a3e934b120b698daf854dcaab9c74c4d0e2ca 30728 dupload_2.6.4_all.deb Files: 08eb237b551497e5408d26bdb5c2011f 775 devel optional dupload_2.6.4.dsc a1e39af16a50d77e57712814a26f7083 23738 devel optional dupload_2.6.4.tar.gz 7b64d850ac764f1f2bed94bde950d67c 30728 devel optional dupload_2.6.4_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFIGxNnQbn06FtxPfARAle5AKDUo1N+B4LOePMTySQOCz6V+j+kpACfbstN DjPaoUjjiFU2l/KbJAgR14Y= =rsV0 -----END PGP SIGNATURE-----
--- End Message ---
