On Sat, 2026-05-09 at 00:52 +0900, Simon Richter wrote: > in > https://security.debian.org/pool/updates/main/p/python-cryptography/ > the > arch:all package for python-cryptography 38.0.4-3~deb12u1 is missing, > it's also not in the package index. The arch-specific packages and > source are present. > > Severity minor because it's a -doc package in oldstable-security, but > someone might still want to investigate how that happened. > > According to my logfiles, the file existed and was referenced in the > index when I downloaded it on 2024-06-08 20:32:20 UTC.
That's curious, because https://snapshot.debian.org/package/python-cryptography/38.0.4-3~deb12u1/ has no record of having seen it on 2023-03-10 when the arch-specific packages were indexed. It's also not present in the security archive snapshots either side of your timestamp, i.e. https://snapshot.debian.org/archive/debian-security/20240605T203035Z/ and https://snapshot.debian.org/archive/debian-security/20240609T121325Z/ As I mentioned in the discussion in #debian-devel, the queue report from the original upload in March 2023 has: binary:python-cryptography-doc ACCEPT REJECT implying that the package was never actually installed into the security archive. Regards, Adam
