Package: devscripts
Version: 2.10.21
Severity: important

dpkg >= 1.14.17 generates *.changes files with Format: 1.8. They provide
new Checksums-*: fields which are similar to the Files: field. And debsign
edits in place the Files: field of changes file and leaves the Checksums-*
fields alone.

This leads to bad things like:
Checksums-Sha1: 
 6d9d7203d65b684bf5474ec8498a59608e2b8e74 781 logidee-tools_1.2.10.dsc
[...]
Checksums-Sha256: 
 d51db2e51d5f5b6fdc8f9ff07a2028d8cfb1f4505ee20f9ed6000be2de6a9234 781 
logidee-tools_1.2.10.dsc
[...]
Files: 
 9d350c71dc682afac7a3ad2cb5b1c28a 1053 text optional logidee-tools_1.2.10.dsc
[...]

Notice the size difference. And of course the checksums are wrong in the 
Checksums-* fields.

debsign shouldn't edit in place a *.changes file if it doesn't know its
format.

-- Package-specific info:

--- /etc/devscripts.conf ---

--- ~/.devscripts ---
DEBRELEASE_UPLOADER=dput
DEBCHANGE_RELEASE_HEURISTIC=changelog
DEBCHANGE_MULTIMAINT_MERGE=yes
DEBCHANGE_PRESERVE=yes
DEBUILD_LINTIAN_OPTS="--color always -I"

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 
'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/1 CPU core)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages devscripts depends on:
ii  debianutils                   2.28.4     Miscellaneous utilities specific t
ii  dpkg-dev                      1.14.18    package building tools for Debian
ii  libc6                         2.7-10     GNU C Library: Shared libraries
ii  perl                          5.8.8-12   Larry Wall's Practical Extraction 
ii  sed                           4.1.5-6    The GNU sed stream editor

Versions of packages devscripts recommends:
ii  fakeroot                      1.9.4      Gives a fake root environment

-- no debconf information




-- 
To unsubscribe, send mail to [EMAIL PROTECTED]

Reply via email to