Your message dated Wed, 29 Jul 2009 15:33:28 +0000
with message-id <[email protected]>
and subject line Bug#438679: fixed in devscripts 2.10.53
has caused the Debian Bug report #438679,
regarding "[dscverify]: please document use of an alias to aid new DD's between
keyring updates"
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
438679: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=438679
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: devscripts
Version: 2.10.7
Severity: important
dscverify relies on the keyring packaged in debian-keyring which has
not had an upload since 2005. dscverify therefore fails to verify new
DD's (like me) and wrongly verifies signatures of DD's who may have
resigned or otherwise had their key removed from the keyring.
Isn't there a way for devscripts to sync the real Debian keyring in
order to run dscverify, maybe with an '--update' option to refresh the
local copy?
As it stands, devscripts would be better off without dscverify because
the results of dscverify are simply untrustworthy.
--- System information. ---
Architecture: amd64
Kernel: Linux 2.6.21-2-amd64
Debian Release: lenny/sid
500 unstable www.linux.codehelp.co.uk
500 unstable www.emdebian.org
500 unstable ftp.uk.debian.org
--- Package information. ---
Depends (Version) | Installed
==========================-+-===========
dpkg-dev | 1.14.5
debianutils (>= 2.0) | 2.23.1
perl (>= 5.8) | 5.8.8-7
sed (>= 2.95) | 4.1.5-3
libc6 (>= 2.6-1) | 2.6.1-1
--
Neil Williams
=============
http://www.data-freedom.org/
http://www.nosoftwarepatents.com/
http://www.linux.codehelp.co.uk/
pgpV163wVj5Tt.pgp
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: devscripts
Source-Version: 2.10.53
We believe that the bug you reported is fixed in the latest version of
devscripts, which is due to be installed in the Debian FTP archive:
devscripts_2.10.53.dsc
to pool/main/d/devscripts/devscripts_2.10.53.dsc
devscripts_2.10.53.tar.gz
to pool/main/d/devscripts/devscripts_2.10.53.tar.gz
devscripts_2.10.53_amd64.deb
to pool/main/d/devscripts/devscripts_2.10.53_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Adam D. Barratt <[email protected]> (supplier of updated devscripts
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Wed, 29 Jul 2009 15:12:24 +0100
Source: devscripts
Binary: devscripts
Architecture: source amd64
Version: 2.10.53
Distribution: unstable
Urgency: low
Maintainer: Devscripts Devel Team <[email protected]>
Changed-By: Adam D. Barratt <[email protected]>
Description:
devscripts - scripts to make the life of a Debian Package maintainer easier
Closes: 438679 504008 511061 515346 519678 525670 528592 534585 535252 535337
535977 536037 537302 538288
Changes:
devscripts (2.10.53) unstable; urgency=low
.
The "Debconf fish!" upload
.
[ Adam D. Barratt ]
* bts:
+ Add a missing "use IO::File" to make "bts select file:foo" work.
Thanks, Raphaël Hertzog. (Closes: #538288)
+ Add the "affects" command to mark a bug as affecting packages other
than the package it was filed against.
* checkbashisms: Detect the use of "source" when the sourced filename
contains a tilde (Closes: #528592) or consists of a single character
(Closes: #535252). Thanks, Raphael Geissert and Ryan Niebur.
* debcommit: Add darcs support. Thanks to Joachim Breitner for the patch.
(Closes: #536037)
* nmudiff:
+ Fix specification of BCc to cont...@bugs so that it's interpreted
as an option to mutt and not as a recipient address. Thanks, Filippo
Giunchedi. (Closes: #534585)
+ Add a missing "feel" to the delayed/XX template. Thanks, Raphael
Geissert.
* rmadison:
+ Add patch from Ubuntu to make lookups against their database work again.
(The server moved from people.ubuntu.com to people.canonical.com)
(Closes: #537302)
+ When using curl, follow redirects by default. (Also from the Ubuntu
patch).
* debian/control: Replace descriptions of cvs-* with those from README,
because they're better.
.
[ Patrick Schoenfeld ]
* bts: Implement a --mutt parameter, which allows mails to be sent
using mutt.
* debchange: Implement a dist indication mechanism that parses
an 'Upload to $DIST' line and sets the distribution accordingly, when
the --release parameter is used. (Closes: #515346)
* debi:
+ Implement a --with-depends switch to install depencies of the
package together with the package
(Closes: #511061)
+ Implement a --tool switch to choose the tool for installing
dependencies
* dget: Make it clear in manpage and usage information, that dget is capable
of processing several URLs or packages (Closes: #535977)
* dscverify:
+ Implement a --verbose option to disable suppressing
of GPG output (Closes: #525670)
+ Add a notice to the manpage of dscverify that the debian-keyring package
has the potential to be out of date and how this can be worked around
(Closes: #438679)
+ Document standard keyring locations in the dscverify manpage
* licensecheck: Skip empty files instead of reporting that they don't
have a copyright (Closes: #535337)
* nmudiff: Use 'bts select' to test, weither a check already has a patch
tag set or not and only set it, if not (Closes: #519678)
* Add a script listing to devscripts.1 which is auto-generated from
debian/control (Closes: #504008)
Checksums-Sha1:
5e196610b07aa70fc9ccfdc27653e78da4ab0025 1363 devscripts_2.10.53.dsc
0fc23e697c1145af848fa014ab1ba1d18526ed9b 667344 devscripts_2.10.53.tar.gz
3c0beaa31c7f47d2aaa8bef678844634145b17dd 565790 devscripts_2.10.53_amd64.deb
Checksums-Sha256:
31259c9a4fce247a0a7d271be7fc31fafa8ebb34d89754869a9729511409d860 1363
devscripts_2.10.53.dsc
c9247d1c87ef1f90717bd09fbcf824650ad3cb906d5be4830c68c8d3a959a16f 667344
devscripts_2.10.53.tar.gz
252fa0c8f57b622674d6b6dcaffd9deea5e5ec6fd880f881031a9c240316d45c 565790
devscripts_2.10.53_amd64.deb
Files:
a531080ce644a989f1996cffbf84bedc 1363 devel optional devscripts_2.10.53.dsc
a9de21de4743831426449bf04985d2e9 667344 devel optional
devscripts_2.10.53.tar.gz
d6359a2692a34e0b2c259d211a2bff60 565790 devel optional
devscripts_2.10.53_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkpwWrgACgkQokcE1TReOoWFegCdEZIuuYZSzJwVgSvRMPJLEnuR
WxkAoIc0UMeDtSADo3sczOw16Oz4k8/V
=cA/c
-----END PGP SIGNATURE-----
--- End Message ---
