Also affects packages compressed with bz2, like Ubuntu 12.04's kernel
package.
The obvious new version of the patch seems to work:
--- dpkg-sig-0.13.1/dpkg-sig.old 2014-07-25 15:16:40.114016000 -0700
+++ dpkg-sig-0.13.1/dpkg-sig 2014-07-25 15:17:31.037320000 -0700
@@ -634,7 +634,7 @@
}
return "FORCE_BAD" unless ($seen_files{"control.tar.gz"} &&
- $seen_files{"data.tar.gz"} &&
+ ($seen_files{"data.tar.gz"} ||
$seen_files{"data.tar.bz2"} || $seen_files{"data.tar.xz"}) &&
$seen_files{"debian-binary"});
return "GOOD"
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1342938
Title:
dpkg-sig --verify fails on packages compressed with xz
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dpkg-sig/+bug/1342938/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs