Hello, On Thu, Oct 19, 2017 at 03:13:15PM +0200, Salvatore Bonaccorso wrote: > Hi Ansgar, > > On Thu, Oct 05, 2017 at 09:01:59PM +0200, Ansgar Burchardt wrote: > > Hi, > > > > > source-only uploads sometimes include a _amd64.buildinfo (or other > > > architecture). This sometimes causes problems as the amd64 buildd > > > upload will include a file using the same name. > > > > This broke two uploads to the security archive again. That's not great, > > so this bug really should be fixed in stable too (or we could disallow > > source-only uploads, or source-only uploads including a .buildinfo for > > stable). > > and unfortunately another one (libvirt). Should we maybe disalow > source-only uploads including a buildinfo file for now? Completely > disalowing source-only uploads would be a major drawback IMHO.
Any news regarding this proposal from Ansgar? We were biten now several times already by this (e.g. php update, curl via security.d.o). Regards, Salvatore
