Re: Raphaël Hertzog
> Good signature on
> /home/rhertzog/freexian/projets/kali/pkg/build-area/openvas-manager_4.0.0-0kali1.dsc.
> Package includes an .orig.tar.gz file although the debian revision suggests
> that it might not be required. Multiple uploads of the .orig.tar.gz may be
> rejected by the upload queue management software.
>
> It says so as soon as the Debian revision is not "-1". But it should
> probably skip this warning for packages with a revision starting with
> "-0" (or at least for any "-0.+1").
There is an additional problem here, the check for "-1" ignores that
the upstream version number can contain - dashes as well:
$ dput ../libpg-query_15-4.2.0-1_source.changes
Package includes an .orig.tar.gz file although the debian revision suggests
that it might not be required. Multiple uploads of the .orig.tar.gz may be
rejected by the upload queue management software.
The problem is in /usr/share/dput/dput/dput.py:
version_regex = re.compile(
"^"
"((?P<epoch>.+):)?"
"(?P<upstream_version>[^:-]+)" <-- there
# Versions with a hyphen imply a Debian release of a non-native package.
"(-(?P<debian_version>.+))?"
"$")
On a sidenote, the comment "Multiple uploads may be rejected" is
wrong. Rejects will only happen if the checksums do not match. (And in
that case, the reject will even happen if the file is not uploaded,
with the wrong checksum just being mentioned in the .dsc file.)
Christoph
