Your message dated Wed, 17 Dec 2008 21:02:55 +0000
with message-id <e1ld3xj-0006f1...@ries.debian.org>
and subject line Bug#311843: fixed in dpkg 1.13.26
has caused the Debian Bug report #311843,
regarding debsig-verify: Completely breaks installation of standard sarge 
packages
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
311843: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=311843
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: debsig-verify
Version: 0.7
Severity: critical
Justification: breaks the whole system

After I have installed this package, dpkg refuses to install any other
package from standard Debian sources:

Get:1 http://ftp.de.debian.org sarge/main libgnutls11 1.0.16-13.1 [301kB]
Get:2 http://ftp.de.debian.org sarge/main debian-keyring 2005.05.28 [11,5MB]
Get:3 http://ftp.de.debian.org sarge/main grep-dctrl 2.1.11 [41,3kB]            
                   
Fetched 11,9MB in 2m30s (78,8kB/s)                                              
                   
Reading changelogs... Done
apt-listchanges: Do you want to continue? [Y/n]? 
Authenticating /var/cache/apt/archives/libgnutls11_1.0.16-13.1_i386.deb ...
debsig: Origin Signature check failed. This deb might not be signed.

dpkg: error processing /var/cache/apt/archives/libgnutls11_1.0.16-13.1_i386.deb 
(--unpack):
 Verification on package 
/var/cache/apt/archives/libgnutls11_1.0.16-13.1_i386.deb failed!
Authenticating /var/cache/apt/archives/debian-keyring_2005.05.28_all.deb ...
debsig: Origin Signature check failed. This deb might not be signed.

dpkg: error processing 
/var/cache/apt/archives/debian-keyring_2005.05.28_all.deb (--unpack):
 Verification on package 
/var/cache/apt/archives/debian-keyring_2005.05.28_all.deb failed!
Authenticating /var/cache/apt/archives/grep-dctrl_2.1.11_i386.deb ...
debsig: Origin Signature check failed. This deb might not be signed.

dpkg: error processing /var/cache/apt/archives/grep-dctrl_2.1.11_i386.deb 
(--unpack):
 Verification on package /var/cache/apt/archives/grep-dctrl_2.1.11_i386.deb 
failed!
Errors were encountered while processing:
 /var/cache/apt/archives/libgnutls11_1.0.16-13.1_i386.deb
 /var/cache/apt/archives/debian-keyring_2005.05.28_all.deb
 /var/cache/apt/archives/grep-dctrl_2.1.11_i386.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)

This happened both on a newly installed machine and on an other one
that was previously upgraded from woody.

I currently have no time to investigate this, but probably all that is
needed is a default policy in the (now empty) directory
/etc/debsig/policies/ that allows unsigned packages from Debian.

Regards, Frank

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.4.28
Locale: lang=de...@euro, lc_ctype=de...@euro (charmap=ISO-8859-15)

Versions of packages debsig-verify depends on:
ii  gnupg                       1.4.1-1      GNU privacy guard - a free PGP rep
ii  libc6                       2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  libxmltok1                  1.2-2        XML Parser Toolkit, runtime librar

-- no debconf information


--- End Message ---
--- Begin Message ---
Source: dpkg
Source-Version: 1.13.26

We believe that the bug you reported is fixed in the latest version of
dpkg, which is due to be installed in the Debian FTP archive:

dpkg-dev_1.13.26_all.deb
  to pool/main/d/dpkg/dpkg-dev_1.13.26_all.deb
dpkg_1.13.26.dsc
  to pool/main/d/dpkg/dpkg_1.13.26.dsc
dpkg_1.13.26.tar.gz
  to pool/main/d/dpkg/dpkg_1.13.26.tar.gz
dpkg_1.13.26_i386.deb
  to pool/main/d/dpkg/dpkg_1.13.26_i386.deb
dselect_1.13.26_i386.deb
  to pool/main/d/dpkg/dselect_1.13.26_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 311...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Guillem Jover <guil...@debian.org> (supplier of updated dpkg package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon, 01 Dec 2008 21:42:20 +0200
Source: dpkg
Binary: dpkg dselect dpkg-dev
Architecture: source i386 all
Version: 1.13.26
Distribution: stable
Urgency: low
Maintainer: Dpkg Developers <t...@dpkg.org>
Changed-By: Guillem Jover <guil...@debian.org>
Description: 
 dpkg       - package maintenance system for Debian
 dpkg-dev   - package building tools for Debian
 dselect    - user tool to manage Debian packages
Closes: 311843 377682
Changes: 
 dpkg (1.13.26) stable; urgency=low
 .
   [ Guillem Jover ]
   * Do not consider it a file conflict if the package contains a symlink
     to a directory where the existing symlink on-disk points to the
     same place. Closes: #377682
     Thanks to Ian Jackson.
   * Reintroduce 'no-debsig' back in dpkg.cfg to avoid failing to install any
     package when debsig-verify is installed. Closes: #311843
 .
   [ Updated dpkg translations ]
   * Romanian (Eddy Petrișor).
Files: 
 f84044bf9bb9cfffe852a0fdd1644aab 861 admin required dpkg_1.13.26.dsc
 8512ff9003cedfbffd7ae5d4b5ae54b4 3348999 admin required dpkg_1.13.26.tar.gz
 b46326cd6803690f1866eaaf4dc9abc1 2033986 admin required dpkg_1.13.26_i386.deb
 48c1d4bf3da8c1e510a53d9f584dd6d1 527658 admin required dselect_1.13.26_i386.deb
 29e211c64b5b2dbaaa157ac81c32acca 165062 utils standard dpkg-dev_1.13.26_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkk0VSYACgkQuW9ciZ2SjJs/8QCfVsxnsAjlgY9fhvecZBGZ9iLM
D8MAn2ROtxrGks08dy1JSxNLYgUNhVqy
=8p0Q
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to