Your message dated Thu, 20 Oct 2005 02:47:08 -0700
with message-id <[EMAIL PROTECTED]>
and subject line Bug#334656: fixed in apt 0.6.42
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 19 Oct 2005 04:53:25 +0000
>From [EMAIL PROTECTED] Tue Oct 18 21:53:25 2005
Return-path: <[EMAIL PROTECTED]>
Received: from kitenet.net [64.62.161.42] (postfix)
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1ES5x7-0005ys-00; Tue, 18 Oct 2005 21:53:25 -0700
Received: from dragon.kitenet.net (97-148-dial.xtn.net [66.118.97.148])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(Client CN "Joey Hess", Issuer "Joey Hess" (verified OK))
by kitenet.net (Postfix) with ESMTP id 4A878181F0
for <[EMAIL PROTECTED]>; Wed, 19 Oct 2005 04:53:23 +0000 (GMT)
Received: by dragon.kitenet.net (Postfix, from userid 1000)
id E097BBF0AA; Wed, 19 Oct 2005 00:53:38 -0400 (EDT)
Date: Wed, 19 Oct 2005 00:53:38 -0400
From: Joey Hess <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: refuses to install from Debian cds
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="jI8keyz6grp/JLjh"
Content-Disposition: inline
X-Reportbug-Version: 3.17
User-Agent: Mutt/1.5.11
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
--jI8keyz6grp/JLjh
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Package: apt
Version: 0.6.41
Severity: grave
Tags: d-i
All current etch netinst and full CDs fail to install now, since secure
apt has entered testing[1]. Apt complains that packages can't be
authenticated, since the CD does not include signed Release files.
Unless this is fixed very soon, the next d-i beta release will have to
not include such CDs, and limit itself to businesscard CDs and netboot
mini isos.
As I understand it, there is basically no way we can build official
Debian CDs that are signed with our archive signing key. There is also
currently no way to turn off the signature checking that doesn't disable
it for all apt sources, which wouldn't be an acceptible tradeoff.
The simplest fix would be to special case apt to not require CD sources
to be authenticated. This seems ok to me, since the user has already
*booted* the CD, at least when using it as install media.
Another approach might be to create a separate key that's used to sign
CD builds, but this has lots of problems. Current daily Debian CD builds
happen on a non-DSA controlled machine. If apt trusted the key that
would weaken its security for non-CD sources too.
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.4.27
Locale: LANG=3Den_US.UTF-8, LC_CTYPE=3Den_US.UTF-8 (charmap=3DUTF-8)
Versions of packages apt depends on:
ii libc6 2.3.5-6 GNU C Library: Shared librarie=
s an
ii libgcc1 1:4.0.2-2 GCC support library
ii libstdc++6 4.0.2-2 The GNU Standard C++ Library v3
apt recommends no packages.
-- no debconf information
--=20
see shy jo
[1] Kicking myself for not having filed this bug earlier; this problem
has been anticipated for months.
--jI8keyz6grp/JLjh
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFDVdFRd8HHehbQuO8RArU/AJ9gk8yonrqg0ovDHfQ/clta4AfVFwCg3P6Z
cz4S3lGYLsOvsVuoMDKPQtI=
=b9kz
-----END PGP SIGNATURE-----
--jI8keyz6grp/JLjh--
---------------------------------------
Received: (at 334656-close) by bugs.debian.org; 20 Oct 2005 09:54:37 +0000
>From [EMAIL PROTECTED] Thu Oct 20 02:54:37 2005
Return-path: <[EMAIL PROTECTED]>
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
id 1ESX0u-00033Z-00; Thu, 20 Oct 2005 02:47:08 -0700
From: Michael Vogt <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#334656: fixed in apt 0.6.42
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Thu, 20 Oct 2005 02:47:08 -0700
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
Source: apt
Source-Version: 0.6.42
We believe that the bug you reported is fixed in the latest version of
apt, which is due to be installed in the Debian FTP archive:
apt-doc_0.6.42_all.deb
to pool/main/a/apt/apt-doc_0.6.42_all.deb
apt-utils_0.6.42_i386.deb
to pool/main/a/apt/apt-utils_0.6.42_i386.deb
apt_0.6.42.dsc
to pool/main/a/apt/apt_0.6.42.dsc
apt_0.6.42.tar.gz
to pool/main/a/apt/apt_0.6.42.tar.gz
apt_0.6.42_i386.deb
to pool/main/a/apt/apt_0.6.42_i386.deb
libapt-pkg-dev_0.6.42_i386.deb
to pool/main/a/apt/libapt-pkg-dev_0.6.42_i386.deb
libapt-pkg-doc_0.6.42_all.deb
to pool/main/a/apt/libapt-pkg-doc_0.6.42_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Vogt <[EMAIL PROTECTED]> (supplier of updated apt package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 19 Oct 2005 22:02:09 +0200
Source: apt
Binary: apt-utils libapt-pkg-doc libapt-pkg-dev apt-doc apt
Architecture: source all i386
Version: 0.6.42
Distribution: unstable
Urgency: low
Maintainer: APT Development Team <deity@lists.debian.org>
Changed-By: Michael Vogt <[EMAIL PROTECTED]>
Description:
apt - Advanced front-end for dpkg
apt-doc - Documentation for APT
apt-utils - APT utility programs
libapt-pkg-dev - Development files for APT's libapt-pkg and libapt-inst
libapt-pkg-doc - Documentation for APT development
Closes: 44135 152129 250583 316638 324921 325686 327456 333299 334539 334656
334671 334714
Changes:
apt (0.6.42) unstable; urgency=low
.
* apt-pkg/cdrom.cc:
- unmount the cdrom when apt failed to locate any package files
* allow cdrom failures and fallback to other sources in that case
(closes: #44135)
* better error text when dpkg-source fails
* Merge [EMAIL PROTECTED]/apt--main--0 up to patch-115:
- patch-99: Added Galician translation
- patch-100: Completed Danish translation (Closes: #325686)
- patch-104: French translation completed
- patch-109: Italian translation completed
- patch-112: Swedish translation update
- patch-115: Basque translation completed (Closes: #333299)
* applied french man-page update (thanks to Philippe Batailler)
(closes: #316638, #327456)
* fix leak in the mmap code, thanks to Daniel Burrows for the
patch (closes: #250583)
* support for apt-get [build-dep|source] -t (closes: #152129)
* added "APT::Authentication::TrustCDROM" option to make the life
for the installer people easier (closes: #334656)
* fix crash in apt-ftparchive (thanks to Bastian Blank for the patch)
(closes: #334671)
* apt-pkg/contrib/md5.cc:
- fix a alignment problem on sparc64 that gives random bus errors
(thanks to Fabbione for providing a test-case)
* init the default ScreenWidth to 79 columns by default
(Closes: #324921)
* cmdline/apt-cdrom.cc:
- fix some missing gettext() calls (closes: #334539)
* doc/apt-cache.8.xml: fix typo (closes: #334714)
Files:
ab162ba5029eec59384011ad4ebc9dfc 785 admin important apt_0.6.42.dsc
b953f0b5267290469c1dcce08fd8b5b2 1446364 admin important apt_0.6.42.tar.gz
571916aaf47bed1d4ff4528401a29deb 85242 doc optional apt-doc_0.6.42_all.deb
3ee1e1d5de4fa1a511eeb1b662e0c46c 108542 doc optional
libapt-pkg-doc_0.6.42_all.deb
05b26b7a9085a283e83aaf91e3ebef6b 1209020 admin important apt_0.6.42_i386.deb
a646363a3c93417cc4f4805804ef7d63 78694 libdevel optional
libapt-pkg-dev_0.6.42_i386.deb
32c07da71aedf61ae561244345f32a2e 200246 admin important
apt-utils_0.6.42_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFDV2YFliSD4VZixzQRAriHAJ9oamcu0WTMX7GYEB+F+fS6tr0UPACeNYPG
zXMI9Q+ogMRqs+2C+TTMpCE=
=BKXz
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
