Your message dated Mon, 29 Jun 2020 11:04:11 +0000 with message-id <e1jpra7-0003dm...@fasolo.debian.org> and subject line Bug#963944: fixed in dpkg 1.20.3 has caused the Debian Bug report #963944, regarding libdpkg-perl: dpkg-source cannot build packages with keys anymore to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 963944: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=963944 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: libdpkg-perl Version: 1.20.2 Severity: serious Justification: breaks unrelated packages Hi, it seems that the bump to 1.20 changed the behaviour of building packages, i.e., dpkg-source -b . doesn't work anymore, out of the blue, due to signature/key import errors: $ dpkg-source -b . dpkg-source: info: using source format '3.0 (quilt)' dpkg-source: info: building kig using existing ./kig_20.04.2.orig.tar.xz dpkg-source: info: building kig using existing ./kig_20.04.2.orig.tar.xz.asc gpg: public key of ultimately trusted key F3B9C351F80F635D not found gpg: public key of ultimately trusted key 8ABC9E07886A9BC5 not found gpg: public key of ultimately trusted key 6CACA448860CDC13 not found gpg: public key of ultimately trusted key D2BF4AA309C5B094 not found dpkg-source: error: failed to import key in kig-20.04.2/debian/upstream/signing-key.asc $ This hasn't been the case before, and I am a bit at loss what needs to be done. Thanks Norbert -- Package-specific info: -- System Information: Debian Release: bullseye/sid APT prefers unstable APT policy: (500, 'unstable'), (200, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.7.5 (SMP w/4 CPU cores) Kernel taint flags: TAINT_UNSIGNED_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages libdpkg-perl depends on: ii dpkg 1.20.2 ii perl 5.30.3-4 Versions of packages libdpkg-perl recommends: ii bzip2 1.0.8-3 ii libfile-fcntllock-perl 0.22-3+b6 ii liblocale-gettext-perl 1.07-4 ii xz-utils 5.2.4-1+b1 Versions of packages libdpkg-perl suggests: ii binutils 2.34-8 ii brz [bzr] 3.1.0-4 ii clang-10 [c-compiler] 1:10.0.0-4 ii clang-8 [c-compiler] 1:8.0.1-9 ii clang-9 [c-compiler] 1:9.0.1-12 ii debian-keyring 2020.06.24 ii gcc [c-compiler] 4:9.2.1-3.1 ii gcc-8 [c-compiler] 8.4.0-4 ii gcc-9 [c-compiler] 9.3.0-14 ii git 1:2.27.0-1 ii gnupg 2.2.20-1 ii gpgv 2.2.20-1 ii patch 2.7.6-6 ii sensible-utils 0.0.12+nmu1 -- no debconf information
--- End Message ---
--- Begin Message ---Source: dpkg Source-Version: 1.20.3 Done: Guillem Jover <guil...@debian.org> We believe that the bug you reported is fixed in the latest version of dpkg, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 963...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Guillem Jover <guil...@debian.org> (supplier of updated dpkg package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 29 Jun 2020 12:37:51 +0200 Source: dpkg Architecture: source Version: 1.20.3 Distribution: unstable Urgency: medium Maintainer: Dpkg Developers <debian-d...@lists.debian.org> Changed-By: Guillem Jover <guil...@debian.org> Closes: 963839 963844 963944 Changes: dpkg (1.20.3) unstable; urgency=medium . [ Guillem Jover ] * Perl modules: - Dpkg::OpenPGP: Pass --no-options to gpg in verify_signature(). Reported by Bertrand Marc <bm...@debian.org>. Closes: #963839 - Dpkg::Build::Info: Clarify by giving context to the get_build_env_whitelist() deprecation warning. Closes: #963844 Reported by Sven Joachim <svenj...@gmx.de>. - Dpkg::Source::Package: Fix check_original_tarball_signature() to make import_key() honor require_valid_signature, which should default to false. Reported by Mattia Rizzolo <mat...@debian.org>. - Dpkg::OpenPGP: Use a temporary directory for the GnuPG homedir in import_key(), to make sure we do not write to the user home directory, which might be read-only or non-existent. Closes: #963944 Reported by Mattia Rizzolo <mat...@debian.org>. * Code internals: - libdpkg: Print a notice if we cannot write to the log file. * Build system: - Improve error diagnosis for configure version fetching script. Prompted by Norbert Preining <norb...@preining.info>. . [ Updated programs translations ] * German (Sven Joachim). Checksums-Sha1: 9a51433a1ba67802b05e81ed99fa3d2a6a09ede9 2109 dpkg_1.20.3.dsc 779fc2397f37d445effe616174b26eb956a0e318 4712980 dpkg_1.20.3.tar.xz cd912e1d3267899a63a1ea05a7ec4625d582f40a 7501 dpkg_1.20.3_amd64.buildinfo Checksums-Sha256: f8cf08136254230d51141c3626bec1c2c56bfd3012f80769fb854cdb358768b1 2109 dpkg_1.20.3.dsc 3c8345b001469de8ede3788640945d32b84026a04872b9ab2577853ca984f91e 4712980 dpkg_1.20.3.tar.xz 2d8b79f7165c3a3219fe6b4bf1c5a8b9f06717618ec493a58b10917f26d458af 7501 dpkg_1.20.3_amd64.buildinfo Files: 0a1d22bdeb478320a6e6406435621695 2109 admin required dpkg_1.20.3.dsc fe79189786829b78b990919d545da4cb 4712980 admin required dpkg_1.20.3.tar.xz 4ee69a96344222f07fc09972e07f40ab 7501 admin required dpkg_1.20.3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETz509DYFDBD1aWV0uXK/PqSuV6MFAl75yIEACgkQuXK/PqSu V6PKLw//UyVZ2jYZn1NFLHIdbxNQZP57/3laMBfNROjceDkCAUMuoY7Lccy4LlXS MmbRlmvq4nucDVdoJfKQ8HwjaUxJBev99oHswwwAQGgDCktK3lOHC5CRwkGAgwEa T4J5SGcuinD91L+LRbzienXZoX08Af3/ZYTIk9B52a29+RerTfN4GJbHvT1Px9OS xUACbVycRY3+aQdp60H0Ku309Jr9zvXAcgOM7bAd8Hh+p2+Dl4BHSUTbdd0QlI0h PuhZ0HmOJwOHt09SzWzuPgRoM7qf2jdjEnwKn1sVhlsaBYoszNwhbHD5IdvhRilH baSMg739dNUvdCesVI/sJIgL1Ms72Ip0wJLai1W8wsln6a+uNoNTcV8tU8EEsx5P rCoAnoiy2ASg0854llAZyHSiZPRVvM9/OhtOc84CvydTyuCSC3u7F1WJdR+/IHHm 7UjXl6tGgYmzeY/bwtqlfAmBBsXsH65t/zeMJxOSMlBsPaXhfFfu/ffUWt/kTaua G78a9fLCDygAAke1w+EuvMEwfPY1vOElm2OZl4+SE0brE2Y/Gu346IyCIL/UVuxP O512vY/2YJC5BMARBxpm7E0hxXnSd/UqmYyWGWJRhGoRaSXuRTOutTHgp2mDHs/l lB1vGn1iwHT4jIEfCC6bxZQiU4g/qShOMofu7vS5q7kTVWSg9eE= =jzsa -----END PGP SIGNATURE-----
--- End Message ---
