Your message dated Sun, 10 Mar 2019 13:34:27 +0000
with message-id <e1h2yax-000fe0...@fasolo.debian.org>
and subject line Bug#924100: fixed in shim-signed 1.28+nmu3
has caused the Debian Bug report #924100,
regarding shim-signed: removal of shim-signed/sid makes files disappear from 
shim/stretch
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
924100: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924100
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: shim-signed
Version: 1.28+nmu2+0.9+1474479173.6c180c6-1
Severity: serious
User: debian...@lists.debian.org
Usertags: piuparts replaces-without-breaks

Hi,

during a test with piuparts and DOSE tools I noticed your package causes
removal of files that also belong to another package.
This is caused by using Replaces without corresponding Breaks.

The installation sequence to reproduce this problem is

  apt-get install shim/stretch
  # (1)
  apt-get install shim-signed/sid
  apt-get remove shim-signed
  # (2)

The list of installed files at points (1) and (2) should be identical,
but the following files have disappeared:

  /usr/lib/shim/fbx64.efi.signed
  /usr/lib/shim/mmx64.efi.signed

This is a serious bug violating policy 7.6, see
https://www.debian.org/doc/debian-policy/ch-relationships.html#overwriting-files-and-replacing-packages-replaces
and also see the footnote that describes this incorrect behavior:
https://www.debian.org/doc/debian-policy/ch-relationships.html#id13

The shim-signed package has the following relationships with shim:

  Conflicts: n/a
  Breaks:    n/a
  Replaces:  shim (= 0.9+1474479173.6c180c6-1)

>From the attached log (scroll to the bottom...):

1m16.4s ERROR: FAIL: After purging files have disappeared:
  /usr/lib/shim/fbx64.efi.signed         owned by: shim-signed
  /usr/lib/shim/mmx64.efi.signed         owned by: shim-signed

1m16.4s ERROR: FAIL: After purging files have been modified:
  /var/lib/dpkg/info/shim.list   not owned


cheers,

Andreas

Attachment: shim=0.9+1474479173.6c180c6-1_shim-signed=1.28+nmu2+0.9+1474479173.6c180c6-1.log.gz
Description: application/gzip


--- End Message ---
--- Begin Message ---
Source: shim-signed
Source-Version: 1.28+nmu3

We believe that the bug you reported is fixed in the latest version of
shim-signed, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 924...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Steve McIntyre <93...@debian.org> (supplier of updated shim-signed package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 09 Mar 2019 23:52:41 +0000
Source: shim-signed
Binary: shim-signed
Architecture: source amd64
Version: 1.28+nmu3
Distribution: unstable
Urgency: medium
Maintainer: Steve Langasek <vor...@debian.org>
Changed-By: Steve McIntyre <93...@debian.org>
Description:
 shim-signed - Secure Boot chain-loading bootloader (Microsoft-signed binary)
Closes: 922179 924100
Changes:
 shim-signed (1.28+nmu3) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * (Still) explicitly uploading from a chroot with older binaries
     installed for shim and sbsigntool, and update Build-Depends to
     point to those speficic versions. This package will *not* function
     with other versions installed.
   * Add Breaks: shim (<= 0.9+1474479173.6c180c6-1), Closes: #924100
   * +nmu2 fixed the installability problem caused by waiting for
     Microsoft's signature on the new shim packages. Closes: #922179
Checksums-Sha1:
 d8e1e6020cd6475d04990afac6df6efb79e0b105 1531 shim-signed_1.28+nmu3.dsc
 ac19b934bde11f871288e65ec660b83607c9a649 314588 shim-signed_1.28+nmu3.tar.xz
 aca2a3c5c85cfdd4bc3c2295dca9aafb3e372e63 444064 
shim-signed_1.28+nmu3+0.9+1474479173.6c180c6-1_amd64.deb
 e35ffc21b648f5ccd1b1a03ebd1494f306b3fce2 5402 
shim-signed_1.28+nmu3_amd64.buildinfo
Checksums-Sha256:
 71b57e3b3a8a5804cc09d6955f62afd195f4c82efe2032ac4e6173ddd9855e78 1531 
shim-signed_1.28+nmu3.dsc
 229aaa602f653c0f31753eeddb845b972760e5470e6bc14dd68924e433649f97 314588 
shim-signed_1.28+nmu3.tar.xz
 e436932aa2e37f4fe6d271d853534f825b59172f2a268b9f96b89fba13d0898b 444064 
shim-signed_1.28+nmu3+0.9+1474479173.6c180c6-1_amd64.deb
 3abe6b984b6c442eab19da0143dc336717e79454de946e2cb4f7cb49a00b3773 5402 
shim-signed_1.28+nmu3_amd64.buildinfo
Files:
 e27496db3218ccfe2d958f2fb013119c 1531 utils optional shim-signed_1.28+nmu3.dsc
 052a5c15d5d65816514bae6622642200 314588 utils optional 
shim-signed_1.28+nmu3.tar.xz
 c16709a4d00d3683667a8979598f102d 444064 utils optional 
shim-signed_1.28+nmu3+0.9+1474479173.6c180c6-1_amd64.deb
 823b7a12553b09e4eda88c9a7a21765b 5402 utils optional 
shim-signed_1.28+nmu3_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=xXjK
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to