Package: release.debian.org
Severity: normal
User: release.debian....@packages.debian.org
Usertags: unblock
Please unblock package debootstrap
This upload fixed #703146. The bug is severity "important" but one
might consider it as serious as it prevents debootstreap to create a
pbuilder chroot for instance.
The bug is apparently here for quite some time but was masked by APT
handling of InRelease files up to APT last version to enter testing.
(I got an informal pre-approval by Julien on IRC, by the way)
debdiff attached
unblock debootstrap/1.0.47
-- System Information:
Debian Release: 7.0
APT prefers unstable
APT policy: (500, 'unstable'), (101, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 3.2.0-4-686-pae (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
diff -Nru debootstrap-1.0.46/debian/changelog debootstrap-1.0.47/debian/changelog
--- debootstrap-1.0.46/debian/changelog 2012-12-27 15:51:54.000000000 +0100
+++ debootstrap-1.0.47/debian/changelog 2013-03-20 21:34:29.000000000 +0100
@@ -1,3 +1,15 @@
+debootstrap (1.0.47) unstable; urgency=low
+
+ * Team upload
+ * Properly decrypt the InRelease file when downloading from an archive
+ where InRelease is used. This longstanding bug was masked by former
+ APT behaviour and was revealed only with recent APT versions
+ Closes: #703146
+ Thanks to Michael Vogt for the analysis and patch
+ * Add a dependency on gpg because of the above change.
+
+ -- Christian Perrier <bubu...@debian.org> Wed, 20 Mar 2013 21:34:29 +0100
+
debootstrap (1.0.46) unstable; urgency=low
* Team upload.
diff -Nru debootstrap-1.0.46/debian/control debootstrap-1.0.47/debian/control
--- debootstrap-1.0.46/debian/control 2012-12-27 14:42:50.000000000 +0100
+++ debootstrap-1.0.47/debian/control 2013-03-20 21:49:20.000000000 +0100
@@ -10,8 +10,8 @@
Package: debootstrap
Architecture: all
-Depends: ${misc:Depends}, wget
-Recommends: gnupg, ${keyring}
+Depends: ${misc:Depends}, wget, gnupg
+Recommends: ${keyring}
Description: Bootstrap a basic Debian system
debootstrap is used to create a Debian base system from scratch,
without requiring the availability of dpkg or apt. It does this by
diff -Nru debootstrap-1.0.46/functions debootstrap-1.0.47/functions
--- debootstrap-1.0.46/functions 2012-12-27 15:36:47.000000000 +0100
+++ debootstrap-1.0.47/functions 2013-03-20 21:30:41.000000000 +0100
@@ -530,7 +530,8 @@
warning KEYRING "Cannot check Release signature; keyring file not available %s" "$KEYRING_WANTED"
fi
if [ "$release_file_variant" = "IN" ]; then
- mv "$relsigdest" "$reldest"
+ rm -f $reldest
+ gpg --output "$reldest" --decrypt --keyring "$KEYRING" --ignore-time-conflict "$relsigdest"
fi
}
