Package: jenkins.debian.org
Severity: important
User: jenkins.debian....@packages.debian.org
Usertags: reproducible
Control: submitter -1 Reiner Herrmann <rei...@reiner-h.de>
X-Debbugs-Cc: Reiner Herrmann <rei...@reiner-h.de>

https://tests.reproducible-builds.org/debian/unstable/amd64/pkg_set_maint_debian-qa.html
links some packages that have been adopted.

At this time it can be seen with src:crack and src:libopenobex.
The reason is that the Sources index file lists multiple version, one of
which has Maintainer:packa...@qa.debian.org.  There are multiple reason
to have an old source version hanging on in the index, the most common
being that some architectures are not up to date (kbsd-amd64/kbsd-i386
being a very common one these days).  Also, Extra-Source-Only.

I suspect other maintainer-based pkgsets are affected by this bug.

The thing building up the packagesets list should:
 1) ignore Extra-Source-Only:yes sources
 2) only consider the oldest version available

Note that its important for both of these conditions to be met in this
order, as technically speaking a given suite could have:
|Package: foo
|Version: 1
|
|Package: foo
|Version: 2
|Extra-Source-Only: yes
(despite being a very rare situation).


Thanks to Reiner Herrmann for reporting this issue.

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
more about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-

Attachment: signature.asc
Description: PGP signature

Reply via email to