On Thu, Sep 26, 2019 at 12:29:02AM +0200, José Luis Blanco-Claraco wrote: > I'm the maintainer of the upstream library, and have just released > upstream bug-fix release (v1.5.8) which also comes with an updated > debian/control per this original bug report. > It would be great if some of you could sponsor its upload so this bug > gets fixed asap... > > The new package for version 1.5.8 has been tested with pbuilder to > build cleanly and to be lintian clean on "sid". > However, I uploaded it twice today to mentors.debian.net without any > error but it won't show on the web... so I'll leave a copy here: > > https://ingmec.ual.es/~jlblanco/downloads/mrpt_1.5.8-1.dsc
The key this is signed with isn't one of the 3 keys in: mrpt-1.5.6/debian/upstream/signing-key.asc key 9AA38DCD55BE302B: "Debian Archive Automatic Signing Key (5.0/lenny) <ftpmas...@debian.org>" key 4F9946354E9CFF4E: "Spotify Public Repository Signing Key <operati...@spotify.com>" key D443304FBD70A641: "Jose Luis Blanco (University of Malaga) <joseluisblan...@gmail.com>" (I also wonder if the first two should be there at all...) I'm afraid this is too big a change for me to be comfortable sponsoring without any sort of trust path. I'm happy to NMU just the update that's actually needed to fix this bug though. Cheers, Olly