Package: release.debian.org Severity: normal Tags: bookworm X-Debbugs-Cc: mobian-keyr...@packages.debian.org, debian@undef.tools, jspri...@debian.org Control: affects -1 + src:mobian-keyring User: release.debian....@packages.debian.org Usertags: pu
(Please provide enough information to help the release team to judge the request efficiently. E.g. by filling in the sections below.) [ Reason ] mobian-keyring in bookworm contains an expired key (#1073853) which is causing bookworm users to be unable to access the Mobian repository. [ Impact ] Users are unable to access updates provided through the Mobian repository which for these devices is mostly kernel updates. In the worst case this could leave Mobian devices open to known security vulnerabilities, but is currently simply blocking access to the repo. [ Tests ] I have reproduced the error on a fresh install of Mobian bookworm. After manually installing this version of the package the issue is resolved and the device can access the repository. I have been running the Debian Testing version of this package on my device since 2024-05-09. [ Risks ] The change is relatively trivial. The key which has already been released to Stable and Trixie has been backported with no other commits. [ Checklist ] [x] *all* changes are documented in the d/changelog [x] I reviewed all changes and I approve them [x] attach debdiff against the package in (old)stable [x] the issue is verified as fixed in unstable [ Changes ] Replace the expired key with a new copy with the expiry extended.
diff -Nru mobian-keyring-20230202.0/debian/changelog mobian-keyring-20230202.0+deb12u1/debian/changelog --- mobian-keyring-20230202.0/debian/changelog 2023-02-02 17:01:22.000000000 +0000 +++ mobian-keyring-20230202.0+deb12u1/debian/changelog 2024-06-20 08:28:22.000000000 +0000 @@ -1,3 +1,10 @@ +mobian-keyring (20230202.0+deb12u1) bookworm; urgency=medium + + [ Arnaud Ferraris ] + * Update Mobian archive key (Closes: #1073853) + + -- Jarrah Gosbell <debian@undef.tools> Thu, 20 Jun 2024 08:28:22 +0000 + mobian-keyring (20230202.0) unstable; urgency=medium * Source-only upload. Binary files /tmp/oO3EBGEtpB/mobian-keyring-20230202.0/mobian-archive-keyring.gpg and /tmp/F74wnC3ehI/mobian-keyring-20230202.0+deb12u1/mobian-archive-keyring.gpg differ
