Package: release.debian.org
Severity: normal
Tags: bookworm
X-Debbugs-Cc: mobian-keyr...@packages.debian.org, debian@undef.tools, 
jspri...@debian.org
Control: affects -1 + src:mobian-keyring
User: release.debian....@packages.debian.org
Usertags: pu

(Please provide enough information to help the release team
to judge the request efficiently. E.g. by filling in the
sections below.)

[ Reason ]
mobian-keyring in bookworm contains an expired key (#1073853) which 
is causing bookworm users to be unable to access the Mobian repository.

[ Impact ]
Users are unable to access updates provided through the Mobian repository
which for these devices is mostly kernel updates. In the worst case this could
leave Mobian devices open to known security vulnerabilities, but is currently
simply blocking access to the repo.

[ Tests ]
I have reproduced the error on a fresh install of Mobian bookworm. After 
manually
installing this version of the package the issue is resolved and the device can 
access
the repository.

I have been running the Debian Testing version of this package on my device 
since 2024-05-09.

[ Risks ]
The change is relatively trivial. The key which has already been released to 
Stable and Trixie
has been backported with no other commits.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

[ Changes ]
Replace the expired key with a new copy with the expiry extended.
diff -Nru mobian-keyring-20230202.0/debian/changelog 
mobian-keyring-20230202.0+deb12u1/debian/changelog
--- mobian-keyring-20230202.0/debian/changelog  2023-02-02 17:01:22.000000000 
+0000
+++ mobian-keyring-20230202.0+deb12u1/debian/changelog  2024-06-20 
08:28:22.000000000 +0000
@@ -1,3 +1,10 @@
+mobian-keyring (20230202.0+deb12u1) bookworm; urgency=medium
+
+  [ Arnaud Ferraris ]
+  * Update Mobian archive key (Closes: #1073853)
+
+ -- Jarrah Gosbell <debian@undef.tools>  Thu, 20 Jun 2024 08:28:22 +0000
+
 mobian-keyring (20230202.0) unstable; urgency=medium
 
   * Source-only upload.
Binary files 
/tmp/oO3EBGEtpB/mobian-keyring-20230202.0/mobian-archive-keyring.gpg and 
/tmp/F74wnC3ehI/mobian-keyring-20230202.0+deb12u1/mobian-archive-keyring.gpg 
differ

Reply via email to