Hello again, On Wed, Nov 03, 2010 at 03:43:58PM -0700, Richard A Nelson wrote: > On Tue, 2 Nov 2010, Mario 'BitKoenig' Holbe wrote: > >nope, it's not fixed: > I suspect this is due to my building binary-arch and binary-all, and > Debian buildd machines building just binary-arch.
since my previous mail described a more long-term approach (I personally
wouldn't like trying to get a new package into a deep frozen
distribution :)), here is a probably more short-term one:
The issue didn't show up in versions before 8.14.3-9.3 because there
those packages which now ship a different buildinfo didn't ship a
buildinfo at all:
$ for i in /var/cache/apt/archives/*_8.14.3-9_*; do dpkg --contents "$i"; done
| grep buildinfo
-rw-r--r-- root/root 2087 2009-03-01 23:49
./usr/share/doc/libmilter1.0.1/buildinfo.gz
-rw-r--r-- root/root 2087 2009-03-01 23:49
./usr/share/doc/rmail/buildinfo.gz
-rw-r--r-- root/root 2087 2009-03-01 23:49
./usr/share/doc/sendmail-bin/buildinfo.gz
-rw-r--r-- root/root 2087 2009-03-01 23:49
./usr/share/doc/sensible-mda/buildinfo.gz
$ for i in /var/cache/apt/archives/*_8.14.3-9.2_*; do dpkg --contents "$i";
done | grep buildinfo
-rw-r--r-- root/root 2223 2010-07-12 11:40
./usr/share/doc/libmilter1.0.1/buildinfo.gz
-rw-r--r-- root/root 2223 2010-07-12 11:40
./usr/share/doc/rmail/buildinfo.gz
-rw-r--r-- root/root 2223 2010-07-12 11:40
./usr/share/doc/sendmail-bin/buildinfo.gz
-rw-r--r-- root/root 2223 2010-07-12 11:40
./usr/share/doc/sensible-mda/buildinfo.gz
$ for i in /var/cache/apt/archives/*_8.14.3-9.3_*; do dpkg --contents "$i";
done | grep buildinfo
-rw-r--r-- root/root 2212 2010-09-19 15:40
./usr/share/doc/libmilter1.0.1/buildinfo.gz
-rw-r--r-- root/root 2212 2010-09-19 15:40
./usr/share/doc/rmail/buildinfo.gz
-rw-r--r-- root/root 2214 2010-09-17 13:11
./usr/share/doc/sendmail/buildinfo.gz
-rw-r--r-- root/root 2214 2010-09-17 13:11
./usr/share/doc/sendmail-base/buildinfo.gz
-rw-r--r-- root/root 2212 2010-09-19 15:40
./usr/share/doc/sendmail-bin/buildinfo.gz
-rw-r--r-- root/root 2214 2010-09-17 13:11
./usr/share/doc/sendmail-cf/buildinfo.gz
-rw-r--r-- root/root 2214 2010-09-17 13:11
./usr/share/doc/sendmail-doc/buildinfo.gz
-rw-r--r-- root/root 2212 2010-09-19 15:40
./usr/share/doc/sensible-mda/buildinfo.gz
$
So, with 8.14.3-9.3 something must have been brought in which either
generates buildinfo files for those packages or doesn't remove them
anymore.
Hence, the easiest short-term solution would probably be to just revoke
whatever lead to them now being shipped.
The buildinfo files in the 4 packages that did already ship them before
are still all equal in the current version:
$ cat
/var/lib/dpkg/info/{libmilter1.0.1,rmail,sendmail-bin,sensible-mda}.md5sums |
grep buildinfo
3e6b38d16eb829af04b065738fb5f0e8 usr/share/doc/libmilter1.0.1/buildinfo.gz
3e6b38d16eb829af04b065738fb5f0e8 usr/share/doc/rmail/buildinfo.gz
3e6b38d16eb829af04b065738fb5f0e8 usr/share/doc/sendmail-bin/buildinfo.gz
3e6b38d16eb829af04b065738fb5f0e8 usr/share/doc/sensible-mda/buildinfo.gz
regards
Mario
--
[mod_nessus for iauth]
<delta> "scanning your system...found depreciated OS...found
hole...installing new OS...please reboot and reconnect now"
signature.asc
Description: Digital signature

