Package: libgmime-2.4-2 Version: 2.4.23-1 Severity: normal -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Since 2.4.23, PGP/MIME signature verification is broken. Signatures that were previously reporting GMIME_SIGNATURE_STATUS_GOOD are now returning some other signature status. It was determined that the following commit in the gmime source [0] is the problematic one: 2e2cc177f70088f36dde8127c2f1be58b7606f64 It looks like signer->status is no longer being set for good signatures for some reason. It looks like this might be an API change, but the changelog claims that there are no API changes in 2.4.23. [0] git://git.gnome.org/gmime - -- System Information: Debian Release: wheezy/sid APT prefers testing APT policy: (500, 'testing'), (200, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages libgmime-2.4-2 depends on: ii libc6 2.11.2-11 Embedded GNU C Library: Shared lib ii libglib2.0-0 2.28.2-1 The GLib library of C routines ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime libgmime-2.4-2 recommends no packages. libgmime-2.4-2 suggests no packages. - -- no debconf information -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBCAAGBQJNjng2AAoJEO00zqvie6q82oMP/ibNnGsWCpDD/evmbSmLfuQW T2UM/0983mYij9EgZnj3rVopriE32FiDTbZSHqcvO8NivBYxOEijAAawuCaOEcfh VvDBWbkamnJhUjniJ05OQ493nNE46O5EZoK7CItxgLhwUMoee0BUv1yRcKZcuv+b TNcECqVwRmKP0LPPXiItF41Rr7A/lLXwA7DR+b+luiGQqdhPmAgiNia+KqpGUhzH y8YMm+b3GbG7XdGn8co6hkhVgxRpP1SAi33Hwvw1dxjouyeHfGmfERGpLzxz2oXW CMMdzVwAOOWsFftjuUKDOFfbe18pO8hJQpx6sZl7H2W7PBz/Gza/zWYwjIcAQ2HZ 5UQXhqRd+Eyz+Lapvu5VPfkNOz9ropBFdjADMZjrDDYVqIcz2V0QnQz8Ha+uEN+c SSfaHhyo1XQFrSJaOeWAURi8t0wJVbH+hym2UyRJR9YdlOLDmwdKzwORyRPwwRD+ aef2Tz8+xl/sy79thBC90OvDNcXoUNFg/01kHjUolGi2Au6NYioyDrlNocYJLX29 56JsNNF/UThvKaS5F3/mnP3zZ9hT/qFZLbs5G2/+jfogiYflJ2Jh9VGJh1XvIwyR tfLskGZJxPN/NuRIBpqeHTqn4LX+eSPtRFJ5j4m8eno/L0cwLoV9Nd4xVBCkdUEG OlJBity1+D8upIbYvRZ6 =1Vsh -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org