On Wed, Apr 07, 2021 at 02:49:49PM +0200, Ben Hutchings wrote: > On Wed, 2021-04-07 at 20:07 +0900, Hideki Yamane wrote: > > Hi, > > > > I cannot find appropriate pseudo package in reportbug, so ask this > > in -devel. > > > > Fumiyasu (CCed) found a issue with samba package changelog in > > packages.d.o. > > https://packages.debian.org/buster/samba has "Debian Changelog" link > > but its > > https://metadata.ftp-master.debian.org/changelogs//main/s/samba/samba_4.9.5+dfsg-5+deb10u1_changelog > > link is 404. > > The latter site is part of the main archive and does not have > information about package versions that are only in the security > archive. > > Packages uploaded to the security archive are normally copied to the > (old)stable-proposed-update suite of the main archive, so long as that > is open, i.e. until the last point release. So it looks as if the copy > to the main archive failed for some reason. > The samba package is held in stable-new by bug#939419, see https://release.debian.org/proposed-updates/stable.html
Cheers, Julien > > Something wrong with > > https://metadata.ftp-master.debian.org/changelogs/ , > > that doesn't have the changelog were introduced with DSA 4513-1 as > > > > https://tracker.debian.org/news/1061236/accepted-samba-2495dfsg-5deb10u1-source-into-stable-embargoed-stable/ > > > > Also, why DSA 4513-1 is not included in Debian10.2 ? > > See https://www.debian.org/News/2019/20191116 > > Because the package didn't get copied to the main archive. > > The common reason why this may fail is that a maintainer uploads a > different orig tarball to the security archive. However, the two > versions agree on the checksums of the orig tarball. I would take this > up with the FTP team. >