Your message dated Sat, 29 Jun 2024 10:46:21 +0000
with message-id <e1snvb3-002bkl...@coccia.debian.org>
and subject line Released with 12.6
has caused the Debian Bug report #1073923,
regarding bookworm-pu: package mobian-keyring/20230202.0+deb12u1
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1073923: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1073923
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
Tags: bookworm
X-Debbugs-Cc: mobian-keyr...@packages.debian.org, debian@undef.tools,
jspri...@debian.org
Control: affects -1 + src:mobian-keyring
User: release.debian....@packages.debian.org
Usertags: pu
(Please provide enough information to help the release team
to judge the request efficiently. E.g. by filling in the
sections below.)
[ Reason ]
mobian-keyring in bookworm contains an expired key (#1073853) which
is causing bookworm users to be unable to access the Mobian repository.
[ Impact ]
Users are unable to access updates provided through the Mobian repository
which for these devices is mostly kernel updates. In the worst case this could
leave Mobian devices open to known security vulnerabilities, but is currently
simply blocking access to the repo.
[ Tests ]
I have reproduced the error on a fresh install of Mobian bookworm. After
manually
installing this version of the package the issue is resolved and the device can
access
the repository.
I have been running the Debian Testing version of this package on my device
since 2024-05-09.
[ Risks ]
The change is relatively trivial. The key which has already been released to
Stable and Trixie
has been backported with no other commits.
[ Checklist ]
[x] *all* changes are documented in the d/changelog
[x] I reviewed all changes and I approve them
[x] attach debdiff against the package in (old)stable
[x] the issue is verified as fixed in unstable
[ Changes ]
Replace the expired key with a new copy with the expiry extended.
diff -Nru mobian-keyring-20230202.0/debian/changelog
mobian-keyring-20230202.0+deb12u1/debian/changelog
--- mobian-keyring-20230202.0/debian/changelog 2023-02-02 17:01:22.000000000
+0000
+++ mobian-keyring-20230202.0+deb12u1/debian/changelog 2024-06-20
08:28:22.000000000 +0000
@@ -1,3 +1,10 @@
+mobian-keyring (20230202.0+deb12u1) bookworm; urgency=medium
+
+ [ Arnaud Ferraris ]
+ * Update Mobian archive key (Closes: #1073853)
+
+ -- Jarrah Gosbell <debian@undef.tools> Thu, 20 Jun 2024 08:28:22 +0000
+
mobian-keyring (20230202.0) unstable; urgency=medium
* Source-only upload.
Binary files
/tmp/oO3EBGEtpB/mobian-keyring-20230202.0/mobian-archive-keyring.gpg and
/tmp/F74wnC3ehI/mobian-keyring-20230202.0+deb12u1/mobian-archive-keyring.gpg
differ
--- End Message ---
--- Begin Message ---
Version: 12.6
The upload requested in this bug has been released as part of 12.6.
--- End Message ---