Re: xfree86_4.1.0-16woody4_alpha.changes REJECTED

2004-10-20 Thread Jeroen van Wolffelaar
(replying to my own mail at gun^Wflamethrower-point)

On Mon, Oct 18, 2004 at 03:02:47PM +0200, Jeroen van Wolffelaar wrote:
> On Mon, Oct 18, 2004 at 07:44:29AM -0500, Branden Robinson wrote:
> > Is there a FAQ somewhere that will tell me why I always get "REJECTED"
> > mails from katie after submitting security-fixed packages to the Debian
> > Security Team?
> > 
> > I get one for each architecture.
> > 
> > I seem to remember asking Debian Installer
> > <[EMAIL PROTECTED]> before, but never getting an answer.
> 
> The problem is that stable-security is a separate archive, and requires
> a sourceful upload. Give the '-sa' option to dpkg-buildpackage to
> overrule the heuristic that says only -1 and -0 packages need to have
> their source included.

Branden Robinson told me that however he did prepare the upload, it was
his understanding that the security team would not use it as-is, but
rebuild it. They didn't, and due to Branden's assumption, he didn't
think he needed to follow the guidelines specific to how exactly to
dpkg-buildpackage the upload for security updates.
 
> Also see http://www.debian.org/doc/developers-reference/ch-pkgs#s-bug-security
> which says to simply mail updated packages to the security team, and to
> not normally upload them yourself.

So it was the security team who uploaded Branden's packages as-is. Sorry
for assuming wrong, but something like this is uncheckable as the
signature was Branden's.

> A subsection of this section has also the answer to your question:
> 
> | Unless the upstream source has been uploaded to security.debian.org
> | before (by a previous security update), build the upload with full
> | upstream source (dpkg-buildpackage -sa). If there has been a previous
> | upload to security.debian.org with the same upstream version, you may
> | upload without upstream source (dpkg-buildpackage -sd).

This text is by the way incomplete. It should say "If there has been a
previous upload ... same upstream version _since the latest point
release_, you may upload without upstream source". Or even better, just
change it to 'always use -sa', as having multiple security updates for
one package between the same point releases is rare, and even if so, the
extra bandwidth used during upload is neglectible (and it can't hurt).

--Jeroen

-- 
Jeroen van Wolffelaar
[EMAIL PROTECTED] (also for Jabber & MSN; ICQ: 33944357)
http://Jeroen.A-Eskwadraat.nl



Re: xfree86_4.1.0-16woody4_alpha.changes REJECTED

2004-10-18 Thread Jeroen van Wolffelaar
On Mon, Oct 18, 2004 at 07:44:29AM -0500, Branden Robinson wrote:
> Is there a FAQ somewhere that will tell me why I always get "REJECTED"
> mails from katie after submitting security-fixed packages to the Debian
> Security Team?
> 
> I get one for each architecture.
> 
> I seem to remember asking Debian Installer
> <[EMAIL PROTECTED]> before, but never getting an answer.

The problem is that stable-security is a separate archive, and requires
a sourceful upload. Give the '-sa' option to dpkg-buildpackage to
overrule the heuristic that says only -1 and -0 packages need to have
their source included.

Also see http://www.debian.org/doc/developers-reference/ch-pkgs#s-bug-security
which says to simply mail updated packages to the security team, and to
not normally upload them yourself. A subsection of this section has also
the answer to your question:

| Unless the upstream source has been uploaded to security.debian.org
| before (by a previous security update), build the upload with full
| upstream source (dpkg-buildpackage -sa). If there has been a previous
| upload to security.debian.org with the same upstream version, you may
| upload without upstream source (dpkg-buildpackage -sd).

--Jeroen

-- 
Jeroen van Wolffelaar
[EMAIL PROTECTED] (also for Jabber & MSN; ICQ: 33944357)
http://Jeroen.A-Eskwadraat.nl



Re: xfree86_4.1.0-16woody4_alpha.changes REJECTED

2004-10-18 Thread Branden Robinson
Is there a FAQ somewhere that will tell me why I always get "REJECTED"
mails from katie after submitting security-fixed packages to the Debian
Security Team?

I get one for each architecture.

I seem to remember asking Debian Installer
<[EMAIL PROTECTED]> before, but never getting an answer.

On Mon, Oct 11, 2004 at 03:47:20AM -0400, Debian Installer wrote:
> 
> Mapping stable-security to proposed-updates.
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (twm_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xlibosmesa-dev_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (x-window-system-core_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xlibmesa3-dbg_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xlibs_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (libxaw7_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (libxaw6_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (libxaw7-dev_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xnest_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xfs_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xterm_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xlibmesa-dev_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xlibs-dev_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (libxaw6-dev_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xvfb_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (libdps1-dbg_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xlibosmesa3-dbg_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (libdps-dev_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xlibs-dbg_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (libdps1_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (proxymngr_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xmh_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xserver-common_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xlibs-pic_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xlibmesa3_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xdm_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xserver-xfree86_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xfwp_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (lbxproxy_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xlibosmesa3_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (libxaw6-dbg_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xbase-clients_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (libxaw7-dbg_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xprt_4.1.0-16woody4_alpha.deb).
> Rejected: no source found for xfree86 4.1.0-16woody4 
> (xutils_4.1.0-16woody4_alpha.deb).
> 
> 
> ===
> 
> If you don't understand why your files were rejected, or if the
> override file requires editing, reply to this email.

-- 
G. Branden Robinson|   Yesterday upon the stair,
Debian GNU/Linux   |   I met a man who wasn't there.
[EMAIL PROTECTED] |   He wasn't there again today,
http://people.debian.org/~branden/ |   I think he's from the CIA.


signature.asc
Description: Digital signature