Also affects packages compressed with bz2, like Ubuntu 12.04's kernel
package.

The obvious new version of the patch seems to work:

--- dpkg-sig-0.13.1/dpkg-sig.old        2014-07-25 15:16:40.114016000 -0700
+++ dpkg-sig-0.13.1/dpkg-sig    2014-07-25 15:17:31.037320000 -0700
@@ -634,7 +634,7 @@
        }
 
        return "FORCE_BAD" unless ($seen_files{"control.tar.gz"} &&
-                            $seen_files{"data.tar.gz"} &&
+                            ($seen_files{"data.tar.gz"} || 
$seen_files{"data.tar.bz2"} || $seen_files{"data.tar.xz"}) &&
                             $seen_files{"debian-binary"});
 
        return "GOOD"

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1342938

Title:
  dpkg-sig --verify fails on packages compressed with xz

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dpkg-sig/+bug/1342938/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to