Also affects packages compressed with bz2, like Ubuntu 12.04's kernel package.
The obvious new version of the patch seems to work: --- dpkg-sig-0.13.1/dpkg-sig.old 2014-07-25 15:16:40.114016000 -0700 +++ dpkg-sig-0.13.1/dpkg-sig 2014-07-25 15:17:31.037320000 -0700 @@ -634,7 +634,7 @@ } return "FORCE_BAD" unless ($seen_files{"control.tar.gz"} && - $seen_files{"data.tar.gz"} && + ($seen_files{"data.tar.gz"} || $seen_files{"data.tar.bz2"} || $seen_files{"data.tar.xz"}) && $seen_files{"debian-binary"}); return "GOOD" -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1342938 Title: dpkg-sig --verify fails on packages compressed with xz To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dpkg-sig/+bug/1342938/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs