Bug#979644: marked as done (xfsprogs: Cryptographically verify upstream tarball)

Bug#979644: marked as done (xfsprogs: Cryptographically verify upstream tarball)

[Debian Bug Tracking System]

[-- Attachment #1: Type: text/plain, Size: 854 bytes --]

Your message dated Tue, 19 Jan 2021 22:24:05 +0000
with message-id <E1l1zPx-0005hU-CQ@fasolo.debian.org>
and subject line Bug#979644: fixed in xfsprogs 5.10.0-2
has caused the Debian Bug report #979644,
regarding xfsprogs: Cryptographically verify upstream tarball
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
979644: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=979644
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[-- Attachment #2: Type: message/rfc822, Size: 9036 bytes --]

[-- Attachment #2.1.1: Type: text/plain, Size: 135 bytes --]

Source: xfsprogs
Version: xfsprogs/5.6.0-1
Severity: wishlist

Upstream signs their tarballs. Please verify them. A patch is enclosed.

[-- Attachment #2.1.2: Cryptographically-verify-upstream-tarball.patch --]
[-- Type: text/x-patch, Size: 4712 bytes --]

From: Bastian Germann <bastiangermann@fishpost.de>
Date: Sat, 9 Jan 2021 18:28:45 +0100
Subject: Cryptographically verify upstream tarball
---
diff --git a/debian/upstream/signing-key.asc b/debian/upstream/signing-key.asc
new file mode 100644
index 0000000..5a9ec9b
--- /dev/null
+++ b/debian/upstream/signing-key.asc
@@ -0,0 +1,63 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=El1H
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/debian/watch b/debian/watch
index 88f6a0f..ecf0648 100644
--- a/debian/watch
+++ b/debian/watch
@@ -1,3 +1,3 @@
 version=3
-opts=uversionmangle=s/(\d)[_\.\-\+]?((RC|rc|pre|dev|beta|alpha)\d*)$/$1~$2/ \
+opts=pgpsigurlmangle=s/xz$/sign/,decompress,uversionmangle=s/(\d)[_\.\-\+]?((RC|rc|pre|dev|beta|alpha)\d*)$/$1~$2/ \
 https://www.kernel.org/pub/linux/utils/fs/xfs/xfsprogs/xfsprogs-(.+)\.tar\.xz

[-- Attachment #3: Type: message/rfc822, Size: 5521 bytes --]

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 979644-close@bugs.debian.org
Subject: Bug#979644: fixed in xfsprogs 5.10.0-2
Date: Tue, 19 Jan 2021 22:24:05 +0000
Message-ID: <E1l1zPx-0005hU-CQ@fasolo.debian.org>

Source: xfsprogs
Source-Version: 5.10.0-2
Done: Bastian Germann <bastiangermann@fishpost.de>

We believe that the bug you reported is fixed in the latest version of
xfsprogs, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 979644@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Bastian Germann <bastiangermann@fishpost.de> (supplier of updated xfsprogs package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 14 Jan 2021 18:59:14 +0100
Source: xfsprogs
Architecture: source
Version: 5.10.0-2
Distribution: unstable
Urgency: low
Maintainer: XFS Development Team <linux-xfs@vger.kernel.org>
Changed-By: Bastian Germann <bastiangermann@fishpost.de>
Closes: 979644 979653
Changes:
 xfsprogs (5.10.0-2) unstable; urgency=low
 .
   * Team upload
   * debian: cryptographically verify upstream tarball (Closes: #979644)
   * debian: remove dependency on essential util-linux
   * debian: remove "Priority: extra"
   * debian: use Package-Type over its predecessor
   * debian: add missing copyright info (Closes: #979653)
Checksums-Sha1:
 9c7923ea5735242a29b8481cbd38059c850433b9 2034 xfsprogs_5.10.0-2.dsc
 9e5cbf9b3a561c3b9b391f0b1330bcb4b3537d38 1273332 xfsprogs_5.10.0.orig.tar.xz
 7240aa6c2fb907b9f1aeec8ae6d19fb8c62c1585 13792 xfsprogs_5.10.0-2.debian.tar.xz
 87001ed58e1229bb8b9c7cc4348b5e07646675ef 6593 xfsprogs_5.10.0-2_source.buildinfo
Checksums-Sha256:
 d4b995161ecfc754895c3a91931db9787fffc924fbc2a5cd51abb11a28ac1522 2034 xfsprogs_5.10.0-2.dsc
 e04017e46d43e4d54b9a560fd7cea922520f8f6ef882404969d20cd4e5c790e9 1273332 xfsprogs_5.10.0.orig.tar.xz
 3f144a529ec274ffd720ad70c347b294c9a787868b2119ecacbf0c16bcb642f1 13792 xfsprogs_5.10.0-2.debian.tar.xz
 a022f266d04946b600fdb12815a4197d4dbb70ae8bfe92e5c682803bba9ac42d 6593 xfsprogs_5.10.0-2_source.buildinfo
Files:
 49fad22f902144635cd5a7c06de1fb1e 2034 admin optional xfsprogs_5.10.0-2.dsc
 f4156af67a0e247833be88efaa2869f9 1273332 admin optional xfsprogs_5.10.0.orig.tar.xz
 6bb054391ad11b6d23d883a907e099be 13792 admin optional xfsprogs_5.10.0-2.debian.tar.xz
 853ed7390e20376455676cf65ba4137d 6593 admin optional xfsprogs_5.10.0-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=IDLF
-----END PGP SIGNATURE-----