#1014206 bullseye-pu: package dpkg/1.20.11

#1014206#5
Date:
2022-07-02 03:39:57 UTC
From:
To:
Hi!

[ Reason ]

This request includes several targeted minimal fixes for issues found
in dpkg 1.20.10, including one regression introduced in the security
update.

I mentioned to Adam that I'd prepare two sets of debdiffs, one with just
the regression fix and another one with fixes for the other pending RC
and other fixes. But after checking them, the latter seemed too big for
the amount of time available, and while these have all been in sid for
a while they have not been tested on their own, so I think it's probably
better to postpone those for a next release, that I'll be preparing once
this one is handled. Instead I went with a small set of small targeted
fixes.

[ Impact ]

a) A CI fix, that was causing the branch to fail on salsa.
b) The dpkg-deb change fixes handling for truncated .debs.
c) The virtual fields one fixes a regression in dpkg --showformat.
d) The Dpkg::Source::Package::V2 fixes the regression from the security
   fix. This affects systems with "unusual" umasks.

[ Tests ]

a) The CI for that branch is green again. :)
b) The commit includes functional tests.
c) Running dpkg-deb --showformat with a virtual field now works again.
d) The lintian test suite was executed successfully.

[ Risks ]

The set of changes cherry-picked is focused and easily verifiable.
Any bigger/riskier change has been left out.

[ Checklist ]

  [√] *all* changes are documented in the d/changelog
  [√] I reviewed all changes and I approve them
  [√] attach debdiff against the package in (old)stable
  [√] the issue is verified as fixed in unstable

[ Changes ]

The git log is included in the debdiff, which I'm attaching in its full
compressed form with no filtering applied.

[ Other info ]

None.

Thanks,
Guillem

#1014206#10
Date:
2022-07-02 09:04:04 UTC
From:
To:
Control: tags -1 + confirmed

Please go ahead, thanks, bearing in mind that we'll be closing the
window for 11.4 during Sunday.

Regards,

Adam

#1014206#17
Date:
2022-07-02 17:15:54 UTC
From:
To:
package release.debian.org
tags 1014206 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==============

Package: dpkg
Version: 1.20.11

Explanation: dpkg-deb: Fix unexpected end of file conditions on .deb extract; libdpkg: Do not restrict source:* virtual fields to installed packages; Dpkg::Source::Package::V2: Always fix the permissions for upstream tarballs (regression from DSA-5147-1]

#1014206#22
Date:
2022-07-02 17:15:54 UTC
From:
To:
package release.debian.org
tags 1014206 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==============

Package: dpkg
Version: 1.20.11

Explanation: dpkg-deb: Fix unexpected end of file conditions on .deb extract; libdpkg: Do not restrict source:* virtual fields to installed packages; Dpkg::Source::Package::V2: Always fix the permissions for upstream tarballs (regression from DSA-5147-1]

#1014206#27
Date:
2022-07-09 10:47:43 UTC
From:
To:
(re-sending with fixed bug numbers)

Hi,

The updates discussed in these bugs were included in today's bullseye
point release.

Regards,

Adam