[Bug 1587667] Re: Import from Debian fails for source packages with included tarball .asc

[Chris J Arges]

Hello Jeremy, or anyone else affected,

Accepted dpkg into trusty-proposed. The package will build now and be
available at https://launchpad.net/ubuntu/+source/dpkg/1.17.5ubuntu5.7
in a few hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed.  Your feedback will aid us getting this update
out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, and change the tag
from verification-needed to verification-done. If it does not fix the
bug for you, please add a comment stating that, and change the tag to
verification-failed.  In either case, details of your testing will help
us make a better decision.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance!

** Changed in: dpkg (Ubuntu Trusty)
       Status: In Progress => Fix Committed

** Tags added: verification-needed

** Changed in: dpkg (Ubuntu Precise)
       Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to dpkg in Ubuntu.
https://bugs.launchpad.net/bugs/1587667

Title:
  Import from Debian fails for source packages with included tarball
  .asc

Status in Launchpad itself:
  Fix Committed
Status in dpkg package in Ubuntu:
  Fix Released
Status in dpkg source package in Precise:
  Fix Committed
Status in dpkg source package in Trusty:
  Fix Committed
Status in dpkg source package in Xenial:
  Fix Released

Bug description:
  SRU justification:

  [Impact] Launchpad can't import some source packages from Debian unstable.  The fix is to cherry-pick changes from unstable that support unpacking (but, for minimality, not creating) such source packages.
  [Test Case] For the format 3.0 case, download the limnoria source package from Debian unstable and unpack it with "dpkg-source -x".  For the format 1.0 case, there are no examples as yet in unstable, but it's easy to construct one: download a 1.0 package (e.g. makepasswd), sign its .orig.tar.gz with "gpg --armor --clearsign", rebuild the source package using unstable's toolchain, and then try to unpack it with "dpkg-source -x" in precise/trusty.
  [Regression Potential] Confined to "dpkg-source -x", so it should be sufficient to check that unpacking packages without .orig.*.asc still works.

  Original report follows:

  https://launchpad.net/debian/+source/vlc/ is missing Debian branches
  for sid and stretch.

  This then also breaks auto-sync of some of Debian's packages to
  Ubuntu's development branch.

  This is apparently what broke the auto-import:

  dpkg-source: error: unrecognized file for a v2.0 source package:
  vlc_2.2.3.orig.tar.xz.asc

  See this discussion about including .asc files in Debian source packages which requires dpkg to be updated:
  https://lists.debian.org/debian-dpkg/2016/05/msg00041.html

  Initial discussion:
  http://irclogs.ubuntu.com/2016/05/31/%23ubuntu-devel.html#t22:44

To manage notifications about this bug go to:
https://bugs.launchpad.net/launchpad/+bug/1587667/+subscriptions