Bug#827487: bytes-circle_2.2-1_amd64.changes REJECTED
On Tue, Jun 21, 2016 at 09:38:46AM +0200, Roberto S. Galende wrote:
> Hi Adam,
> It appears as just amd64, when it's marked "any", but I don't know if it'll
> be compiled for other architectures or I'm just too impatient :-)
It will, you can watch the current progress, failures and logs at:
https://buildd.debian.org/status/package.php?p=bytes-circle&suite=unstable
Debian is currently moving towards source-only uploads, but at the moment
binaries of at least one architecture are still required for NEW packages.
This is bad, as I could have snuck some nefarious code through, be it
accidentally (like, via having an experimental or out-of-Debian compiler or
a library installed) or to subvert security. Sure, it is possible to sneak
something nasty in the source (the Underhanded C Contest has some nice ideas
how, even in face of thorough review) but it's MASSIVELY easier to do it
undetected by uploading a binary that doesn't correspond to the source.
Thus, you have no assurance bytes-circle:amd64 is untainted.
Any subsequent uploads can be source-only.
Meow!
--
An imaginary friend squared is a real enemy.
Reply to: