Bug#459148: marked as done (apt-get source does not fetch the source for the current security release)

To: Mike O'Connor <stew@vireo.org>
Subject: Bug#459148: marked as done (apt-get source does not fetch the source for the current security release)
From: owner@bugs.debian.org (Debian Bug Tracking System)
Date: Sat, 05 Jan 2008 01:39:04 +0000
Message-id: <[🔎] handler.459148.D459148.119949706814614.ackdone@bugs.debian.org>
References: <[🔎] 20080105013745.GA9435@tang.vireo.org> <[🔎] 20080104140304.24164.59063.reportbug@ip52.ipax.at>

Your message dated Fri, 4 Jan 2008 20:37:45 -0500
with message-id <[🔎] 20080105013745.GA9435@tang.vireo.org>
and subject line Bug#459148: apt-get source does not fetch the source for the current security release
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---

To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: apt-get source does not fetch the source for the current security release
From: "Raoul Bhatia [IPAX]" <r.bhatia@ipax.at>
Date: Fri, 04 Jan 2008 15:03:04 +0100
Message-id: <[🔎] 20080104140304.24164.59063.reportbug@ip52.ipax.at>

Package: apt
Version: 0.6.46.4-0.1
Severity: normal

$ apt-cache policy php5
php5:
  Installed: (none)
  Candidate: 5.2.0-8+etch9
  Version table:
     5.2.0-8+etch9 0
        900 http://security.debian.org etch/updates/main Packages
     5.2.0-8+etch7 0
        900 http://aptcacher etch/main Packages

but:

$ apt-get source php5
Reading package lists... Done
Building dependency tree... Done
Need to get 8703kB of source archives.
Get:1 http://aptcacher etch/main php5 5.2.0-8+etch7 (dsc) [1976B]
Get:2 http://aptcacher etch/main php5 5.2.0-8+etch7 (tar) [8583kB]
Get:3 http://aptcacher etch/main php5 5.2.0-8+etch7 (diff) [118kB]
Fetched 8703kB in 3s (2793kB/s)
dpkg-source: extracting php5 in php5-5.2.0
dpkg-source: unpacking php5_5.2.0.orig.tar.gz
dpkg-source: applying ./php5_5.2.0-8+etch7.diff.gz

so the security debian upgrade is not honored :-/

btw. i am using apt-cacher to cache packages for all my installations on aptcacher.

cheers,
raoul

-- Package-specific info:

-- apt-config dump --

APT "";
APT::Architecture "i386";
APT::Build-Essential "";
APT::Build-Essential:: "build-essential";
Dir "/";
Dir::State "var/lib/apt/";
Dir::State::lists "lists/";
Dir::State::cdroms "cdroms.list";
Dir::State::userstatus "status.user";
Dir::State::status "/var/lib/dpkg/status";
Dir::Cache "var/cache/apt/";
Dir::Cache::archives "archives/";
Dir::Cache::srcpkgcache "srcpkgcache.bin";
Dir::Cache::pkgcache "pkgcache.bin";
Dir::Etc "etc/apt/";
Dir::Etc::sourcelist "sources.list";
Dir::Etc::sourceparts "sources.list.d";
Dir::Etc::vendorlist "vendors.list";
Dir::Etc::vendorparts "vendors.list.d";
Dir::Etc::main "apt.conf";
Dir::Etc::parts "apt.conf.d";
Dir::Etc::preferences "preferences";
Dir::Bin "";
Dir::Bin::methods "/usr/lib/apt/methods";
Dir::Bin::dpkg "/usr/bin/dpkg";
DPkg "";
DPkg::Pre-Install-Pkgs "";
DPkg::Pre-Install-Pkgs:: "/usr/sbin/dpkg-preconfigure --apt || true";
DPkg::Post-Invoke "";
DPkg::Post-Invoke:: "which dzhandle >/dev/null && dzhandle
restart-pending-instances || true";

-- (/etc/apt/preferences present, but not submitted) --
Package: *
Pin: release o=Debian,a=oldstable
Pin-Priority: 400

Package: *
Pin: release o=Debian,a=stable
Pin-Priority: 900

Package: *
Pin: release o=Debian,a=unstable
Pin-Priority: 300

Package: *
Pin: release o=Debian
Pin-Priority: -1

-- (/etc/apt/sources.list present, but not submitted) --

arge
#deb http://aptcacher/apt-cacher/debian.inode.at/debian/ sarge main
non-free contrib
#deb-src http://aptcacher/apt-cacher/debian.inode.at/debian/ sarge
main non-free contrib

#deb http://aptcacher/apt-cacher/debian.inode.at/debian-non-US
sarge/non-US main contrib non-free
#deb-src http://aptcacher/apt-cacher/debian.inode.at/debian-non-US
sarge/non-US main contrib non-free

deb http://security.debian.org/ sarge/updates main contrib non-free

# etch
deb http://aptcacher/apt-cacher/debian.inode.at/debian/ etch main
non-free contrib
deb-src http://aptcacher/apt-cacher/debian.inode.at/debian/ etch main
non-free contrib

#deb http://aptcacher/apt-cacher/debian.inode.at/debian-non-US
etch/non-US main contrib non-free
#deb-src http://aptcacher/apt-cacher/debian.inode.at/debian-non-US
etch/non-US main contrib non-free

deb http://security.debian.org/ etch/updates main contrib non-free

# php5
#deb http://people.debian.org/~dexter php5 sarge
#deb-src http://people.debian.org/~dexter php5 sarge
#deb http://people.debian.org/~dexter php5.1 sarge
#deb-src http://people.debian.org/~dexter php5.1 sarge

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (900, 'stable'), (300, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.13vs2.0-vs2.0.1-pre2-p4main
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages apt depends on:
ii  debian-archive-keyring 2007.07.31~etch1  GnuPG archive keys of the Debian archive
ii  libc6                  2.3.6.ds1-13etch4 GNU C Library: Shared libraries
ii  libgcc1                1:4.1.1-21        GCC support library
ii  libstdc++6             4.1.1-21          The GNU Standard C++ Library v3

apt recommends no packages.

-- no debconf information

--- End Message ---

--- Begin Message ---

To: 459148-submitter@bugs.debian.org, 459148@bugs.debian.org
Cc: 459148-done@bugs.debian.org
Subject: Re: Bug#459148: apt-get source does not fetch the source for the current security release
From: Mike O'Connor <stew@vireo.org>
Date: Fri, 4 Jan 2008 20:37:45 -0500
Message-id: <[🔎] 20080105013745.GA9435@tang.vireo.org>
In-reply-to: <[🔎] 20080104140304.24164.59063.reportbug@ip52.ipax.at>
References: <[🔎] 20080104140304.24164.59063.reportbug@ip52.ipax.at>

On Fri, Jan 04, 2008 at 03:03:04PM +0100, Raoul Bhatia [IPAX] wrote:
> Package: apt
> Version: 0.6.46.4-0.1
> Severity: normal
> 
> $ apt-cache policy php5
> php5:
>   Installed: (none)
>   Candidate: 5.2.0-8+etch9
>   Version table:
>      5.2.0-8+etch9 0
>         900 http://security.debian.org etch/updates/main Packages
>      5.2.0-8+etch7 0
>         900 http://aptcacher etch/main Packages
> 
> but:
> 
> $ apt-get source php5
> Reading package lists... Done
> Building dependency tree... Done
> Need to get 8703kB of source archives.
> Get:1 http://aptcacher etch/main php5 5.2.0-8+etch7 (dsc) [1976B]
> Get:2 http://aptcacher etch/main php5 5.2.0-8+etch7 (tar) [8583kB]
> Get:3 http://aptcacher etch/main php5 5.2.0-8+etch7 (diff) [118kB]
> Fetched 8703kB in 3s (2793kB/s)
> dpkg-source: extracting php5 in php5-5.2.0
> dpkg-source: unpacking php5_5.2.0.orig.tar.gz
> dpkg-source: applying ./php5_5.2.0-8+etch7.diff.gz
> 
> so the security debian upgrade is not honored :-/
> 
> arge
> #deb http://aptcacher/apt-cacher/debian.inode.at/debian/ sarge main
> non-free contrib
> #deb-src http://aptcacher/apt-cacher/debian.inode.at/debian/ sarge
> main non-free contrib
> 
> #deb http://aptcacher/apt-cacher/debian.inode.at/debian-non-US
> sarge/non-US main contrib non-free
> #deb-src http://aptcacher/apt-cacher/debian.inode.at/debian-non-US
> sarge/non-US main contrib non-free
> 
> deb http://security.debian.org/ sarge/updates main contrib non-free
> 
> # etch
> deb http://aptcacher/apt-cacher/debian.inode.at/debian/ etch main
> non-free contrib
> deb-src http://aptcacher/apt-cacher/debian.inode.at/debian/ etch main
> non-free contrib
> 
> #deb http://aptcacher/apt-cacher/debian.inode.at/debian-non-US
> etch/non-US main contrib non-free
> #deb-src http://aptcacher/apt-cacher/debian.inode.at/debian-non-US
> etch/non-US main contrib non-free
> 
> deb http://security.debian.org/ etch/updates main contrib non-free
> 
> # php5
> #deb http://people.debian.org/~dexter php5 sarge
> #deb-src http://people.debian.org/~dexter php5 sarge
> #deb http://people.debian.org/~dexter php5.1 sarge
> #deb-src http://people.debian.org/~dexter php5.1 sarge
> 


As can be seen above,  you have a deb line for security.debian.org but
you have no corresponding deb-src line,  so apt-get source fetched the
latest source available using "deb-src http://aptcacher/apt-cacher/debian.inode.at/debian/...";

I'm closing as this is not a bug.

thanks,
stew

Attachment: signature.asc
Description: Digital signature

--- End Message ---

Reply to:

References:
- Bug#459148: apt-get source does not fetch the source for the current security release
  - From: Mike O'Connor <stew@vireo.org>
- Bug#459148: apt-get source does not fetch the source for the current security release
  - From: "Raoul Bhatia [IPAX]" <r.bhatia@ipax.at>

Prev by Date: Bug#459148: apt-get source does not fetch the source for the current security release
Next by Date: Bug#149954: Super size means super satisfaction!
Previous by thread: Bug#459148: apt-get source does not fetch the source for the current security release
Next by thread: Planned upload of APT 0.7.10 - 01/07/2008 - Monday
Index(es):
- Date
- Thread