--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: unnecessarily drags in debian-archive-keyring and gnupg
- From: Robert Millan <rmh@aybabtu.com>
- Date: Sat, 24 Nov 2007 10:35:17 +0100
- Message-id: <20071124093517.26338.66077.reportbug@thorin>
Package: apt
Version: 0.7.9
Severity: normal
Tags: patch
apt depends on debian-archive-keyring, but it doesn't really need it, since
/usr/share/apt/debian-archive.gpg is already part of the apt package.
In turn, debian-archive-keyring depends on gnupg, which is only needed to
make apt-key useful. But apt-key doesn't provide essential functionality
in apt, since the debian archive key is already loaded. For performing the
actual verification, gpgv should be enough.
See attached patch (also corrects a minor mistake in a gpgv method error
message).
-- System Information:
Debian Release: lenny/sid
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-5-amd64
Locale: LANG=ca_AD.UTF-8, LC_CTYPE=ca_AD.UTF-8 (charmap=UTF-8)
Versions of packages apt depends on:
ii debian-archive-keyring 2007.07.31~etch1 GnuPG archive keys of the Debian a
ii libc6 2.3.6.ds1-13etch2 GNU C Library: Shared libraries
ii libgcc1 1:4.1.1-21 GCC support library
ii libstdc++6 4.1.1-21 The GNU Standard C++ Library v3
apt recommends no packages.
-- no debconf information
diff -urp apt-0.7.9.old/debian/control apt-0.7.9/debian/control
--- apt-0.7.9.old/debian/control 2007-07-31 01:26:07.000000000 +0200
+++ apt-0.7.9/debian/control 2007-11-24 10:28:12.000000000 +0100
@@ -10,11 +10,11 @@ XS-Vcs-Bzr: http://bzr.debian.org/apt/de
Package: apt
Architecture: any
-Depends: ${shlibs:Depends}, debian-archive-keyring
+Depends: ${shlibs:Depends}, gpgv
Priority: important
Replaces: libapt-pkg-doc (<< 0.3.7), libapt-pkg-dev (<< 0.3.7)
Provides: ${libapt-pkg:provides}
-Suggests: aptitude | synaptic | gnome-apt | wajig, dpkg-dev, apt-doc, bzip2, lzma
+Suggests: aptitude | synaptic | gnome-apt | wajig, dpkg-dev, apt-doc, bzip2, lzma, debian-archive-keyring
Section: admin
Description: Advanced front-end for dpkg
This is Debian's next generation front-end for the dpkg package manager.
diff -urp apt-0.7.9.old/methods/gpgv.cc apt-0.7.9/methods/gpgv.cc
--- apt-0.7.9.old/methods/gpgv.cc 2007-10-02 14:34:38.000000000 +0200
+++ apt-0.7.9/methods/gpgv.cc 2007-11-24 10:26:15.000000000 +0100
@@ -210,7 +210,7 @@ string GPGVMethod::VerifyGetSigners(cons
}
else if (WEXITSTATUS(status) == 111)
{
- ioprintf(ret, _("Could not execute '%s' to verify signature (is gnupg installed?)"), gpgvpath.c_str());
+ ioprintf(ret, _("Could not execute '%s' to verify signature (is gpgv installed?)"), gpgvpath.c_str());
return ret.str();
}
else
--- End Message ---
--- Begin Message ---
Source: apt
Source-Version: 0.7.11
We believe that the bug you reported is fixed in the latest version of
apt, which is due to be installed in the Debian FTP archive:
apt-doc_0.7.11_all.deb
to pool/main/a/apt/apt-doc_0.7.11_all.deb
apt-transport-https_0.7.11_amd64.deb
to pool/main/a/apt/apt-transport-https_0.7.11_amd64.deb
apt-utils_0.7.11_amd64.deb
to pool/main/a/apt/apt-utils_0.7.11_amd64.deb
apt_0.7.11.dsc
to pool/main/a/apt/apt_0.7.11.dsc
apt_0.7.11.tar.gz
to pool/main/a/apt/apt_0.7.11.tar.gz
apt_0.7.11_amd64.deb
to pool/main/a/apt/apt_0.7.11_amd64.deb
libapt-pkg-dev_0.7.11_amd64.deb
to pool/main/a/apt/libapt-pkg-dev_0.7.11_amd64.deb
libapt-pkg-doc_0.7.11_all.deb
to pool/main/a/apt/libapt-pkg-doc_0.7.11_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 452640@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Otavio Salvador <otavio@debian.org> (supplier of updated apt package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Thu, 17 Jan 2008 22:36:46 -0200
Source: apt
Binary: apt apt-doc libapt-pkg-dev libapt-pkg-doc apt-utils apt-transport-https
Architecture: source all amd64
Version: 0.7.11
Distribution: unstable
Urgency: critical
Maintainer: APT Development Team <deity@lists.debian.org>
Changed-By: Otavio Salvador <otavio@debian.org>
Description:
apt - Advanced front-end for dpkg
apt-doc - Documentation for APT
apt-transport-https - APT https transport
apt-utils - APT utility programs
libapt-pkg-dev - Development files for APT's libapt-pkg and libapt-inst
libapt-pkg-doc - Documentation for APT development
Closes: 448430 452640 460825 461166 461468 464575 465866 466052
Changes:
apt (0.7.11) unstable; urgency=critical
.
[ Raise urgency to critical since it fixes a critical but for Debian
Installer Lenny Beta1 release ]
.
[ Program translations ]
- Vietnamese updated. Closes: #460825
- Basque updated. Closes: #461166
- Galician updated. Closes: #461468
- Portuguese updated. Closes: #464575
- Korean updated. Closes: #448430
- Simplified Chinese updated. Closes: #465866
.
[ Otavio Salvador ]
* Applied patch from Robert Millan <rmh@aybabtu.com> to fix the error
message when gpgv isn't installed, closes: #452640.
* Fix regression about APT::Get::List-Cleanup setting being ignored,
closes: #466052.
Files:
4ae334817bb3823289bb473c6cd65318 941 admin important apt_0.7.11.dsc
c4dbb11e27ff2bb7c03fb287cad84e2d 1935365 admin important apt_0.7.11.tar.gz
d5b83b455591d8d768e1df6cf36b948f 92154 doc optional apt-doc_0.7.11_all.deb
ad7cb7df8aa84d242192802cc3666d73 114972 doc optional libapt-pkg-doc_0.7.11_all.deb
4ea76ce08baef71dde5b742bcb572d47 1621912 admin important apt_0.7.11_amd64.deb
a4e22f7b0e2f907fec4ec28ef2168330 103314 libdevel optional libapt-pkg-dev_0.7.11_amd64.deb
24d0969a0b6280b514f3a0d5cec488c3 193858 admin important apt-utils_0.7.11_amd64.deb
6f95899052845125be9173302da5cc75 53890 admin optional apt-transport-https_0.7.11_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFHt2mZLqiZQEml+FURAvQiAKCr3/vBanG1MdS5BK0Lgf7tGe9YUwCgmmMd
fLxmcLQ3XanAW6OE74WlG6A=
=ZkzG
-----END PGP SIGNATURE-----
--- End Message ---