• Bug#1110242: dscverify: no file spec lines in dpkg_1.22.21.dsc

    From Thorsten Glaser@21:1/5 to All on Fri Aug 1 21:20:01 2025
    UGFja2FnZTogZGV2c2NyaXB0cwpWZXJzaW9uOiAyLjI1LjE1ClNldmVyaXR5OiBpbXBvcnRhbnQK RmlsZTogL3Vzci9iaW4vZHNjdmVyaWZ5ClgtRGViYnVncy1DYzogdGdAbWlyYnNkLmRlCgp0Z0B0 Z2IxOi90bXAgJCBkZ2V0IGh0dHA6Ly9kZWIuZGViaWFuLm9yZy9kZWJpYW4vcG9vbC9tYWluL2Qv ZHBrZy9kcGtnXzEuMjIuMjEuZHNjICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCmRnZXQ6 IHJldHJpZXZpbmcgaHR0cDovL2RlYi5kZWJpYW4ub3JnL2RlYmlhbi9wb29sL21haW4vZC9kcGtn L2Rwa2dfMS4yMi4yMS5kc2MKICAlIFRvdGFsICAgICUgUmVjZWl2ZWQgJSBYZmVyZCAgQXZlcmFn ZSBTcGVlZCAgIFRpbWUgICAgVGltZSAgICAgVGltZSAgQ3VycmVudAogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBEbG9hZCAgVXBsb2FkICAgVG90YWwgICBTcGVudCAgICBMZWZ0ICBT cGVlZAoxMDAgIDM0NDkgIDEwMCAgMzQ0OSAgICAwICAgICAwICAxNzYyNiAgICAgIDAgLS06LS06 LS0gLS06LS06LS0gLS06LS06LS0gMTc2ODcKZGdldDogcmV0cmlldmluZyBodHRwOi8vZGViLmRl Ymlhbi5vcmcvZGViaWFuL3Bvb2wvbWFpbi9kL2Rwa2cvZHBrZ18xLjIyLjIxLnRhci54egogICUg VG90YWwgICAgJSBSZWNlaXZlZCAlIFhmZXJkICBBdmVyYWdlIFNwZWVkICAgVGltZSAgICBUaW1l ICAgICBUaW1lICBDdXJyZW50CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIERsb2Fk ICBVcGxvYWQgICBUb3RhbCAgIFNwZW50ICAgIExlZnQgIFNwZWVkCjEwMCA1NjA5ayAgMTAwIDU2 MDlrICAgIDAgICAgIDAgICA2NjJrICAgICAgMCAgMDowMDowOCAgMDowMDowOCAtLTotLTotLSAg NjgzawpkcGtnXzEuMjIuMjEuZHNjOgogICAgICBHb29kIHNpZ25hdHVyZSBmb3VuZApkc2N2ZXJp Znk6IG5vIGZpbGUgc3BlYyBsaW5lcyBpbiBkcGtnXzEuMjIuMjEuZHNjClZhbGlkYXRpb24gRkFJ TEVEISEKdGdAdGdiMTovdG1wICQgZHNjdmVyaWZ5IGRwa2dfMS4yMi4yMS5kc2MKZHBrZ18xLjIy LjIxLmRzYzoKICAgICAgR29vZCBzaWduYXR1cmUgZm91bmQKZHNjdmVyaWZ5OiBubyBmaWxlIHNw ZWMgbGluZXMgaW4gZHBrZ18xLjIyLjIxLmRzYwpWYWxpZGF0aW9uIEZBSUxFRCEhCjF8dGdAdGdi MTovdG1wICQgZHNjdmVyaWZ5IC0tbm9zaWdjaGVjayBkcGtnXzEuMjIuMjEuZHNjIApkcGtnXzEu MjIuMjEuZHNjOgogICB2YWxpZGF0aW5nIGRwa2dfMS4yMi4yMS50YXIueHoKQWxsIGZpbGVzIHZh bGlkYXRlZCBzdWNjZXNzZnVsbHkuCgoKVGhpcyBpc+KApiBxdWl0ZSBoaW5kZXJpbmcuCgoKLS0g UGFja2FnZS1zcGVjaWZpYyBpbmZvOgoKLS0tIC9ldGMvZGV2c2NyaXB0cy5jb25mIC0tLQpFbXB0 eS4KCi0tLSB+Ly5kZXZzY3JpcHRzIC0tLQpERUJDSEFOR0VfQVVUT19OTVU9bm8KREVCQ0hBTkdF X01BSU5UVFJBSUxFUj1ubwpERUJDSEFOR0VfTVVMVElNQUlOVF9NRVJHRT15ZXMKUk1BRElTT05f VVJMX01BUF91ZGRhbGw9aHR0cHM6Ly9xYS5kZWJpYW4ub3JnL2NnaS1iaW4vbWFkaXNvbi5jZ2k/ dGFibGU9YWxsClJNQURJU09OX1VSTF9NQVBfdWRkbmV3PWh0dHBzOi8vcWEuZGViaWFuLm9yZy9j Z2ktYmluL21hZGlzb24uY2dpP3RhYmxlPW5ldwpSTUFESVNPTl9VUkxfTUFQX3VkZGRlYmlhbj1o dHRwczovL3FhLmRlYmlhbi5vcmcvY2dpLWJpbi9tYWRpc29uLmNnaT90YWJsZT1kZWJpYW4KUk1B RElTT05fVVJMX01BUF91ZGRkZXJpdnM9aHR0cHM6Ly9xYS5kZWJpYW4ub3JnL2NnaS1iaW4vbWFk aXNvbi5jZ2k/dGFibGU9ZGVyaXZhdGl2ZXMKUk1BRElTT05fVVJMX01BUF91ZGR1YnVudHU9aHR0 cHM6Ly9xYS5kZWJpYW4ub3JnL2NnaS1iaW4vbWFkaXNvbi5jZ2k/dGFibGU9dWJ1bnR1ClJNQURJ U09OX1VSTF9NQVBfYXJjaGl2ZT1odHRwczovL3FhLmRlYmlhbi5vcmcvY2dpLWJpbi9tYWRpc29u LmNnaT90YWJsZT1hcmNoaXZlZApSTUFESVNPTl9VUkxfTUFQX3BvcnRzPWh0dHBzOi8vcWEuZGVi aWFuLm9yZy9jZ2ktYmluL21hZGlzb24uY2dpP3RhYmxlPXBvcnRzCgotLSBTeXN0ZW0gSW5mb3Jt YXRpb246CkRlYmlhbiBSZWxlYXNlOiAxMy4wCiAgQVBUIHByZWZlcnMgdGVzdGluZy1zZWN1cml0 eQogIEFQVCBwb2xpY3k6ICg1MDAsICd0ZXN0aW5nLXNlY3VyaXR5JyksICg1MDAsICd0ZXN0aW5n LXByb3Bvc2VkLXVwZGF0ZXMnKSwgKDUwMCwgJ3Rlc3RpbmcnKQpBcmNoaXRlY3R1cmU6IGFtZDY0 ICh4ODZfNjQpCgpLZXJuZWw6IExpbnV4IDYuMTIuMzgrZGViMTMtYW1kNjQgKFNNUCB3LzE2IENQ VSB0aHJlYWRzOyBQUkVFTVBUKQpLZXJuZWwgdGFpbnQgZmxhZ3M6IFRBSU5UX09PVF9NT0RVTEUs IFRBSU5UX1VOU0lHTkVEX01PRFVMRQpMb2NhbGU6IExBTkc9Qy5VVEYtOCwgTENfQ1RZUEU9Qy5V VEYtOCAoY2hhcm1hcD1VVEYtOCksIExBTkdVQUdFIG5vdCBzZXQKU2hlbGw6IC9iaW4vc2ggbGlu a2VkIHRvIC91c3IvYmluL2Rhc2gKSW5pdDogc3lzdmluaXQgKHZpYSAvc2Jpbi9pbml0KQoKVmVy c2lvbnMgb2YgcGFja2FnZXMgZGV2c2NyaXB0cyBkZXBlbmRzIG9uOgppaSAgZHBrZy1kZXYgICAg ICAgICAgICAgIDEuMjIuMjEKaWkgIGZpbGUgICAgICAgICAgICAgICAgICAxOjUuNDYtNQppaSAg Z3BnICAgICAgICAgICAgICAgICAgIDIuNC43LTIxK2IyCmlpICBncGctYWdlbnQgICAgICAgICAg ICAgMi40LjctMjErYjIKaWkgIGdwZ3YgICAgICAgICAgICAgICAgICAyLjQuNy0yMStiMgppaSAg bGliZHBrZy1wZXJsICAgICAgICAgIDEuMjIuMjEKaWkgIGxpYmZpbGUtZGlybGlzdC1wZXJsICAw LjA1LTMKaWkgIGxpYmZpbGUtaG9tZWRpci1wZXJsICAxLjAwNi0yCmlpICBsaWJmaWxlLXRvdWNo LXBlcmwgICAgMC4xMi0yCmlpICBsaWJtb28tcGVybCAgICAgICAgICAgMi4wMDUwMDUtMQppaSAg bGlid3d3LXBlcmwgICAgICAgICAgIDYuNzgtMQppaSAgcGF0Y2h1dGlscyAgICAgICAgICAgIDAu NC4yLTEKaWkgIHBlcmwgICAgICAgICAgICAgICAgICA1LjQwLjEtNgppaSAgcHl0aG9uMyAgICAg ICAgICAgICAgIDMuMTMuNS0xCmlpICBzZW5zaWJsZS11dGlscyAgICAgICAgMC4wLjI1CmlpICB3 ZGlmZiAgICAgICAgICAgICAgICAgMS4yLjItOQoKVmVyc2lvbnMgb2YgcGFja2FnZXMgZGV2c2Ny aXB0cyByZWNvbW1lbmRzOgppaSAgYXB0ICAgICAgICAgICAgICAgICAgICAgICAgIDMuMC4zCmlp ICBjdXJsICAgICAgICAgICAgICAgICAgICAgICAgOC4xNC4xLTIKaWkgIGRjdHJsLXRvb2xzICAg ICAgICAgICAgICAgICAyLjI0LTMrYjEKaWkgIGRlYmlhbi1rZXlyaW5nICAgICAgICAgICAgICAy MDI1LjA3LjI2CnBuICBkZWJpYW4tdGFnMnVwbG9hZC1rZXlyaW5nICAgPG5vbmU+CnBuICBkcHV0 IHwgZHVwbG9hZCAgICAgICAgICAgICAgPG5vbmU+CnBuICBlcXVpdnMgICAgICAgICAgICAgICAg ICAgICAgPG5vbmU+CnBuICBsaWJkaXN0cm8taW5mby1wZXJsICAgICAgICAgPG5vbmU+CmlpICBs aWJlbmNvZGUtbG9jYWxlLXBlcmwgICAgICAgMS4wNS0zCnBuICBsaWJnaXQtd3JhcHBlci1wZXJs ICAgICAgICAgPG5vbmU+CnBuICBsaWJnaXRsYWItYXBpLXY0LXBlcmwgICAgICAgPG5vbmU+CnBu ICBsaWJqc29uLXBlcmwgICAgICAgICAgICAgICAgPG5vbmU+CnBuICBsaWJsaXN0LWNvbXBhcmUt cGVybCAgICAgICAgPG5vbmU+CmlpICBsaWJsd3AtcHJvdG9jb2wtaHR0cHMtcGVybCAgNi4xNC0x CnBuICBsaWJzb2FwLWxpdGUtcGVybCAgICAgICAgICAgPG5vbmU+CnBuICBsaWJzdHJpbmctc2hl bGxxdW90ZS1wZXJsICAgPG5vbmU+CmlpICBsaWJ0cnktdGlueS1wZXJsICAgICAgICAgICAgMC4z Mi0xCmlpICBsaWJ1cmktcGVybCAgICAgICAgICAgICAgICAgNS4zMC0xCnBuICBsaWNlbnNlY2hl Y2sgICAgICAgICAgICAgICAgPG5vbmU+CnBuICBsaW50aWFuICAgICAgICAgICAgICAgICAgICAg PG5vbmU+CnBuICBsemlwICAgICAgICAgICAgICAgICAgICAgICAgPG5vbmU+CmlpICBtYW4tZGIg ICAgICAgICAgICAgICAgICAgICAgMi4xMy4xLTEKaWkgIHBhdGNoICAgICAgICAgICAgICAgICAg ICAgICAyLjgtMgpwbiAgcHJpc3RpbmUtdGFyICAgICAgICAgICAgICAgIDxub25lPgppaSAgcHl0 aG9uMy1hcHQgICAgICAgICAgICAgICAgIDMuMC4wCmlpICBweXRob24zLWRlYmlhbiAgICAgICAg ICAgICAgMS4wLjEKcG4gIHB5dGhvbjMtbWFnaWMgICAgICAgICAgICAgICA8bm9uZT4KaWkgIHB5 dGhvbjMtcmVxdWVzdHMgICAgICAgICAgICAyLjMyLjMrZGZzZy01CnBuICBweXRob24zLXVuaWRp ZmYgICAgICAgICAgICAgPG5vbmU+CnBuICBweXRob24zLXhkZyAgICAgICAgICAgICAgICAgPG5v bmU+CmlpICBzdHJhY2UgICAgICAgICAgICAgICAgICAgICAgNi4xMytkcy0xCmlpICB1bnppcCAg ICAgICAgICAgICAgICAgICAgICAgNi4wLTI5CmlpICB3Z2V0ICAgICAgICAgICAgICAgICAgICAg ICAgMS4yNS4wLTIKaWkgIHh6LXV0aWxzICAgICAgICAgICAgICAgICAgICA1LjguMS0xCgpWZXJz aW9ucyBvZiBwYWNrYWdlcyBkZXZzY3JpcHRzIHN1Z2dlc3RzOgpwbiAgYWRlcXVhdGUgICAgICAg ICAgICAgICAgICAgICA8bm9uZT4KaWkgIGF0ICAgICAgICAgICAgICAgICAgICAgICAgICAgMy4y LjUtMi4yCnBuICBhdXRvcGtndGVzdCAgICAgICAgICAgICAgICAgIDxub25lPgpwbiAgYmxzLXN0 YW5kYWxvbmUgICAgICAgICAgICAgICA8bm9uZT4KaWkgIGJzZC1tYWlseCBbbWFpbHhdICAgICAg ICAgICAgOC4xLjItMC4yMDIyMDQxMmN2cy0xLjEKaWkgIGJ1aWxkLWVzc2VudGlhbCAgICAgICAg ICAgICAgMTIuMTIKcG4gIGNoZWNrLWFsbC10aGUtdGhpbmdzICAgICAgICAgPG5vbmU+CnBuICBk ZWJoZWxwZXIgICAgICAgICAgICAgICAgICAgIDxub25lPgpwbiAgZGlmZm9zY29wZSAgICAgICAg ICAgICAgICAgICA8bm9uZT4KcG4gIGRpc29yZGVyZnMgICAgICAgICAgICAgICAgICAgPG5vbmU+ CnBuICBkb2NrZXIuaW8gICAgICAgICAgICAgICAgICAgIDxub25lPgpwbiAgZG9zZS1leHRyYSAg ICAgICAgICAgICAgICAgICA8bm9uZT4KcG4gIGR1Y2sgICAgICAgICAgICAgICAgICAgICAgICAg PG5vbmU+CnBuICBlbHBhLWRldnNjcmlwdHMgICAgICAgICAgICAgIDxub25lPgpwbiAgZmFrZXRp bWUgICAgICAgICAgICAgICAgICAgICA8bm9uZT4KcG4gIGdudXBsb3QgICAgICAgICAgICAgICAg ICAgICAgPG5vbmU+CnBuICBob3ctY2FuLWktaGVscCAgICAgICAgICAgICAgIDxub25lPgpwbiAg bGliYXV0aGVuLXNhc2wtcGVybCAgICAgICAgICA8bm9uZT4KcG4gIGxpYmRiZC1wZy1wZXJsICAg ICAgICAgICAgICAgPG5vbmU+CnBuICBsaWJ0ZXJtLXNpemUtcGVybCAgICAgICAgICAgIDxub25l PgppaSAgbGlidGltZWRhdGUtcGVybCAgICAgICAgICAgICAyLjMzMDAtMgpwbiAgbGlieWFtbC1s aWJ5YW1sLXBlcmwgICAgICAgICA8bm9uZT4KcG4gIG1tZGVic3RyYXAgICAgICAgICAgICAgICAg ICAgPG5vbmU+CnBuICBtdXR0ICAgICAgICAgICAgICAgICAgICAgICAgIDxub25lPgppaSAgb3Bl bnNzaC1jbGllbnQgW3NzaC1jbGllbnRdICAxOjEwLjBwMS01CnBuICBwaXVwYXJ0cyAgICAgICAg ICAgICAgICAgICAgIDxub25lPgpwbiAgcG9zdGdyZXNxbC1jbGllbnQgICAgICAgICAgICA8bm9u ZT4KcG4gIHByaXN0aW5lLWxmcyAgICAgICAgICAgICAgICAgPG5vbmU+CmlpICBweXRob24zLWRl YmlhbmJ0cyAgICAgICAgICAgIDQuMS4xCnBuICBweXRob24zLXB5Y3VybCAgICAgICAgICAgICAg IDxub25lPgppaSAgcXVpbHQgICAgICAgICAgICAgICAgICAgICAgICAwLjY4LTEKcG4gIHJhdHQg ICAgICAgICAgICAgICAgICAgICAgICAgPG5vbmU+CnBuICByZXByb3Rlc3QgICAgICAgICAgICAg ICAgICAgIDxub25lPgpwbiAgc3ZuLWJ1aWxkcGFja2FnZSAgICAgICAgICAgICA8bm9uZT4KcG4g IHczbSAgICAgICAgICAgICAgICAgICAgICAgICAgPG5vbmU+CgotLSBubyBkZWJjb25mIGluZm9y bWF0aW9uCg==

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Chris Hofstaedtler@21:1/5 to Thorsten Glaser on Fri Aug 1 22:00:02 2025
    Control: tags -1 + moreinfo

    On Fri, Aug 01, 2025 at 09:10:15PM +0200, Thorsten Glaser wrote:
    Version: 2.25.15

    tg@tgb1:/tmp $ dget http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc
    dget: retrieving http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc
    % Total % Received % Xferd Average Speed Time Time Time Current
    Dload Upload Total Spent Left Speed 100 3449 100 3449 0 0 17626 0 --:--:-- --:--:-- --:--:-- 17687
    dget: retrieving http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.tar.xz
    % Total % Received % Xferd Average Speed Time Time Time Current
    Dload Upload Total Spent Left Speed 100 5609k 100 5609k 0 0 662k 0 0:00:08 0:00:08 --:--:-- 683k
    dpkg_1.22.21.dsc:
    Good signature found
    dscverify: no file spec lines in dpkg_1.22.21.dsc
    Validation FAILED!!
    tg@tgb1:/tmp $ dscverify dpkg_1.22.21.dsc
    dpkg_1.22.21.dsc:
    Good signature found
    dscverify: no file spec lines in dpkg_1.22.21.dsc
    Validation FAILED!!

    I cannot reproduce this. A minimal working example:

    mmdebstrap --include=devscripts,curl,debian-keyring --chrooted-customize-hook='dget http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc && dscverify dpkg_1.22.21.dsc' testing /dev/null

    I: running --chrooted-customize-hook in shell: sh -c 'dget http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc && dscverify dpkg_1.22.21.dsc'
    dget: retrieving http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc
    % Total % Received % Xferd Average Speed Time Time Time Current
    Dload Upload Total Spent Left Speed 100 3449 100 3449 0 0 12721 0 --:--:-- --:--:-- --:--:-- 12726 dget: retrieving http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.tar.xz
    % Total % Received % Xferd Average Speed Time Time Time Current
    Dload Upload Total Spent Left Speed 100 5609k 100 5609k 0 0 3026k 0 0:00:01 0:00:01 --:--:-- 3025k dpkg_1.22.21.dsc:
    Good signature found
    validating dpkg_1.22.21.tar.xz
    All files validated successfully.
    dpkg-source: info: extracting dpkg in dpkg-1.22.21
    dpkg-source: info: unpacking dpkg_1.22.21.tar.xz
    dpkg_1.22.21.dsc:
    Good signature found
    validating dpkg_1.22.21.tar.xz
    All files validated successfully.


    dscverify supposedly calls gpg to verify the signatures, and then uses the output as the .dsc contents. Maybe gpg is broken on your system.

    Chris

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)