Version in base suite: 5.4.6+really5.3.2-1 Base version: reprepro_5.4.6+really5.3.2-1 Target version: reprepro_5.4.6+really5.3.2-1+deb13u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/r/reprepro/reprepro_5.4.6+really5.3.2-1.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/r/reprepro/reprepro_5.4.6+really5.3.2-1+deb13u1.dsc changelog | 6 ++++++ patches/series | 1 + patches/tracking-data-copying.patch | 26 ++++++++++++++++++++++++++ 3 files changed, 33 insertions(+) dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmp6gg7_dfs/reprepro_5.4.6+really5.3.2-1.dsc: no acceptable signature found dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmp6gg7_dfs/reprepro_5.4.6+really5.3.2-1+deb13u1.dsc: no acceptable signature found diff -Nru reprepro-5.4.6+really5.3.2/debian/changelog reprepro-5.4.6+really5.3.2/debian/changelog --- reprepro-5.4.6+really5.3.2/debian/changelog 2025-03-15 09:40:45.000000000 +0000 +++ reprepro-5.4.6+really5.3.2/debian/changelog 2026-01-12 20:51:27.000000000 +0000 @@ -1,3 +1,9 @@ +reprepro (5.4.6+really5.3.2-1+deb13u1) trixie; urgency=medium + + * Fix incorrect tracking data when copying packages (Closes: #1125255) + + -- Bastian Germann Mon, 12 Jan 2026 21:51:27 +0100 + reprepro (5.4.6+really5.3.2-1) unstable; urgency=medium * Recover after bad multiple versions upload (see: #1095493) diff -Nru reprepro-5.4.6+really5.3.2/debian/patches/series reprepro-5.4.6+really5.3.2/debian/patches/series --- reprepro-5.4.6+really5.3.2/debian/patches/series 1970-01-01 00:00:00.000000000 +0000 +++ reprepro-5.4.6+really5.3.2/debian/patches/series 2026-01-12 20:51:27.000000000 +0000 @@ -0,0 +1 @@ +tracking-data-copying.patch diff -Nru reprepro-5.4.6+really5.3.2/debian/patches/tracking-data-copying.patch reprepro-5.4.6+really5.3.2/debian/patches/tracking-data-copying.patch --- reprepro-5.4.6+really5.3.2/debian/patches/tracking-data-copying.patch 1970-01-01 00:00:00.000000000 +0000 +++ reprepro-5.4.6+really5.3.2/debian/patches/tracking-data-copying.patch 2026-01-12 20:51:27.000000000 +0000 @@ -0,0 +1,26 @@ +From: Miao Wang +Date: Sun, 11 Jan 2026 21:09:03 +0800 +Subject: Fix incorrect tracking data when copying packages + +Tracking database should contain codename, source package name and +source version as the key and the containing files as the value in the +tracking database. When packages are copied between codenames, it +incorrectly uses binary package version, causing inconsistency between +the package database and the tracking database. +--- + copypackages.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/copypackages.c b/copypackages.c +index 4598fd38..e47686a3 100644 +--- a/copypackages.c ++++ b/copypackages.c +@@ -262,7 +262,7 @@ static retvalue package_add(struct distribution *into, /*@null@*/trackingdb trac + return RET_ERROR_INTERRUPTED; + if (tracks != NULL) { + r = trackingdata_summon(tracks, package->sourcename, +- package->version, &trackingdata); ++ package->sourceversion, &trackingdata); + if (RET_WAS_ERROR(r)) + return r; + }