b4b1be4c52
dak currently allows a binary upload to include debug symbol packages that don't appear in the overrides file or the Binary field of the changes file, so long as they have the appropriate 'Auto-Built-Package' field and their name matches another binary package in the upload plus the '-dbgsym' suffix. For architectures with code signing enabled, our binary uploads never match this condition as the corresponding binary package has the '-unsigned' suffix and the debug symbols package does not. Since we do list the debug symbol packages in the Binary field, they do get added to the overrides file when accepted through the NEW queue, but they are automatically pruned from there some time later. Later uploads then have to go through NEW even though they are not introducing new binary packages. This would be a big problem for stable security updates. For now, move debug symbols back to the main archive with the old '-dbg' suffix. Keep them enabled for all architectures. |
||
|---|---|---|
| debian | ||