[Pkg-auth-maintainers] Bug#1102516: yubikey-manager_5.6.1-1_all-buildd.changes REJECTED

[Patrick Winnertz]

Hey Aurel,

jupp - I've already filled a bug upstream. Yubico messed the original 
tar.gz up - all files have a invalid timestamp. See here: 
https://github.com/Yubico/yubikey-manager/issues/665

As they always sign their releases and I didn't want to invalidate the 
signature (as yubikeys are kind of security related) I did not changed 
it, but requested a updated upstream package.

With best regards
Patrick


On 09.04.25 22:28, Aurelien Jarno wrote:
> Source: yubikey-manager
> Version: 5.6.1-1
> Severity: serious
> 
> On 2025-04-09 19:57, Debian FTP Masters wrote:
>>
>>
>> python3-ykman_5.6.1-1_all.deb: has 1 file(s) with a timestamp too far in the past:
>>    usr/share/doc/python3-ykman/changelog.gz (Thu Jan  1 00:00:00 1970)
>>
>>
>>
>> ===
>>
>> Please feel free to respond to this email if you don't understand why
>> your files were rejected, or if you upload new files which address our
>> concerns.
>>

-- 
  ⢀⣴⠾⠻⢶⣦⠀
  ⣾⠁⢠⠒⠀⣿⡁  winnie at debian.org/patrick at winnertz.eu
  ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: 8D208172388840811B85DA1CC6D50A4188C70E43
  ⠈⠳⣄

The people who refer to the pandemic in the past tense and climate 
change in the future tense are the reason everything is going to shit.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xC6D50A4188C70E43.asc
Type: application/pgp-keys
Size: 13437 bytes
Desc: OpenPGP public key
URL: <http://alioth-lists.debian.net/pipermail/pkg-auth-maintainers/attachments/20250409/e217cdea/attachment-0001.asc>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-auth-maintainers/attachments/20250409/e217cdea/attachment-0001.sig>