[pkg-gnupg-maint] Bug#818997: gpgv.exe linked dynamically against zlib1, doesn't allow proper signature verification

[Didier 'OdyX' Raboud]

Package: gpgv-win32
Version: 1.4.20-4
Severity: serious
Tags: d-i

Dear maintainers,

I've noticed that gpgv.exe fails its CI test (debian/tests/gpgv-win32) in
version 1.4.20-4 (-3 and previous work fine):

(This is after adding WINEDEBUG=err+all as prefix to the latest line):

err:menubuilder:init_xdg error looking up the desktop directory
err:module:import_dll Library zlib1.dll (which is needed by L"Z:\\usr\\share\\win32\\gpgv.exe") not found
err:module:LdrInitializeThunk Main exe initialization for L"Z:\\usr\\share\\win32\\gpgv.exe" failed, status c0000135

It seems gpgv-win32 is dynamically linked against zlib1.dll, where it should
probably be statically linked. This appears to be a problem in the dependency
chain.

(By the way, the CI seems to have never run successfully in the last months:
https://ci.debian.net/packages/g/gnupg/unstable/amd64/ …)

Cheers, OdyX


-- System Information:
Debian Release: stretch/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'testing-proposed-updates'), (500, 'proposed-updates'), (500, 'buildd-unstable'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.4.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_CH.UTF-8, LC_CTYPE=fr_CH.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

gpgv-win32 depends on no packages.

gpgv-win32 recommends no packages.

Versions of packages gpgv-win32 suggests:
ii  wine  1.8.1-2

-- no debconf information