After submitting an asterisk version with a version lower than the previous one, the packaging-farm created an inconsistent repository. The existing version was
7:1.8.7.0-rc2+pf.xivo.1.2-dev~20110920.204610.607e0bf-1+build2
and the version being submitted was
7:1.8.7.0+pf.xivo.1.2-dev~20110924.082902.5239407-1
According to dpkg –compare-versions, the version being submitted is actually older than the release candidate -rc2, because – is after + lexicographicaly. This is a mistake and should be replaced by a version number that is higher than the -rc2. But packaging-farm silently ignored the problem and created a bugous package, mixing the sources being submitted with a version number coming from the existing version.A safeguard was added and packaging-farm will now abort with an error message explaining the error and suggesting a course of action.
The 2.0.15 was published and installed on the gallifrey, gallifrey-dev and skaro build machines.
Continue reading “Safeguard against downgrades in XIVO packages”