Bug#619783: libgmime-2.4-2: PGP/MIME signature verification broken

[Jameson Graef Rollins]

Package: libgmime-2.4-2
Version: 2.4.23-1
Severity: normal

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Since 2.4.23, PGP/MIME signature verification is broken.  Signatures
that were previously reporting GMIME_SIGNATURE_STATUS_GOOD are now
returning some other signature status.

It was determined that the following commit in the gmime source [0] is
the problematic one:

2e2cc177f70088f36dde8127c2f1be58b7606f64

It looks like signer->status is no longer being set for good
signatures for some reason.  It looks like this might be an API
change, but the changelog claims that there are no API changes in
2.4.23.

[0] git://git.gnome.org/gmime

- -- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libgmime-2.4-2 depends on:
ii  libc6                   2.11.2-11        Embedded GNU C Library: Shared lib
ii  libglib2.0-0            2.28.2-1         The GLib library of C routines
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

libgmime-2.4-2 recommends no packages.

libgmime-2.4-2 suggests no packages.

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=1Vsh
-----END PGP SIGNATURE-----