Your message dated Thu, 17 Aug 2017 21:04:50 +0000
with message-id <[email protected]>
and subject line Bug#872460: fixed in gcab 0.7-4
has caused the Debian Bug report #872460,
regarding gcab: please make the output reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
872460: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=872460
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: gcab
Version: 0.7-3
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timezone toolchain
X-Debbugs-Cc: [email protected]
Hi,
Whilst working on the Reproducible Builds effort [0], we noticed
that gcab generates .cab files that are not reproducible. This
affects packages such as fwupd.
This is because the embedded dates are encoded with the current
timezone.
Patch attached.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
diff --git a/libgcab/gcab-file.c b/libgcab/gcab-file.c
index b55fbb5..e367610 100644
--- a/libgcab/gcab-file.c
+++ b/libgcab/gcab-file.c
@@ -136,7 +136,7 @@ gcab_file_update_info (GCabFile *self, GFileInfo *info)
g_file_info_get_modification_time (info, &tv);
time = tv.tv_sec;
- m = localtime (&time);
+ m = gmtime (&time);
self->cfile.name = self->name;
self->cfile.usize = g_file_info_get_size (info);
--- End Message ---
--- Begin Message ---
Source: gcab
Source-Version: 0.7-4
We believe that the bug you reported is fixed in the latest version of
gcab, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Stephen Kitt <[email protected]> (supplier of updated gcab package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 17 Aug 2017 22:43:03 +0200
Source: gcab
Binary: gcab libgcab-1.0-0 libgcab-dev libgcab-doc gir1.2-gcab-1.0
Architecture: source
Version: 0.7-4
Distribution: unstable
Urgency: medium
Maintainer: Stephen Kitt <[email protected]>
Changed-By: Stephen Kitt <[email protected]>
Description:
gcab - Microsoft Cabinet file manipulation tool
gir1.2-gcab-1.0 - Microsoft Cabinet file manipulation library - gir bindings
libgcab-1.0-0 - Microsoft Cabinet file manipulation library
libgcab-dev - Microsoft Cabinet file manipulation library - development files
libgcab-doc - Microsoft Cabinet file manipulation library - documentation
Closes: 872460
Changes:
gcab (0.7-4) unstable; urgency=medium
.
* Add overrides for Lintian’s “spelling error” covering the use of “GNU
Public License” (which refers to the general concept here).
* Make gcab produce reproducible cabinets; thanks to Chris Lamb for the
patch. Closes: #872460.
* Fix an invalid libgcab-dev link in libgcab-doc.
Checksums-Sha1:
740142c1a5fe1c5f5675983b33c4276b936afb69 2129 gcab_0.7-4.dsc
2b0ba25b7cad549787ffaaaf67d79d5843a774b0 6652 gcab_0.7-4.debian.tar.xz
e81b3567e202a48c061ed007d045f7af97cf2f5b 9038 gcab_0.7-4_source.buildinfo
Checksums-Sha256:
447816141bc920092bcb7a660cc13d8272e44c1fe1733544f5ac021336265909 2129
gcab_0.7-4.dsc
b5c6464747f2200abda52dd0d3a1e257cac286bdc2c0c18b34471edf8191d616 6652
gcab_0.7-4.debian.tar.xz
3cf0eb1b4f0c630537475fc5cfcaf60c36f1f15083e28e17c93e85356bf5e699 9038
gcab_0.7-4_source.buildinfo
Files:
4516693f42351656b64b10bd5797fabd 2129 utils optional gcab_0.7-4.dsc
af523ccbbae7df687087e3bd9da24e71 6652 utils optional gcab_0.7-4.debian.tar.xz
eb2601dd4d875121747b48fb1d5d958c 9038 utils optional
gcab_0.7-4_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=5164
-----END PGP SIGNATURE-----
--- End Message ---