Your message dated Tue, 28 Jul 2026 17:18:56 +0000
with message-id <[email protected]>
and subject line Bug#1142495: fixed in fontforge 1:20230101~dfsg-9
has caused the Debian Bug report #1142495,
regarding fontforge: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1142495: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1142495
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: fontforge
Version: 1:20230101~dfsg-8
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timezone toolchain
X-Debbugs-Cc: [email protected]
Hi,
Whilst working on the Reproducible Builds effort [0], we noticed that
fontforge generates .afm and .pfb files that are unreproducible.
Specifically, whilst they use SOURCE_DATE_EPOCH for the timestamps,
they still vary on the timezone due to the use of ctime(3).
Patch attached, which at least causes packages such as t1-teams to be
reproducible.
However, there are many other ctime callsites in the codebase that might
require upstream to investigate: some of them are for ~diagnostic output
for human consumption, so likely should specify the timezone explicitly,
whatever it is.
(Alternatively, another method could be added to gutils/gutils.c alongside
GetTime that will return asctime(gmtime(arg)) if SOURCE_DATE_EPOCH is present,
otherwise return cmtime(arg), and then callsites could use this one.)
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
diff --git fontforge/dumppfa.c fontforge/dumppfa.c
index 7acdedc..aad2c73 100644
--- fontforge/dumppfa.c
+++ fontforge/dumppfa.c
@@ -1780,7 +1780,7 @@ static void dumpfontcomments(void (*dumpchar)(int ch,void
*data), void *data,
dumpf(dumpchar,data,"%%%%Title: %s\n", sf->fontname);
dumpf(dumpchar,data,"%%Version: %s\n", sf->version);
}
- dumpf(dumpchar,data,"%%%%CreationDate: %s", ctime(&now));
+ dumpf(dumpchar,data,"%%%%CreationDate: %s", asctime(gmtime(&now)));
if ( author!=NULL )
dumpf(dumpchar,data,"%%%%Creator: %s\n", author);
diff --git fontforge/splinesaveafm.c fontforge/splinesaveafm.c
index 15b42b7..4c96eda 100644
--- fontforge/splinesaveafm.c
+++ fontforge/splinesaveafm.c
@@ -1184,7 +1184,7 @@ static void AfmSplineFontHeader(FILE *afm, SplineFont
*sf, int formattype,
"StartFontMetrics 2.0\n" );
fprintf( afm, "Comment Generated by FontForge %s\n", FONTFORGE_VERSION );
now = GetTime();
- fprintf(afm,"Comment Creation Date: %s", ctime(&now));
+ fprintf(afm,"Comment Creation Date: %s", asctime(gmtime(&now)));
fprintf( afm, "FontName %s\n", sf->fontname );
if ( sf->fullname!=NULL ) fprintf( afm, "FullName %s\n", sf->fullname );
if ( sf->familyname!=NULL ) fprintf( afm, "FamilyName %s\n",
sf->familyname );
--- End Message ---
--- Begin Message ---
Source: fontforge
Source-Version: 1:20230101~dfsg-9
Done: Bastian Germann <[email protected]>
We believe that the bug you reported is fixed in the latest version of
fontforge, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Bastian Germann <[email protected]> (supplier of updated fontforge package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 28 Jul 2026 18:47:51 +0200
Source: fontforge
Architecture: source
Version: 1:20230101~dfsg-9
Distribution: unstable
Urgency: medium
Maintainer: Debian Fonts Task Force <[email protected]>
Changed-By: Bastian Germann <[email protected]>
Closes: 1142495
Changes:
fontforge (1:20230101~dfsg-9) unstable; urgency=medium
.
* Team upload
* Make afm and pfb timezone-independent (Closes: #1142495)
* lintian: Drop alien tag
Checksums-Sha1:
ce95f78c2c109262208e9a1e27e075b1ca365666 2806 fontforge_20230101~dfsg-9.dsc
b713626c5837ee6c3a55bf8f0724f6ed387903bd 125844
fontforge_20230101~dfsg-9.debian.tar.xz
9f21c5dcb674e244abf318f66f7a92718c28ed5f 15602
fontforge_20230101~dfsg-9_source.buildinfo
Checksums-Sha256:
2f6e31b116a3d65c5600c82caebbde14084f134616f668e104b976405fb30099 2806
fontforge_20230101~dfsg-9.dsc
c5980f81f13d195dd9187df1900449501b2c7cec07d71bbc6537d87ff1dbad3c 125844
fontforge_20230101~dfsg-9.debian.tar.xz
67249f23eb00fba7042a10ecce591855849c86e16dd7ce346c8791fe93ac8477 15602
fontforge_20230101~dfsg-9_source.buildinfo
Files:
f22f784edaca0cb7ef4f3292225ec1ed 2806 fonts optional
fontforge_20230101~dfsg-9.dsc
3762c641c84dc6a223c987282c185917 125844 fonts optional
fontforge_20230101~dfsg-9.debian.tar.xz
02f7302277487f92dd93d183cd7a0e48 15602 fonts optional
fontforge_20230101~dfsg-9_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=7QhU
-----END PGP SIGNATURE-----
pgpfqu1r916Iv.pgp
Description: PGP signature
--- End Message ---
