this [test-related] file, which probably
shouldn't be shipped under dist-packages/ anyway.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/rules 2021-12-07 07:32:20.637508004
e gets released in? Or rather: should
we do something more involved than that?
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
reproducibly.
This is because it ships .pyc files in the examples/ directory. You
almost certainly don't want to do this anyway, so a patch is attached
that does not ship these.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org
trip_nondeterminism deficiencies.
Just to be explicit, I totally agree with this.
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible.patch 2021-11-28 11:34:20.634085499 -0800
--- b/debian/patches/reproducible.patch 2021-11-28 11:37:35.838392663 -08
could not be built reproducibly.
This is because a copyright notice embeds the current build year.
Patch attached.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches
-restbuilder could not be built reproducibly.
This is because it shipped a number of (nondeterministic) doctrees
directories. Patch attached that strips these from the binary package.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la
+Author: Chris Lamb
+Last-Update: 2021-11-24
+
+--- sphinxcontrib-htmlhelp-2.0.0.orig/setup.cfg
sphinxcontrib-htmlhelp-2.0.0/setup.cfg
+@@ -1,6 +1,6 @@
+ [egg_info]
+ tag_build = .dev
+-tag_date = true
++tag_date = false
+
+ [aliases]
+ release = egg_info -Db ''
--- a/debian/patches/series
-jsmath could not be built reproducibly.
This is because it uses the tag_date feature of Python eggs which gets
encoded into the binary package in a number of ways (eg. directory
names, etc.)
Patch attached.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
+Author: Chris Lamb
+Last-Update: 2021-11-24
+
+--- sphinxcontrib-htmlhelp-2.0.0.orig/setup.cfg
sphinxcontrib-htmlhelp-2.0.0/setup.cfg
+@@ -1,6 +1,6 @@
+ [egg_info]
+ tag_build = .dev
+-tag_date = true
++tag_date = false
+
+ [aliases]
+ release = egg_info -Db ''
--- a/debian/patches/series
+Author: Chris Lamb
+Last-Update: 2021-11-24
+
+--- sphinxcontrib-applehelp-1.0.2.orig/setup.cfg
sphinxcontrib-applehelp-1.0.2/setup.cfg
+@@ -1,6 +1,6 @@
+ [egg_info]
+ tag_build = .dev
+-tag_date = true
++tag_date = false
+
+ [aliases]
+ release = egg_info -Db ''
--- a/debian/patches/series
-github-go-git-go-git could not be built reproducibly.
This is because the testsuite leaves a Git worktree (or similar)
around in a .tmp directory. A patch is attached that cleans this up
after running the tests.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris
he
> like).
Sure thing. I've forwarded this upstream here:
https://github.com/mesonbuild/meson/pull/9602
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
Package: meson
Version: 0.60.1-1
Severity: minor
Hi,
The Github homepage for Meson has moved from
https://github.com/jpakkane/meson to
https://github.com/mesonbuild/meson, suggesting a change is needed to
the debian/copyright file.
Regards,
--
,''`.
: :' : Chris Lamb
ot;${_inputFile}" NAME)
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
diff --git a/mesonbuild/modules/cmake.py b/mesonbuild/modules/cmake.py
index 51ee9ee..37838d0 100644
--- a/mesonbuild/modules/cmake.py
+++ b/mesonbu
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible_build.patch 1969-12-31 16:00:00.0
-0800
--- b/debian/patches/reproducible_build.patch 2021-11-21 09:08:37.210875808
-0800
@@ -0,0 +1,18 @@
+Description: Make
tags 989192 + pending
thanks
Fixed in Git, pending upload:
https://salsa.debian.org/reproducible-builds/diffoscope/commit/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible-build.patch 1969-12-31 16:00:00.0
-0800
--- b/debian/patches/reproducible-build.patch 2021-11-17 14:33:40.564794576
-0800
not be built reproducibly.
This is because the latest version includes the build date (commented out)
in files that have been autogenerated.
Patch attached that simply drops these lines.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la
How exactly are you editing the Redis service file? I ask this because
as you yourself have identified, it looks like your local changes are
not being used, and the usual reason for this with systemd is not using
the special systemd incantation for doing that.
Regards,
--
,''`.
forwarded 999438
https://salsa.debian.org/reproducible-builds/diffoscope/-/issues/287
thanks
I've 'forwarded' this upstream here:
https://salsa.debian.org/reproducible-builds/diffoscope/-/issues/287
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org
could not be built reproducibly.
This is because various files include the current build timestamp.
A patch is attached that uses SOURCE_DATE_EPOCH for these dates if
that variable is available.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
not be built reproducibly.
This is because various files include the current build timestamp.
A patch is attached that uses SOURCE_DATE_EPOCH for these dates if
that variable is available.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la
is the *current*
value of $USER, not just what it happened to be there at build time.
Patch attached that corrects this, also making the build reproducible.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
at forces these to the equivalent of having a
kernel version of "0.0". Not ideal, but it doesn't seem clear
that these defines are ever used (beyond being included in -v
output or something).
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lam
mentioned, it's causing a lot of
reproducibility issues.
https://github.com/sphinx-doc/sphinx/issues/9778
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
ast, this will ensure that fixes
for these two issues can reliably tested.
Would this new maintainer be, perhaps, you? :)
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
s issue
and might warrant this package's removal.
> Should this bugreport be closed?
Happy to keep it open so that the 'next person' can find this info
easily. I've renamed it to make it more obvious.
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
, for example. But the explicit --with=sphinxdoc is seemingly
required.)
Patch attached.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/rules 2021-10-27 14:55:48.222950647
://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/11-reproducible-build.patch1970-01-01
01:00:00.0 +0100
--- b/debian/patches/11-reproducible-build.patch2021-10-24
ede it lacks behind the non-free version).
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
tags 996995 + patch
severity 996995 serious
thanks
Patch attached.
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
diff --git a/dhpython/debhelper.py b/dhpython/debhelper.py
index 7308bbe..55b91c0 100644
--- a/dhpython
file
generation and prevents the Debian packaging from shipping the
non-deterministic PDF version.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible-build.patch
not be built reproducibly.
This is because its Doxygen configuration specifies FULL_PATH_NAMES,
and a patch is attached that inverts this setting.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
forwarded 996948 https://github.com/sphinx-doc/sphinx/pull/9755
thanks
I've forwarded this upstream here:
https://github.com/sphinx-doc/sphinx/pull/9755
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
Chris Lamb wrote:
> Whilst working on the Reproducible Builds effort [0] we noticed that
> sphinx generates output that is not reproducible, causing a number of
> packages in Debian to be reproducible.
^^^
This, of course, should read "be U
.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
diff --git a/sphinx/util/typing.py b/sphinx/util/typing.py
index 8912de8..bb0da05 100644
--- a/sphinx/util/typing.py
+++ b/sphinx/util/typing.py
not affect the usefulness of this example.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible-build.patch 1970-01-01 01:00:00.0
+0100
--- b/debian
a code copy of a larger problem
so the special-casing is not as bad as it might initially appear.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible
bian)
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/02-reproducible-build.patch1970-01-01
01:00:00.0 +0100
--- b/debian/patches/02-reproducible-b
is attached that deletes them. (I couldn't get
--noEmit to work?)
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/nodejs/rxjs/build 2021-10-12 08:53:38.091145816 +0100
--- b
Hi Sandro,
>> Friendly ping on this?
>
> this was supposed to be fixed when i uploaded that version. Anyhow,
> i've just uploaded 0.10.0 to unstable, can you check that version
> out?
There are a large number of distinct issues here which will require
different solutions, not all of them
ly be made to the existing debian/patches/generate-manpage
patch: I just didn't want to supply an unreadable patch-to-a-patch.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/re
). And, of course, the build
path cannot be relied upon at runtime.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/0001-reproducible-build.patch 1970-01-01
01:00:00.0
forwarded 995259 https://github.com/daler/pybedtools/pull/349
thanks
I've forwarded this upstream here:
https://github.com/daler/pybedtools/pull/349
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
include/gzstream.cpp"
│ │ │ │ +"pybedtools/include/gzstream.cpp",
│ │ │ │ +"pybedtools/include/fileType.cpp"
│ │ │ │ ]
│ │ │ │ },
│ │ │ │ "module_name": "pybedtools.cbedtools"
│ │ │ │ }
Patch attached that sorts
this.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/rules 2021-09-28 16:31:43.781471389 +0100
--- b/debian/rules 2021-09-28 16:38:20.346343067 +0100
@@ -10,7 +10,7
,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/rules 2021-09-24 09:50:38.945664313 +0100
--- b/debian/rules 2021-09-24 10:00:52.032895019 +0100
@@ -5,7 +5,7 @@
export PYBUILD_SYSTEM=flit
export PYBUILD_TEST_PYTEST=1
export
,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/rules 2021-09-24 09:38:41.060446401 +0100
--- b/debian/rules 2021-09-24 09:47:11.613350777 +0100
@@ -4,3 +4,4 @@
override_dh_auto_test:
dh_auto_test -- test --all
not be built reproducibly.
This is because it uses a custom set of date macros in acinclude.m4.
Patch attached that overrides the values in debian/rules, basing
them off SOURCE_DATE_EPOCH.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la
,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/rules 2021-09-12 11:29:29.016655107 +0100
--- b/debian/rules 2021-09-12 11:54:52.849334799 +0100
@@ -21,7 +21,7 @@
dh $@ --with python3
override_dh_auto_configure
reproducibly.
This is because it ships varint as an example file, which is a temporary
wrapper script for .libs/varint... a file that you delete in debian/rules.
Patch attached that also removes this file.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
reproducibly.
This is because it shipped a generated Makefile as an example. This file
is generated from Makefile.am, so is not necessary.
Patch attached that simply doesn't install these Makefile files.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
hould have an absolute
path specification.
N:
N: Please refer to Debian Policy Manual for details.
N:
N: Visibility: error
N: Show-Always: no
N: Check: conffiles
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
work you are asking maintainers to do there, and
pretty much guarantees pushback.
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
revert if necessary.)
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
), undef,
ARRAY(0x5645120b1938), 1) called at /usr/bin/lintian line 502
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
ble. Here is an updated
version of the 0005-Make-the-build-reproducible.patch file to filter
this:
§
From: Chris Lamb
Date: Sat, 20 Aug 2016 20:55:08 +0100
Subject: Make the build reproducible
Last-Update: 2016-08-20
Bug-Debian: https://bugs.debian.org/834945
---
configure.ac | 2 +-
1 file c
://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/Makefile 2021-08-30 13:55:03.961164646 +0100
--- b/Makefile 2021-08-30 14:49:18.163317766 +0100
@@ -130,6 +130,7 @@
echo '#define
the usage output to not include
the full contents of argv[0], but strip them using basename(3).
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/0001-reproducible
le (which doesn't exist so the
check will always succeed), and not the scripts/memcached.service one.
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
t directly in the method's definition.)
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/0006-Reproducible-build.patch 1970-01-01
01:00:00.0 +0100
--- b/debian/pa
ry is from
the Debian package.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/0001-reproducible-build.patch 1970-01-01
01:00:00.0 +0100
--- b/debian/pa
reproducibly.
Although it uses SOURCE_DATE_EPOCH, the output varies on the timezone
of the build server. A patch is attached that ensures that UTC is used.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris
utput is generated without issues and is correct.
Huzzah! I'll release diffoscope with these changes very soon.
Best wishes,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
Hi Roland,
> Thanks for the code.
>
> The test suite (which uses git directly) fails at the moment:
> https://jenkins.debian.net/job/reproducible_diffoscope_from_git/1063/consoleFull
Thanks. I will address this very shortly.
Best wishes,
--
,''`.
: :' :
o work for me. Can you test it there, or shall I release it first?
Best wishes,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
them, what should we do in that
situation? And is that going to be helpful at all in this OOM
situation anyway?
(A side question: can you confirm whether diffoscope is running as
root or not in your particular Jenkins test? I don't want to
misinterpret the logs.)
Best wishes,
--
o
⬋ ⬊
ses it.
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible-build.diff1970-01-01 01:00:00.0
+0100
--- b/debian/patches/reproducible-build.diff2021-08-12 11:23:13.888071747
+0100
@@ -0,0 +1,15 @@
+D
this.
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
issue.
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
forwarded 992060 https://github.com/py4n6/pytsk/pull/81
thanks
I've forwarded this upstream here:
https://github.com/py4n6/pytsk/pull/81
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
not be built reproducibly.
This is because CMake's RPATH is not stripped, needing us to avoid
it being set with -DCMAKE_SKIP_RPATH=ON.
Patch attached.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
reproducibly.
This is because it generated a pytsk3.c file in a nondeterministic
manner, specifically by naively iterating over a Python set()
structure.
Patch attached.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org
not be built reproducibly.
This is because CMake's RPATH is not stripped, needing us to avoid
it being set with -DCMAKE_SKIP_RPATH=ON.
Patch attached.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
reproducibly.
This is because CMake's RPATH is not stripped (even with chrpath it
seems!), needing us to avoid it being set with -DCMAKE_SKIP_RPATH=ON.
Patch attached.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org
t;'
sh: 1: sh: 1: dot: not found
dot: not found
sh: 1: dot: not found
It likely results in a lack of pretty graphs in the documentation,
hence the "minor" severity (over "wishlist"). Was discovered via
reproducibility testing.
Patch attached (which happens to use the !nodoc prof
Jochen Sprickerhof wrote:
> I have no idea about Redis/Fakeredis, adding Ondřej as he did all the
> uploads, lately.
Hey Ondřej, any input here? Otherwise, not sure what to suggest...
Best wishes,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
kg-redis/commit/98b2cbd5085cd1d526ac9f30cb205ebcf8d8e38a
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
Chris Lamb wrote:
> Sure thing -- I've forwarded this upstream here:
>
> https://github.com/redis/redis/issues/9273
Okay, so the latest reply there suggests that this is (now) the
expected and behaviour of Redis going forward.
I still don't quite grasp what it is that fakeredis i
ream here:
https://github.com/redis/redis/issues/9273
As you can see, your testcase was very useful in putting together this bug
report. Thanks!
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
posing this
issue, but being able to pin it down would be the ideal next step,
especially as the testsuite is so large (and there were quite a few
changes).
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-diff --git a/.github/workflows/dai
fakeredis
maintainer chime in perhaps?
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
However, why the slight change to security-related overflow handling
in bitfield fields *on i386 systems* should result in this failure
eludes me... :/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
versions. Alas, this upload was an
attempt to address a different regression (which shouldn't have been
introduced/uploaded to begin with... ultimately, just underscoring
the entire purpose of freezes.) Lesson learned.
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@d
repos.
I have attached a patch to change the default setting for this
configuration option. Users who wish to enable the behaviour
post-installation may do so, but this patch renders this opt-in.
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-
sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2021-32761
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32761
Regards,
--
,''`.
: :' : C
Holger Levsen wrote:
> strip-nondeterminism (1.12.0-1) unstable; urgency=medium
>
> [ Chris Lamb ]
> * Support normalising Python "pyzip" files -- ie. zip-compressed .py files
> with a regular Python shebang. (Closes:
> reproducible-builds/strip-nondeter
these instructions:
https://www.gnu.org/software/mtools/#mailing
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
forwarded 989192
https://salsa.debian.org/reproducible-builds/diffoscope/-/issues/263
thanks
I've forwarded this upstream here (so all our bugs are in the same place):
https://salsa.debian.org/reproducible-builds/diffoscope/-/issues/263
Regards,
--
,''`.
: :' : Chris Lamb
for closing the bug. And, circling
back to my remarks above about not being overly wedded to rules, I am
very happy to re-explore this in the future if it comes up repeatedly
for others.
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
() and validate_ipv46_address() validators
were not affected on Python 3.9.5+.
This issue has medium severity, according to the Django security
policy.
-- Chris Lamb Wed, 02 Jun 2021 16:15:13 +0100
python-django (2:2.2.23-1) unstable; urgency=medium
* New upstream
please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.
For further information see:
https://www.djangoproject.com/weblog/2021/jun/02/security-releases/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian
* CVE-2021-32625: Fix a vulnerability in the STRALGO LCS command.
(Closes: #989351)
redis (5:6.0.14-1) unstable; urgency=medium
* CVE-2021-32625: Fix a vulnerability in the STRALGO LCS command.
(Closes: #989351)
-- Chris Lamb Tue, 01 Jun 2021 17:35:19 +0100
redis (5:6.0.13-1
) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2021-32625
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32625
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
ense to specify libjs-query as a Depends on your package
instead?
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
sion.
Will do. :) Glancing through the about salsa issue, it was fixed in
both 145 but also in 146.
> I confirm that the issue is reproducible with diffoscope version 145.
Can you confirm in, say, version 175? If so, do you have a testcase that
I can replicate locally?
Regards,
--
rts...)
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
.)
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
401 - 500 of 10096 matches
Mail list logo
