Bug#1059592: qhelpgenerator-qt5: emits .qch file attribute entries with unpredictable ordering

2023-12-28 Thread James Addison
Package: qhelpgenerator-qt5 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: randomness X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Dear Maintainer, I'm an occasional contributor to Debian's reproducible builds, and noticed a recent reproducib

Bug#1059592: qhelpgenerator-qt5: emits .qch file attribute entries with unpredictable ordering

2023-12-28 Thread James Addison
Followup-For: Bug #1059592 Description: helpgenerator: populate FileAttributeSetTable in sorted attribute ID order. Author: James Addison Bug-Debian: https://bugs.debian.org/1059592 --- qttools-opensource-src-5.15.10.orig/src/assistant/qhelpgenerator/helpgenerator.cpp +++ qttools-opensource

Bug#1059631: qhelpgenerator-qt5: nearly-reproducible LastRegisterTime value in .qch files is not timezone-normalized

2023-12-29 Thread James Addison
Package: qhelpgenerator-qt5 Version: 5.15.2-3 Severity: wishlist User: reproducible-bui...@lists.alioth.debian.org Usertags: timezone X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Dear Maintainer, Looking at some recent Reproducible Build[1] test results[2] for the Debian openorienteeri

Bug#1059631: qhelpgenerator-qt5: nearly-reproducible LastRegisterTime value in .qch files is not timezone-normalized

2023-12-30 Thread James Addison
Package: qhelpgenerator-qt5 Followup-For: Bug #1059631 X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org On Fri, 29 Dec 2023 15:30:58, I wrote: > Inspecting the patch from #875847 and the values that appear in the diffoscope > output from the build logs: the SOURCE_DATE_EPOCH value of the bu

Bug#1059631: qhelpgenerator-qt5: nearly-reproducible LastRegisterTime value in .qch files is not timezone-normalized

2023-12-30 Thread James Addison
fact that only the main.cpp code site was confirmed affected. Description: helpgenerator: clear UTC offset to zero when reading SOURCE_DATE_EPOCH value Author: James Addison Bug-Debian: https://bugs.debian.org/1059631 --- qttools-opensource-src-5.15.10.orig/src/assistant/help

Bug#1059631: qhelpgenerator-qt5: nearly-reproducible LastRegisterTime value in .qch files is not timezone-normalized

2023-12-30 Thread James Addison
Package: qhelpgenerator-qt5 Followup-For: Bug #1059631 X-Debbugs-Cc: mity...@debian.org Control: forwarded -1 https://codereview.qt-project.org/c/qt/qttools/+/527972 Hi Dmitry, On Sat, 30 Dec 2023 22:50:47, Dmitry wrote: > Thank you for the patch! > > Any chance you can forward it to upstream Qt?

Bug#1059592: qhelpgenerator-qt5: emits .qch file attribute entries with unpredictable ordering

2023-12-30 Thread James Addison
Package: qhelpgenerator-qt5 Followup-For: Bug #1059592 Control: tags -1 fixed-upstream Please note: it appears that a fix[1] that addresses this same problem is already included in v6.5.0 of qttools.git upstream. [1] - https://codereview.qt-project.org/c/qt/qttools/+/416699

Bug#1059631: qhelpgenerator-qt5: nearly-reproducible LastRegisterTime value in .qch files is not timezone-normalized

2024-01-01 Thread James Addison
Followup-For: Bug #1059631 Control: tags -1 fixed-upstream > Control: forwarded -1 https://codereview.qt-project.org/c/qt/qttools/+/527972 This fix has been merged upstream; I've also offered what I think is a further cleanup[1], but it does not affect the behaviour of the code (only readability

Bug#1059631: qhelpgenerator-qt5: nearly-reproducible LastRegisterTime value in .qch files is not timezone-normalized

2024-01-09 Thread James Addison
Followup-For: Bug #1059631 X-Debbugs-Cc: mity...@debian.org Hi Dmitry - could you recommend whether there's anything I should do next for this bug? As context: the patch was accepted upstream, but with modifications that make it cleaner for Qt6.6 albeit in a non-5.15.x compatible way. I realize

Bug#1059631: qhelpgenerator-qt5: nearly-reproducible LastRegisterTime value in .qch files is not timezone-normalized

2024-01-09 Thread James Addison
Followup-For: Bug #1059631 X-Debbugs-Cc: mity...@debian.org On Wed, 10 Jan 2024 00:01:40 +0300, Dmitry wrote: > On Tue, Jan 09, 2024 at 06:40:35PM +0000, James Addison wrote: > [ ... snip ... ] > > My sense is that with the patch here and also the patch from #1059592 > > app

Bug#1064056: qtbase-opensource-src: CVE-2024-25580

2024-02-16 Thread James Addison
Source: qtbase-opensource-src Version: 5.15.10+dfsg-6 Severity: normal Tags: patch security Dear Maintainer, Security advisory CVE-2024-25580, a buffer overflow affecting KTX image handling in QT, has been announced[1], and the announcement includes patches for various versions of QT including th

Bug#1064056: qtbase-opensource-src: CVE-2024-25580

2024-02-16 Thread James Addison
Source: qtbase-opensource-src Followup-For: Bug #1064056 Control: forcemerge 1064053 -1 Duplicate of #1064053; force merging this bugreport into that one.

Bug#1064052: qt6-base: CVE-2024-25580

2024-02-16 Thread James Addison
Followup-For: Bug #1064052 Control: fixed -1 6.6.2+dfsg-1

Bug#1064053: qtbase-opensource-src: CVE-2024-25580

2024-02-16 Thread James Addison
Source: qtbase-opensource-src Followup-For: Bug #1064053 Control: found -1 Control: found -1 5.12.2+dfsg-1 Replying to set the earliest version affected from the advisory blogpost[1], and to (re)attach the patch from the duplicate bugreport. [1] https://www.qt.io/blog/security-advisory-potentia

Bug#1064054: qtbase-opensource-src-gles: CVE-2024-25580

2024-02-16 Thread James Addison
Source: qtbase-opensource-src-gles Followup-For: Bug #1064054 Control: found -1 5.12.2+dfsg-1 Control: tags -1 patch diff --git a/src/gui/util/qktxhandler.cpp b/src/gui/util/qktxhandler.cpp index 0d98e97453..6a79e55109 100644 --- a/src/gui/util/qktxhandler.cpp +++ b/src/gui/util/qktxhandler.cpp @@

Bug#1067850: src:kget: possible Salsa-CI reprotest misconfiguration.

2024-03-27 Thread James Addison
Source: kget Severity: wishlist X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org User: reproducible-bui...@lists.alioth.debian.org Usertags: buildpath Dear Maintainer, The Salsa CI configuration for kget sets customized[1] command-line options for 'reprotest'[2], a utility used to find pac

Bug#1003980:

2024-03-31 Thread James Addison
Control: severity -1 wishlist Dear Maintainer, Currently, Debian's buildd and also the Reproducible Builds team's testing infrastructure[1] both use a fixed build path when building binary packages. This means that your package will pass current reproducibility tests; however we believe that var

Bug#1026062: kded5: kded crashes with signal 11

2023-03-10 Thread James Addison
Followup-For: Bug #1026062 Control: reassign -1 libpackagekitqt5-1 1.1.0-1 Control: retitle -1 packagekit-qt: use-after-free in PackageKit::Transaction Control: affects -1 kded5 Control: forwarded -1 https://github.com/PackageKit/PackageKit-Qt/issues/42 Control: tags -1 fixed-upstream

Bug#1000955: libkf5globalaccel-bin: /usr/bin/kglobalaccel5 eats up huge amount of CPU after suspend

2023-03-13 Thread James Addison
Followup-For: Bug #1000955 Control: severity -1 normal A summary of a side-discussion between Filippo and myself about this bug: * Although the bug doesn't appear reproducible today, the cause hasn't been confirmed. * We both agreed that it makes sense for bugs to continue to stay open u

Bug#1000955: libkf5globalaccel-bin: /usr/bin/kglobalaccel5 eats up huge amount of CPU after suspend

2023-02-28 Thread James Addison
Package: libkf5globalaccel-bin Followup-For: Bug #1000955 X-Debbugs-Cc: lopi...@debian.org Hi Filippo, On Wed, 1 Dec 2021 12:12:44 +0100, Filippo wrote: > Should I install other packages to fix the problem? What can I do to help? Two ideas related to this part of your report: > Note that I also