1020658">

Debian Bug report logs - #1020658
netpbm-free: reproducible builds: embeds username in /usr/lib/x86_64-linux-gnu/libnetpbm.*

version graph

Package: src:netpbm-free; Maintainer for src:netpbm-free is Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>;

Reported by: Vagrant Cascadian <vagrant@reproducible-builds.org>

Date: Sat, 24 Sep 2022 22:00:01 UTC

Severity: normal

Tags: patch

Fixed in version netpbm-free/2:11.01.00-2

Done: Andreas Tille <tille@debian.org>

Bug is archived. No further changes may be made.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>:
Bug#1020658; Package src:netpbm-free. (Sat, 24 Sep 2022 22:00:03 GMT) (full text, mbox, link).


Acknowledgement sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>. (Sat, 24 Sep 2022 22:00:04 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>
To: submit@bugs.debian.org
Subject: netpbm-free: reproducible builds: embeds username in /usr/lib/x86_64-linux-gnu/libnetpbm.*
Date: Sat, 24 Sep 2022 14:56:38 -0700
[Message part 1 (text/plain, inline)]
Source: netpbm-free
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: username
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The username is embedded in library files:

  https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/netpbm-free.html

  /usr/lib/x86_64-linux-gnu/libnetpbm.a

  pbuilder1
  vs.
  pbuilder2

The attached patch fixes this by removing the generated COMPILED_BY
header from buildtools/stampe-date.


With this patch applied netpbm-free should build reproducibly on
tests.reproducible-builds.org!


Thanks for maintaining netpbm-free!


live well,
  vagrant
[buildtoolsstamp-date-remove-compiled_by.patch (text/x-diff, inline)]
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Sat, 24 Sep 2022 21:25:21 +0000
X-Dgit-Generated: 2:10.97.00-2 574455d0847c561dbe21742551e0c42812850076
Subject: buildtools/stamp-date: Remove COMPILED_BY.


---

--- netpbm-free-10.97.00.orig/buildtools/stamp-date
+++ netpbm-free-10.97.00/buildtools/stamp-date
@@ -36,4 +36,3 @@ if [ "$SOURCE_DATE_OR_NONE" != "NONE" ];
   echo "#define SOURCE_DATETIME $SOURCE_DATE_OR_NONE"
 fi
 echo "#define BUILD_DATETIME $BUILD_DATETIME"
-echo "#define COMPILED_BY \"$USER\""
[signature.asc (application/pgp-signature, inline)]

Reply sent to Andreas Tille <tille@debian.org>:
You have taken responsibility. (Wed, 11 Jan 2023 16:09:09 GMT) (full text, mbox, link).


Notification sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
Bug acknowledged by developer. (Wed, 11 Jan 2023 16:09:09 GMT) (full text, mbox, link).


Message #10 received at 1020658-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 1020658-close@bugs.debian.org
Subject: Bug#1020658: fixed in netpbm-free 2:11.01.00-2
Date: Wed, 11 Jan 2023 16:05:30 +0000
Source: netpbm-free
Source-Version: 2:11.01.00-2
Done: Andreas Tille <tille@debian.org>

We believe that the bug you reported is fixed in the latest version of
netpbm-free, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1020658@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Tille <tille@debian.org> (supplier of updated netpbm-free package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 11 Jan 2023 16:30:00 +0100
Source: netpbm-free
Architecture: source
Version: 2:11.01.00-2
Distribution: unstable
Urgency: medium
Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>
Changed-By: Andreas Tille <tille@debian.org>
Closes: 1020658
Changes:
 netpbm-free (2:11.01.00-2) unstable; urgency=medium
 .
   * Team upload.
   * Do not embed username in /usr/lib/*/libnetpbm.*
     Closes: #1020658
   * Do not provide libnetpbm9-dev
Checksums-Sha1:
 76590379e6132f26f407a21d76e4250a3a162667 2310 netpbm-free_11.01.00-2.dsc
 629c065c67709cae2febcbf9afd6a2faa6827ded 1548232 netpbm-free_11.01.00-2.debian.tar.xz
 0521644b1c38ba40ad94046352c0c0fb9049a989 9902 netpbm-free_11.01.00-2_amd64.buildinfo
Checksums-Sha256:
 8f43b5a02405f0159c087fc9b2ad50510bb38c324466bead41eda7a188d46f75 2310 netpbm-free_11.01.00-2.dsc
 0f16faffe8985bb6e4ac10e9510d51ebedc59f251ba8f58485a3cd7dfc189b89 1548232 netpbm-free_11.01.00-2.debian.tar.xz
 6217f5e8235ec1ced2c75e831146dd2f9c6892002561f123e2a622273bf99d6b 9902 netpbm-free_11.01.00-2_amd64.buildinfo
Files:
 a891d2c911325456db8badeed8b97708 2310 graphics optional netpbm-free_11.01.00-2.dsc
 13bd68df4f11a4a7a29d372e9b462db9 1548232 graphics optional netpbm-free_11.01.00-2.debian.tar.xz
 4ee0b9e2d1da4ca40d6ca37c1b73fef8 9902 graphics optional netpbm-free_11.01.00-2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=OfP+
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Tue, 14 Feb 2023 07:28:58 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Fri Jan 31 00:05:13 2025; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.