Your message dated Tue, 18 Oct 2022 18:05:25 +0000 with message-id <E1okqxx-00BfmZ-N6@fasolo.debian.org> and subject line Bug#990844: fixed in libtheora 1.1.1+dfsg.1-16.1 has caused the Debian Bug report #990844, regarding libtheora: reproducible builds: Embedded timestamps in PDF file to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 990844: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990844 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: submit@bugs.debian.org
- Subject: libtheora: reproducible builds: Embedded timestamps in PDF file
- From: Vagrant Cascadian <vagrant@reproducible-builds.org>
- Date: Thu, 08 Jul 2021 22:53:21 -0700
- Message-id: <871r88vxri.fsf@yucca>
Source: libtheora Severity: normal Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org The build timestamp is embedded in /usr/share/doc/libtheora-dev/Theora.pdf.gz: https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/libtheora.html June·15,·2021 vs. July·19,·2022 The attached patch fixes this by setting FORCE_SOURCE_DATE=1 in debian/rules, which texlive needs in order to respect SOURCE_DATE_EPOCH, which is set during debian package builds to the timestamp in the latest debian/changelog entry. https://reproducible-builds.org/docs/source-date-epoch/ With this patch and the recently submitted patch removing examples/Makefile, libtheora should build reproducibly on tests.reproducible-builds.org Thanks for maintaining libtheora! live well, vagrantFrom 8d3b41850e12792aefed8ea8da6d51e8792abe68 Mon Sep 17 00:00:00 2001 From: Vagrant Cascadian <vagrant@reproducible-builds.org> Date: Fri, 9 Jul 2021 05:37:35 +0000 Subject: [PATCH 1/2] debian/rules: Set FORCE_SOURCE_DATE=1 in order for texlive to respect SOURCE_DATE_EPOCH when generating PDF. https://reproducible-builds.org/docs/source-date-epoch/ --- debian/rules | 3 +++ 1 file changed, 3 insertions(+) diff --git a/debian/rules b/debian/rules index 874cf23..c9de1d0 100755 --- a/debian/rules +++ b/debian/rules @@ -4,6 +4,9 @@ CONFIG_SHELL = /bin/sh export CONFIG_SHELL export DEB_BUILD_MAINT_OPTIONS = hardening=+all +# Ensure texlive respects SOURCE_DATE_EPOCH +export FORCE_SOURCE_DATE=1 + %: dh $@ -- 2.32.0Attachment: signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
- To: 990844-close@bugs.debian.org
- Subject: Bug#990844: fixed in libtheora 1.1.1+dfsg.1-16.1
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Tue, 18 Oct 2022 18:05:25 +0000
- Message-id: <E1okqxx-00BfmZ-N6@fasolo.debian.org>
- Reply-to: Holger Levsen <holger@debian.org>
Source: libtheora Source-Version: 1.1.1+dfsg.1-16.1 Done: Holger Levsen <holger@debian.org> We believe that the bug you reported is fixed in the latest version of libtheora, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 990844@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Holger Levsen <holger@debian.org> (supplier of updated libtheora package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 06 Oct 2022 19:18:29 +0200 Source: libtheora Architecture: source Version: 1.1.1+dfsg.1-16.1 Distribution: unstable Urgency: medium Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org> Changed-By: Holger Levsen <holger@debian.org> Closes: 990843 990844 Changes: libtheora (1.1.1+dfsg.1-16.1) unstable; urgency=medium . * Non-maintainer upload by the Reproducible Builds team. * debian/libtheora-doc.examples: do not install example Makefile as it leaks the build path. Closes: #990843 - thanks to Vagrant Cascadian for the patch. * debian/rules: ensure texlive respects SOURCE_DATE_EPOCH, thanks again to Vagrant for the patch. Closes: #990844 Checksums-Sha1: d8b42317834c5dd94421623849c6d044eb9bebca 2540 libtheora_1.1.1+dfsg.1-16.1.dsc e1fb62c08f184a45788e1c4ce580eb07ffa7e171 11344 libtheora_1.1.1+dfsg.1-16.1.debian.tar.xz 13325435fe1f8783d61130887603b1cf0cd1cd6b 9783 libtheora_1.1.1+dfsg.1-16.1_source.buildinfo Checksums-Sha256: e23398c3f176df004694eb04999492ddf47ec671e1d6ec78259c8faff038f469 2540 libtheora_1.1.1+dfsg.1-16.1.dsc ea71764d2bfb859af830d1103b840ca627e7e0290fa022a87665baf3d4ea83c1 11344 libtheora_1.1.1+dfsg.1-16.1.debian.tar.xz 48ac30cbd73295e9e9a930d944739dfdf68282d2b96e8439486fa23666e46750 9783 libtheora_1.1.1+dfsg.1-16.1_source.buildinfo Files: a8d4fbefd568e47f262c66fcf7559f6c 2540 libs optional libtheora_1.1.1+dfsg.1-16.1.dsc 39d2efccfb866bbf8e31d5fc77c5bf9f 11344 libs optional libtheora_1.1.1+dfsg.1-16.1.debian.tar.xz 5e3481e497ab9b4ac89c3e40b8839dbe 9783 libs optional libtheora_1.1.1+dfsg.1-16.1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmM/DrYACgkQCRq4Vgaa qhzU6xAAr3msCc6UfX3oE+vSHmOYLC1O2y+bF1LfUWfAs7YiMstHKZeMYhkEXDvK j8sQTP1kPPSr1jjL0pIQ/8vatTs03Rmqsm72JHL3y33MGm0YBb1SNKLWqqrUvv4m C5+uO8Mdx2T5IVgCX66kwit/3J5v2MmOv0Wi6X7R5zFGsl9RYxGYMryAReKlJjWF 4qn93cg/mu01PH2SIp2z0TLwdbJgEHzgB6sY0Y5qQannO/Qs7aYv72xicwUjrq0o RpSDohpOrkdzcRu/lhVf8yF2vS2A359+jqRqHsgvX8GRGV1bQ8UNobaopKbu/KnY vZbiBYRslkda+gBx61bLR7vy2Fk1OqRtKrVoS3PVlb5fudmwLKw14/702wxaiDCP 0K/a78f5JrEUVPa2j0HA8dVawx/XkHfuMrQgnesuU16Fr7t6kU+BNxOVSgtLOeml YgNIu928KHL15iNfqSXV3dCpUXnHhKKqi0o4rASKDlSp89d2MKWbt7Ze+yZwCfbm vdiOvxLdVScsfez5hT6dkk0+UmZD01f842X7lwfQeBU6hb+GOvZYtAnLGifbpiwQ s+Rk0+t00oYm/JfnztEGV8SWEKS5MMyAPbCWsioVCYD7IrvFwSoRxjiHzcsAce/v HR4s739wrQHUOICC02fl/1Xxg+PTKD3JE2h5wHEC2BiMNqJBt2Y= =TBO/ -----END PGP SIGNATURE-----
--- End Message ---