Your message dated Mon, 29 Dec 2014 21:26:01 +0000
with message-id <e1y5hpb-0001la...@franck.debian.org>
and subject line Bug#773916: fixed in libical 1.0-1.2
has caused the Debian Bug report #773916,
regarding libical: Ship different constant values accross builds
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
773916: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773916
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libical-dev
Version: 1.0-1.1
Severity: critical
User: reproducible-bui...@lists.alioth.debian.org
Usertags: randomness

Hi!

While working on the “reproducible builds” effort [1], we have noticed
that libical could not be built reproducibly:
https://jenkins.debian.net/userContent/dbd/libical_1.0-1.1.debbindiff.html

The debbindiff output linked above show that two builds of libical will
output different values for the constant defined in the icalvalue_kind
enum in ical.h and icalderivedvalue.h.

This is bad. It means that any software using these values will break
when libical is updated. After a quick look at the report, this might be
the cause for #766454.

The problem highly likely lies in the following code:
https://sources.debian.net/src/libical/1.0-1.1/scripts/mkderivedvalues.pl/?hl=66:74#L66
Sorting the keys before using them should make the output stable accross
builds. Ideally this should be done in all similar constructs to enable
the package to build reproducibly.

Packages having a Build-Depends on libical-dev should probably be
binNMU'ed once this is fixed. That should be: agenda.app, asterisk,
bluez, cairo-dock-plug-ins, citadel, cyrus-imapd-2.4, evolution,
evolution-data-server, evolution-ews, gnokii, goldencheetah, ical2html,
kdepimlibs, kmymoney, libsynthesis, openchange, orage, osmo,
syncevolution, webcit.

 [1]: https://wiki.debian.org/ReproducibleBuilds

-- 
Lunar                                .''`. 
lu...@debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 
                                      `-   

Attachment: signature.asc
Description: Digital signature


--- End Message ---
--- Begin Message ---
Source: libical
Source-Version: 1.0-1.2

We believe that the bug you reported is fixed in the latest version of
libical, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 773...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Dimitri John Ledkov <dimitri.j.led...@linux.intel.com> (supplier of updated 
libical package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 29 Dec 2014 18:42:22 +0000
Source: libical
Binary: libical-dev libical1 libical-dbg
Architecture: amd64 source
Version: 1.0-1.2
Distribution: unstable
Urgency: medium
Maintainer: Fathi Boudra <f...@debian.org>
Changed-By: Dimitri John Ledkov <dimitri.j.led...@linux.intel.com>
Closes: 773916
Description: 
 libical1   - iCalendar library implementation in C (runtime)
 libical-dbg - debugging symbols for libical
 libical-dev - iCalendar library implementation in C (development)
Changes:
 libical (1.0-1.2) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Sort keys to generate reproducible source code. (Closes: #773916)
Checksums-Sha1: 
 f3508ec583127bd03079e1012b75193269c8b267 205446 libical-dev_1.0-1.2_amd64.deb
 5ac83c9c8acb695c9303fe1cd35f97e2ac5739b5 184536 libical1_1.0-1.2_amd64.deb
 58f62bb8aebecd4b7797b1ac06b62efedaf90f07 383776 libical-dbg_1.0-1.2_amd64.deb
 478f37d881f55e788a402997d79f394fb51955e2 1455 libical_1.0-1.2.dsc
 572db1febc02bc81610a77faa940baa62f45a998 21403 libical_1.0-1.2.debian.tar.gz
Checksums-Sha256: 
 f6e93e65d33d35039b1424ddc1fd6ca196e128dc9c921919ef7fa28944466569 205446 
libical-dev_1.0-1.2_amd64.deb
 7a79f9b649f648ade573ccce1ba31cf3abc1541d7aaf044f7cb640d06d857430 184536 
libical1_1.0-1.2_amd64.deb
 4dbc45b7521861be4f0c3f86d44125fcf905ad9b4fcd080d9eb065252446b923 383776 
libical-dbg_1.0-1.2_amd64.deb
 2457f805bd59bf45caddf94d2cd95dcea2a98b6a1ec5d169d769409035b2c1a5 1455 
libical_1.0-1.2.dsc
 3a4e83d9f27b04255b884c9f11b50572d2c7a0845fa1f04dff542aeb1f9bfbcb 21403 
libical_1.0-1.2.debian.tar.gz
Files: 
 56f2cef72e3c91d7d1a1645c0e78c9f0 205446 libdevel optional 
libical-dev_1.0-1.2_amd64.deb
 90543eeb22bb05e76bf77b594dc515b0 184536 libs optional 
libical1_1.0-1.2_amd64.deb
 b27b7ce7ca503767c187e33a63a8144a 383776 debug extra 
libical-dbg_1.0-1.2_amd64.deb
 008a8e93b62928356cced9252ebbf34b 1455 libs optional libical_1.0-1.2.dsc
 7d7408c3561001f06275dcff37f08198 21403 libs optional 
libical_1.0-1.2.debian.tar.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJUobEwAAoJEEM4jufBUcnJtv4IAJgPv5PkM04iVO2LrIkFCOTZ
OswdAONzHFVTRJbzdPkiiPam7WOtAQ2qnM36gcvQLPpk8SwtXlm6evGnCj1y7Boo
dWYs3acm0FTXqNbFAuYvi5IRBWvAJWSEBNNx95P5U7LtdHEN5v1/8wBQaMDe/lxG
qq9EoU5rU3mS2fv3ANM3lupWhCaGnE+u6gK7cXkgQqtrEciOPkcewAqTQ948ces4
DpqumpEFHPTtwyChOO4lbt/ZUTavH4M7Emm/fsim/7JqBzI/YaHjpewXVi6tNQ+L
3ERo3qcrfU7GtW57TJAG+MsLYa1Th6uTIlhRBW0C1BBV7sw3VfHuU049erYXEIA=
=gtHy
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to