Your message dated Sun, 10 May 2015 21:51:27 +0000
with message-id <e1yrz8b-0006yp...@franck.debian.org>
and subject line Bug#782893: fixed in libjpeg-turbo 1:1.4.0-7
has caused the Debian Bug report #782893,
regarding libjpeg-turbo: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
782893: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=782893
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: libjpeg-turbo
Version: 1.3.1-12
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-CC: reproducible-bui...@lists.alioth.debian.org
Hi!
While working on Debian's “reproducible builds” effort [1], we have
noticed that libjpeg-turbo doesn't build reproducibly.
During build timestamps are embedded into executables.
The attached patch removes the timestamps from the source files, so
that the binaries will be the same on each build.
Regards,
Reiner
[1]: https://wiki.debian.org/ReproducibleBuilds
diff --git a/debian/patches/remove_timestamps.patch b/debian/patches/remove_timestamps.patch
new file mode 100644
index 0000000..2b8ee31
--- /dev/null
+++ b/debian/patches/remove_timestamps.patch
@@ -0,0 +1,45 @@
+Author: Reiner Herrmann <rei...@reiner-h.de>
+Description: Remove build timestamp to get same result on each build.
+
+Index: libjpeg-turbo-1.3.1/cjpeg.c
+===================================================================
+--- libjpeg-turbo-1.3.1.orig/cjpeg.c
++++ libjpeg-turbo-1.3.1/cjpeg.c
+@@ -282,8 +282,7 @@ parse_switches (j_compress_ptr cinfo, in
+ static boolean printed_version = FALSE;
+
+ if (! printed_version) {
+- fprintf(stderr, "%s version %s (build %s)\n",
+- PACKAGE_NAME, VERSION, BUILD);
++ fprintf(stderr, "%s version %s\n", PACKAGE_NAME, VERSION);
+ fprintf(stderr, "%s\n\n", JCOPYRIGHT);
+ fprintf(stderr, "Emulating The Independent JPEG Group's software, version %s\n\n",
+ JVERSION);
+Index: libjpeg-turbo-1.3.1/djpeg.c
+===================================================================
+--- libjpeg-turbo-1.3.1.orig/djpeg.c
++++ libjpeg-turbo-1.3.1/djpeg.c
+@@ -251,8 +251,7 @@ parse_switches (j_decompress_ptr cinfo,
+ static boolean printed_version = FALSE;
+
+ if (! printed_version) {
+- fprintf(stderr, "%s version %s (build %s)\n",
+- PACKAGE_NAME, VERSION, BUILD);
++ fprintf(stderr, "%s version %s\n", PACKAGE_NAME, VERSION);
+ fprintf(stderr, "%s\n\n", JCOPYRIGHT);
+ fprintf(stderr, "Emulating The Independent JPEG Group's software, version %s\n\n",
+ JVERSION);
+Index: libjpeg-turbo-1.3.1/jpegtran.c
+===================================================================
+--- libjpeg-turbo-1.3.1.orig/jpegtran.c
++++ libjpeg-turbo-1.3.1/jpegtran.c
+@@ -203,8 +203,7 @@ parse_switches (j_compress_ptr cinfo, in
+ static boolean printed_version = FALSE;
+
+ if (! printed_version) {
+- fprintf(stderr, "%s version %s (build %s)\n",
+- PACKAGE_NAME, VERSION, BUILD);
++ fprintf(stderr, "%s version %s\n", PACKAGE_NAME, VERSION);
+ fprintf(stderr, "%s\n\n", JCOPYRIGHT);
+ fprintf(stderr, "Emulating The Independent JPEG Group's software, version %s\n\n",
+ JVERSION);
diff --git a/debian/patches/series b/debian/patches/series
index d334b31..32f61a5 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,2 +1,3 @@
001_versioned-libjpegturbo.patch
CVE-2014-9092.patch
+remove_timestamps.patch
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Source: libjpeg-turbo
Source-Version: 1:1.4.0-7
We believe that the bug you reported is fixed in the latest version of
libjpeg-turbo, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 782...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Ondřej Surý <ond...@debian.org> (supplier of updated libjpeg-turbo package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 10 May 2015 22:14:45 +0200
Source: libjpeg-turbo
Binary: libjpeg-dev libjpeg62-turbo-dev libjpeg62-turbo libjpeg62-turbo-dbg
libturbojpeg0 libturbojpeg0-dbg libturbojpeg0-dev libjpeg-turbo-progs
libjpeg-turbo-progs-dbg
Architecture: source all amd64
Version: 1:1.4.0-7
Distribution: unstable
Urgency: medium
Maintainer: Ondřej Surý <ond...@debian.org>
Changed-By: Ondřej Surý <ond...@debian.org>
Description:
libjpeg-dev - Development files for the JPEG library [dummy package]
libjpeg-turbo-progs - Programs for manipulating JPEG files
libjpeg-turbo-progs-dbg - Programs for manipulating JPEG files (debugging
symbols)
libjpeg62-turbo - libjpeg-turbo JPEG runtime library
libjpeg62-turbo-dbg - Debugging symbols for the libjpeg-turbo JPEG library
libjpeg62-turbo-dev - Development files for the libjpeg-turbo JPEG library
libturbojpeg0 - TurboJPEG runtime library - SIMD optimized
libturbojpeg0-dbg - TurboJPEG runtime library - SIMD optimized (debugging
symbols)
libturbojpeg0-dev - Development files for the TurboJPEG library
Closes: 782893
Changes:
libjpeg-turbo (1:1.4.0-7) unstable; urgency=medium
.
* Add patch to make builds reproducible (Closes: #782893)
* Adjust gbp.conf for releasing 1.4.0 to unstable
* Upload to unstable
Checksums-Sha1:
74e823eb36aa992fe17a0c95f3cfd70c3325bec1 2625 libjpeg-turbo_1.4.0-7.dsc
1eeb314c352f5b00d052c71df663fb21f13b8f06 78716
libjpeg-turbo_1.4.0-7.debian.tar.xz
5de217b076d4afc277ae04a81d252b8393f1408e 50760 libjpeg-dev_1.4.0-7_all.deb
e3254220ed170499afc3e7961d34d8c117ec123d 473386
libjpeg62-turbo-dev_1.4.0-7_amd64.deb
65bcd66cde9b41577b073905ea900ac2467c0bfc 124078
libjpeg62-turbo_1.4.0-7_amd64.deb
18314d80722cce9fff12a17d365ffbd9b9533d81 340978
libjpeg62-turbo-dbg_1.4.0-7_amd64.deb
98530e849595238c2b88d66b166d05c6d1ab87b0 140164 libturbojpeg0_1.4.0-7_amd64.deb
2dfab1f3798942987f81470797f1976a64ed7d66 385176
libturbojpeg0-dbg_1.4.0-7_amd64.deb
0230aab1118d148ef0315ca89a37e2f46b4a57e5 534312
libturbojpeg0-dev_1.4.0-7_amd64.deb
fdf765f44b25670effd7d99b38ce69fdbbbb6a16 89798
libjpeg-turbo-progs_1.4.0-7_amd64.deb
a541f8b9c1115d7c314239450f201a1a9395a4ec 193994
libjpeg-turbo-progs-dbg_1.4.0-7_amd64.deb
Checksums-Sha256:
ea4543392a25612d858c72a16fbfd1d07960f2e256a174e78a7d73f7e987810e 2625
libjpeg-turbo_1.4.0-7.dsc
bd70895247649033c8cccf585e5e1e5125d808d190e8b978648acbbe843f32a1 78716
libjpeg-turbo_1.4.0-7.debian.tar.xz
0f2f75c9e6f22f9d48e6ac0150e1e32c56480c3e14b2ca64e5110ebf4c3fa2c9 50760
libjpeg-dev_1.4.0-7_all.deb
616d42207d2d4cc3974f16762dd434cdb8255979ae6fdbcc78363c1a6de2a693 473386
libjpeg62-turbo-dev_1.4.0-7_amd64.deb
58c190698a6656d76433d6afe3b40546f07f07e6c912bad465b1f69fdd62ea44 124078
libjpeg62-turbo_1.4.0-7_amd64.deb
4ae667ab2b7bdfa2b10a97f087db39547f959af16ef30ed1f7c12aae57a115c4 340978
libjpeg62-turbo-dbg_1.4.0-7_amd64.deb
70184300ea25b4eaf2cef2a6e1c1471e5b44283fbcee8993684f50ac86054423 140164
libturbojpeg0_1.4.0-7_amd64.deb
bc758391a298b776982fbf346e0c561493a2c21f3107a8a0398210b7df99de24 385176
libturbojpeg0-dbg_1.4.0-7_amd64.deb
597220fcb55197fbeb0f52ca73a56e95bdcece93876002f13c59496549385a96 534312
libturbojpeg0-dev_1.4.0-7_amd64.deb
fb8e6ab6a96237f81faa87955d3c342c07004c4fd96352372d4492dbee55cdeb 89798
libjpeg-turbo-progs_1.4.0-7_amd64.deb
056ea0e8cec88c9347a3cf6e00f23f16faf93e5ea4fa78193f4fbabbd2726d6a 193994
libjpeg-turbo-progs-dbg_1.4.0-7_amd64.deb
Files:
e7db7ffb8ebfec26a42d8833614464b2 2625 graphics optional
libjpeg-turbo_1.4.0-7.dsc
a7e37f3cf7c9329bc55c25997cca7e43 78716 graphics optional
libjpeg-turbo_1.4.0-7.debian.tar.xz
8bba79f63a0be552d90856fb78495170 50760 libdevel optional
libjpeg-dev_1.4.0-7_all.deb
dbd3eaf48114ddaab0b14d76953791e7 473386 libdevel optional
libjpeg62-turbo-dev_1.4.0-7_amd64.deb
84c580d7d3f1065d2b0382628cf2e63c 124078 libs optional
libjpeg62-turbo_1.4.0-7_amd64.deb
24eb93397b8f35b7106ccb60a914ce55 340978 debug extra
libjpeg62-turbo-dbg_1.4.0-7_amd64.deb
bc8cee96b722ade3514020123f391e9c 140164 libs optional
libturbojpeg0_1.4.0-7_amd64.deb
1e49e99b741af3bb807817972bac2863 385176 debug extra
libturbojpeg0-dbg_1.4.0-7_amd64.deb
61d88638c4093c8723b362e28075a91c 534312 libdevel optional
libturbojpeg0-dev_1.4.0-7_amd64.deb
531eb8a9e5e090648967be9cc8d57f49 89798 graphics optional
libjpeg-turbo-progs_1.4.0-7_amd64.deb
041c3e664f04d9195cadfb56446ee46f 193994 debug extra
libjpeg-turbo-progs-dbg_1.4.0-7_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=YeiW
-----END PGP SIGNATURE-----
--- End Message ---
