Your message dated Sun, 18 Feb 2024 20:38:19 +0000
with message-id <e1rbnvx-009zmn...@fasolo.debian.org>
and subject line Bug#1063939: fixed in fop 1:2.8-3
has caused the Debian Bug report #1063939,
regarding different timezones produce different pdf /ID with equal
SOURCE_DATE_EPOCH
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1063939: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1063939
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: fop
Version: 1:2.8-2
Severity: normal
Tags: patch
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timezones
Hi,
even when keeping SOURCE_DATE_EPOCH equal, varying the timezone via the TZ
environment variable produces different PDFs when using fop. Specifically,
their /ID differs. Here is some reprotest output that shows the issue:
https://salsa.debian.org/debian/xmlstarlet/-/jobs/5296216
To reproduce, you can run this in the xmlstarlet source:
TZ=GMT-1 SOURCE_DATE_EPOCH=0 /usr/bin/fop -q doc/xmlstarlet-ug.fo
doc/xmlstarlet-ug.pdf
TZ=GMT+1 SOURCE_DATE_EPOCH=0 /usr/bin/fop -q doc/xmlstarlet-ug.fo
doc/xmlstarlet-ug.pdf
The reason is, that generateFileID() uses SimpleDateFormat().format() which is
not timezone aware and will use the current timezone for the string it
produces. My patch replaces that for DateFormatUtil.formatPDFDate() with UTC:
https://salsa.debian.org/java-team/fop/-/merge_requests/2
Thanks!
cheers, josch
--- End Message ---
--- Begin Message ---
Source: fop
Source-Version: 1:2.8-3
Done: tony mancill <tmanc...@debian.org>
We believe that the bug you reported is fixed in the latest version of
fop, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1063...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
tony mancill <tmanc...@debian.org> (supplier of updated fop package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 18 Feb 2024 11:23:34 -0800
Source: fop
Architecture: source
Version: 1:2.8-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers
<pkg-java-maintain...@lists.alioth.debian.org>
Changed-By: tony mancill <tmanc...@debian.org>
Closes: 1063895 1063939
Changes:
fop (1:2.8-3) unstable; urgency=medium
.
* Team upload.
.
[ Johannes Schauer Marin Rodrigues ]
* Make fop and fop-doc Multi-Arch: foreign (Closes: #1063895)
* Make generateFileID() timezone-aware (Closes: #1063939)
.
[ tony mancill ]
* Use https URL for Upstream
* Bump Standards-Version to 4.6.2
* Combine Build-Depends and Build-Depends-Indep for arch: all package
* Update SOURCE_DATE_EPOCH patch to use AccessController. This avoids
a RuntimeException during the test suite that was preventing tests
from being executed.
Checksums-Sha1:
dc84ca2c313c4ff3e20b391fd6beac02940cc0eb 2594 fop_2.8-3.dsc
ce8fc602016aea0d2f11650c57b802806e793138 873920 fop_2.8-3.debian.tar.xz
000e43e24c9ab2f1b526ff3d23297a24c5785999 15079 fop_2.8-3_amd64.buildinfo
Checksums-Sha256:
b4b472e9a692a5ea946edcd094b48a738eef46c3a5a90b2c0662e30272642458 2594
fop_2.8-3.dsc
1d44e0f32b6be05739bdd00abc9eab112b7b952cb499e96fccd8b422daa33fd9 873920
fop_2.8-3.debian.tar.xz
63d612642252ae2caa9f59619470342d0b7c7a85291172f14b5789053eb0a6d4 15079
fop_2.8-3_amd64.buildinfo
Files:
03ace6ba4befc5ac1898157e9d52a816 2594 text optional fop_2.8-3.dsc
96d6f69bf954141b42c8a2b68586129f 873920 text optional fop_2.8-3.debian.tar.xz
0cc5e9df8f70753271fb800bd2ca36f3 15079 text optional fop_2.8-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=CPTx
-----END PGP SIGNATURE-----
pgpDW05xVFg4R.pgp
Description: PGP signature
--- End Message ---
__
This is the maintainer address of Debian's Java team
<https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-java-maintainers>.
Please use
debian-j...@lists.debian.org for discussions and questions.
