Source: ncurses
Version: 6.0+20151024-1
Severity: wishlist


While ncurses 6.0+20151017-1 fixed the earlier reproducibility bug
#801864, it also introduced a reproducibility regression; now all the
lib*_g.a files in the lib*-dbg packages are affected by the umask,
uid/gid and build time of the build environment. The reason for this
regression is upstream patch 20151010, specifically the update of
CF_AR_FLAGS in aclocal.m4 (which is propagated to configure) that
causes the static libraries to be generated with "ar -curvU". I don't
really know where this should be fixed (patching aclocal.m4 doesn't
seem right since it's a generated file) so I can't suggest a patch.

Reproducible-builds mailing list

Reply via email to