[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Two different libpng2_1.0.12-3.woody.3_i386.deb?



On Wed, Dec 03, 2003 at 05:44:36PM +0100, Santiago Vila wrote:
> file=main/libp/libpng/libpng2_1.0.12-3.woody.3_i386.deb
> wget -q -O 1.deb http://ftp.debian.org/debian/pool/$file
> wget -q -O 2.deb http://security.debian.org/pool/updates/$file
> diff 1.deb 2.deb

> Binary files 1.deb and 2.deb differ

$ dpkg -x 1.deb 1 ; dpkg -x 2.deb 2
$ diff -ur 1 2
Binary files 1/usr/share/doc/libpng2/changelog.Debian.gz and
2/usr/share/doc/libpng2/changelog.Debian.gz differ
$ zdiff -qs */usr/share/doc/libpng2/changelog.Debian.gz
Files - and /tmp/changelogDebian.gz.10985 are identical

So, only the gzip compression on the changelog is different... which
means that both packages are created independently from the same source,
with the same resulting binaries etc, only apparently using different
versions of gzip and/or different default options for gzip.

> How could this happen? Should I worry about it?

Very strange, maybe it has something to do with them being security-team
NMU's, one is build by security team, the other by the maintainer.

Should you worry? I don't know, depends on wether it's normal that two
different builds circulate on offical archives...

--Jeroen

-- 
Jeroen van Wolffelaar
+31-30-253 4499
Jeroen@A-Eskwadraat.nl
http://Jeroen.A-Eskwadraat.nl



Reply to: