--- Begin Message ---
- To: submit@bugs.debian.org
- Subject: eyed3: please make the build reproducible
- From: Chris Lamb <lamby@debian.org>
- Date: Sun, 21 Aug 2016 11:14:49 +0100
- Message-id: <1471774489.3088699.701473729.45516454@webmail.messagingengine.com>
Source: eyed3
Version: 0.6.18-2
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org
Hi,
Whilst working on the Reproducible Builds effort [0], I noticed
that eyed3 could not be built reproducibly.
Patch attached.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible-build.patch 1970-01-01 01:00:00.000000000 +0100
--- b/debian/patches/reproducible-build.patch 2016-08-21 11:14:28.190933490 +0100
@@ -0,0 +1,19 @@
+Description: Make the build reproducible
+Author: Chris Lamb <lamby@debian.org>
+Last-Update: 2016-08-21
+
+--- eyed3-0.6.18.orig/configure
++++ eyed3-0.6.18/configure
+@@ -1674,7 +1674,11 @@ fi
+
+ BUILD_DATE=`date`
+
+-MANPAGE_DATE=`date +'%b. %d, %Y'`
++if test -n "$SOURCE_DATE_EPOCH"; then
++ MANPAGE_DATE=`LC_ALL=C date --utc --date="@$SOURCE_DATE_EPOCH" +'%b. %d, %Y'`
++else
++ MANPAGE_DATE=`date +'%b. %d, %Y'`
++fi
+
+
+ { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} sets \$(MAKE)" >&5
--- a/debian/patches/series 1970-01-01 01:00:00.000000000 +0100
--- b/debian/patches/series 2016-08-21 11:14:27.050922086 +0100
@@ -0,0 +1 @@
+reproducible-build.patch
--- End Message ---
--- Begin Message ---
Source: eyed3
Source-Version: 0.6.18-3
We believe that the bug you reported is fixed in the latest version of
eyed3, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 834983@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Petter Reinholdtsen <pere@debian.org> (supplier of updated eyed3 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 10 Sep 2016 14:26:05 +0000
Source: eyed3
Binary: python-eyed3 eyed3
Architecture: source
Version: 0.6.18-3
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Petter Reinholdtsen <pere@debian.org>
Description:
eyed3 - Display and manipulate id3-tags on the command-line
python-eyed3 - Python module for id3-tags manipulation
Closes: 737062 834983
Changes:
eyed3 (0.6.18-3) unstable; urgency=medium
.
* QA upload.
* Added CVE-2014-1934.patch to avoid insecure use of /tmp/ (Closes:
#737062).
* Added reproducible-build.patch from Chris Lamb to make build
reproducible (Closes: #834983).
* Updated to debhelper 9.
* Updated Standards-Version from 3.9.2 to 3.9.8.
Checksums-Sha1:
5bb97b615cc5b4853db27985cb33132ef1a11893 1762 eyed3_0.6.18-3.dsc
8cee3fdfa02ab6996ad0d642a74d83b2f66ea55a 4452 eyed3_0.6.18-3.debian.tar.xz
Checksums-Sha256:
43eb12af9909ac00dc47d0c4228b04c601df572238e765479f64ff237ddcac1a 1762 eyed3_0.6.18-3.dsc
04bd1cd95b9bd2469ece78503d258c2276410f0d3712213740dd8a0fedd9674d 4452 eyed3_0.6.18-3.debian.tar.xz
Files:
62b94babd615cc246d2df568833624c3 1762 python optional eyed3_0.6.18-3.dsc
93c093f4808273fef8fb87a884603c64 4452 python optional eyed3_0.6.18-3.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=lFCz
-----END PGP SIGNATURE-----
--- End Message ---