issues.yml

@@ -1960,3 +1960,6 @@ randomness_in_prolog_saved_stage:
 build_path_in_typelib_files_generated_by_gir_compiler:
   description: |
     absolute build path
+randomness_in_perl6_precompiled_libraries:
+  description:
+    Pretty sure Debian shouldn't be shipping these, just like .pyc files.

packages.yml

@@ -182,6 +182,10 @@ adios:
   issues:
     - captures_shell_variable_in_autofoo_script
     - records_build_flags
+adms:
+  version: 2.3.6-2
+  bugs:
+    - 926298
 adplug:
   version: 2.2.1+dfsg3-0.3
   issues:
@@ -406,10 +410,6 @@ and:
   version: 1.2.2-4.1
   issues:
     - gcc_captures_build_path
-android-framework-23:
-  version: 6.0.1+r72-3
-  bugs:
-    - 894285
 android-platform-art:
   version: 8.1.0+r23-1
   issues:
@@ -2645,7 +2645,6 @@ clsparse:
   comments: |
     Both in doxygen docs and in asserts.
   issues:
-    - captures_build_path
     - captures_build_path_via_assert
 clsync:
   version: 0.4.2-1
@@ -2718,6 +2717,10 @@ coco-java:
   version: 20110419-3.1
   issues:
     - timestamps_in_jar
+coda:
+  version: 2.20-3
+  bugs:
+    - 926301
 code-saturne:
   version: 4.2.1+repack-1
   issues:
@@ -6042,6 +6045,10 @@ fs-uae:
   issues:
     - different_due_to_umask
     - timestamps_in_zip
+fscrypt:
+  version: 0.2.4-2
+  issues:
+    - build_id_differences_only
 fsharp:
   version: 3.1.1.26+dfsg2-2
   issues:
@@ -7049,6 +7056,10 @@ gmp:
   version: 2:6.1.2+dfsg-1
   issues:
     - build_path_captured_in_assembly_objects
+gmp-ecm:
+  version: 7.0.4+ds-5
+  issues:
+    - captures_build_path_via_assert
 gmrun:
   version: 0.9.2-2.1
   issues:
@@ -7861,8 +7872,6 @@ grantlee5:
   version: 5.1.0-2
   issues:
     - build_id_differences_only
-  bugs:
-    - 876852
 grap:
   version: 1.45-1
   bugs:
@@ -7967,6 +7976,10 @@ gron:
   version: 0.6.0-1
   issues:
     - golang_compiler_captures_build_path_in_binary
+groonga:
+  version: 9.0.1-1
+  comments: |
+    Seems to capture all environment/build variables, including CFLAGS
 groovebasin:
   version: 1.4.0-1
   issues:
@@ -8900,6 +8913,10 @@ input-utils:
   version: 1.0-1.1
   issues:
     - gcc_captures_build_path
+insserv:
+  version: 1.18.0-2
+  issues:
+    - captures_build_path_via_assert
 installation-guide:
   version: 20170312
   issues:
@@ -9585,7 +9602,6 @@ jruby:
     - timestamp_in_java_bnd_manifest
   bugs:
     - 849217
-    - 893244
 jruby-openssl:
   version: 0.9.11-2
   issues:
@@ -9706,6 +9722,10 @@ junior-doc:
     - timestamps_in_gzip_headers
     - different_encoding
     - timestamps_in_ps_generated_by_dvips
+jupyter-notebook:
+  version: 5.7.4-2.1
+  issues:
+    - randomness_in_documentation_underscore_downloads_generated_by_sphinx
 jxrlib:
   version: 1.1-6
   issues:
@@ -10423,6 +10443,10 @@ kparts:
   version: 5.25.0-1
   issues:
     - captures_build_path
+kpartsplugin:
+  version: 20120605-1
+  comments: |
+    I think this buildpath is somewhere in src/mimetypehelper.cpp
 kpat:
   version: 4:16.08.1-1
   issues:
@@ -12013,6 +12037,10 @@ libkgapi:
   version: 5.1.0-2
   issues:
     - build_id_differences_only
+libkiwix:
+  version: 3.1.1-1
+  comments: |
+    Captures absolute build path in binary by storing path to a results.tmpl file
 libkml:
   version: 1.3.0-3
   issues:
@@ -12215,6 +12243,10 @@ libmpd:
   version: 0.20.0-1.3
   issues:
     - gcc_captures_build_path
+libmstoolkit:
+  version: 82-6
+  issues:
+    - captures_build_path_via_assert
 libmthca:
   version: 1.0.6-1
   issues:
@@ -12537,10 +12569,6 @@ libqtdbusmock:
   version: 0.7+bzr49+repack1-1
   issues:
     - timestamps_in_h_generated_by_qdbusxml2cpp
-libqtdbustest:
-  version: 0.2+bzr42+repack1-2
-  bugs:
-    - 879937
 libqtxdg:
   version: 2.0.0-4
   issues:
@@ -13217,6 +13245,10 @@ lirc:
   version: 0.9.0~pre1-1.2
   issues:
     - captures_build_path
+listserialportsc:
+  version: 1.4.0-1
+  issues:
+    - captures_build_path_via_assert
 literki:
   version: 0.0.0+20100113.git1da40724-1.2
   issues:
@@ -14357,10 +14389,6 @@ mona:
     - captures_build_path
     - records_build_flags
     - libtool_captures_shell_build-flags_build-path_path-env
-mongo-c-driver:
-  version: 1.13.0-1
-  bugs:
-    - 920411
 mongo-tools:
   version: 3.2.11-1
   issues:
@@ -14515,6 +14543,10 @@ mopac7:
   version: 1.15-6
   issues:
     - gcc_captures_build_path
+morbig:
+  version: 0.9.1-2
+  issues:
+    - ocaml_captures_build_path
 moreutils:
   version: 0.60-1
   issues:
@@ -14682,6 +14714,10 @@ mtail:
   version: 0.0+git20160716.f911b02-1
   issues:
     - golang_compiler_captures_build_path_in_binary
+mtink:
+  version: 1.0.16-10
+  comments: |
+    binary includes absolute build path to $prefix/usr/doc
 mu-cade:
   version: 0.11.dfsg1-12
   issues:
@@ -14923,6 +14959,10 @@ nbibtex:
     - timestamps_in_ps_generated_by_dvips
   bugs:
     - 812704
+nbsphinx:
+  version: 0.4.2+ds-1
+  comments: |
+    calls numpy.random.randint, needs to be seeded via https://docs.scipy.org/doc/numpy/reference/generated/numpy.random.seed.html
 nbtscan:
   version: 1.5.1-6
   issues:
@@ -15030,6 +15070,10 @@ netcdf:
   version: 1:4.4.1-2
   issues:
     - records_build_flags
+netcdf-parallel:
+  version: 1:4.6.2-1
+  bugs:
+    - 926421
 netcf:
   version: 1:0.2.8-1
   issues:
@@ -15246,6 +15290,18 @@ ngs-sdk:
   version: 1.3.0-1
   bugs:
     - 813559
+ngspice:
+  version: 30.2-1
+  comments: |
+    Looks like lyx uses the absolute build path...
+nibabel:
+  version: 2.3.2-1
+  issues:
+    - randomness_in_documentation_underscore_downloads_generated_by_sphinx
+nifticlib:
+  version: 2.0.0-3
+  comments: |
+    docs contain absolute build path
 nipy:
   version: 0.3.0+git262-gbb838d7-1
   issues:
@@ -15277,10 +15333,6 @@ nitrokey-app:
   version: 0.6.1-1
   issues:
     - gcc_captures_build_path
-nitroshare:
-  version: 0.3.3-1
-  bugs:
-    - 881082
 nkf:
   version: 1:2.1.4-1
   issues:
@@ -15374,14 +15426,6 @@ node-loose-envify:
   version: 1.3.0+dfsg1-1
   issues:
     - timestamps_embedded_in_manpages_by_node_marked_man
-node-lunr:
-  version: 2.3.5~dfsg-6
-  bugs:
-    - 923169
-node-merge-stream:
-  version: 1.0.1-1
-  bugs:
-    - 854495
 node-mocha:
   version: 4.1.0+ds1-2
   issues:
@@ -15465,6 +15509,10 @@ not-yet-commons-ssl:
   version: 0.3.15-2
   issues:
     - random_order_in_documentation_generated_by_javadoc
+notary:
+  version: 0.6.1~ds1-3
+  comments: |
+    Generates test certificate at build/test time which gets installed to the binary package
 notify-python:
   version: 0.1.1-4
   issues:
@@ -16010,6 +16058,10 @@ octave-odepkg:
   version: 0.8.5-2
   issues:
     - random_order_of_pdf_ids_generated_by_latex
+octave-sparsersb:
+  version: 1.0.6-2
+  issues:
+    - captures_build_path_via_assert
 octave-tisean:
   version: 0.2.3-1
   bugs:
@@ -16268,7 +16320,6 @@ openhft-lang:
   version: 6.7.6-1
   bugs:
     - 844083
-    - 893495
 openhpi:
   version: 3.6.1-2.2
   issues:
@@ -17066,6 +17117,10 @@ perl4caml:
   version: 0.9.5-5
   issues:
     - ocaml_captures_build_path
+perl6-zef:
+  version: 0.6.2-1
+  issues:
+    - randomness_in_perl6_precompiled_libraries
 perlbal:
   version: 1.80-3
   bugs:
@@ -17110,6 +17165,10 @@ pg-comparator:
   version: 2.2.6-2
   issues:
     - gcc_captures_build_path
+pg-dirtyread:
+  version: 2.0-3
+  issues:
+    - randomness_in_postgres_opcodes
 pg-partman:
   version: 2.2.2-1
   issues:
@@ -17118,10 +17177,22 @@ pg-rage-terminator:
   version: 0.1.4-1
   issues:
     - gcc_captures_build_path
+pg-rational:
+  version: 0.0.1-1
+  issues:
+    - randomness_in_postgres_opcodes
 pg-repack:
   version: 1.3.4-1
   issues:
     - gcc_captures_build_path
+pg-similarity:
+  version: 1.0-2
+  issues:
+    - randomness_in_postgres_opcodes
+pg-snakeoil:
+  version: 1.1-1
+  issues:
+    - randomness_in_postgres_opcodes
 pgadmin3:
   version: 1.22.1-1
   issues:
@@ -17146,6 +17217,10 @@ pglogical:
   version: 2.2.1-4
   issues:
     - randomness_in_postgres_opcodes
+pglogical-ticker:
+  version: 1.3.1-1
+  issues:
+    - randomness_in_postgres_opcodes
 pgmemcache:
   version: 2.3.0-2
   issues:
@@ -17963,14 +18038,6 @@ php-xml-svg:
   version: 1.1.0-2
   issues:
     - timestamp_in_pear_registry_files
-php-zeta-base:
-  version: 1.9-3
-  bugs:
-    - 882917
-php-zeta-console-tools:
-  version: 1.7-3
-  bugs:
-    - 882920
 php7.0:
   version: 7.0.4-6
   comments: |
@@ -18760,6 +18827,10 @@ prometheus-mysqld-exporter:
   version: 0.8.1+ds-1
   issues:
     - golang_compiler_captures_build_path_in_binary
+prometheus-nginx-exporter:
+  version: 0.1.0-1
+  issues:
+    - randomness_in_binaries_generated_by_golang
 prometheus-nginx-vts-exporter:
   version: 0.10.3+git20180501.43b4556+ds-1
   issues:
@@ -18884,6 +18955,10 @@ publican:
   issues:
     - timestamps_in_epub
     - timestamps_in_pdf_generated_by_apache_fop
+puddletag:
+  version: 1.2.0-2
+  issues:
+    - randomness_in_documentation_underscore_downloads_generated_by_sphinx
 puf:
   version: 1.0.0-7
   issues:
@@ -19222,6 +19297,10 @@ pyside-tools:
   version: 0.2.15-1
   issues:
     - gcc_captures_build_path
+pysmi:
+  version: 0.3.2-1
+  issues:
+    - randomness_in_documentation_underscore_downloads_generated_by_sphinx
 pysurfer:
   version: 0.7-2
   comments: |
@@ -19871,11 +19950,6 @@ python3.5:
     - randomness_in_fat_lto_objects
     - records_build_flags
     - captures_build_arch
-python3.6:
-  version: 3.6.0~b2-1
-  issues:
-    - records_build_flags
-    - captures_build_arch
 python3.7:
   version: 3.7.1-1
   issues:
@@ -19912,10 +19986,6 @@ pyxb:
   version: 1.2.6+dfsg-1
   issues:
     - randomness_in_documentation_generated_by_sphinx
-pyxdg:
-  version: 0.25-4
-  bugs:
-    - 877202
 pyxmpp:
   version: 1.1.2-1
   issues:
@@ -20029,6 +20099,10 @@ qoauth:
   version: 2.0.1~1-3
   issues:
     - captures_build_dir_in_qmake_prl_files
+qpid-proton:
+  version: 0.22.0-3
+  bugs:
+    - 926300
 qps:
   version: 1.10.16+20151210-1
   issues:
@@ -21130,6 +21204,10 @@ r-cran-ellipse:
   version: 0.3-8-1
   issues:
     - randomness_in_r_rdb_rds_databases
+r-cran-ellipsis:
+  version: 0.1.0-1
+  issues:
+    - randomness_in_r_rdb_rds_databases
 r-cran-elliptic:
   version: 1.3-5-1
   issues:
@@ -21262,6 +21340,10 @@ r-cran-foreach:
   version: 1.4.3-1
   issues:
     - randomness_in_r_rdb_rds_databases
+r-cran-forecast:
+  version: 8.5-1
+  issues:
+    - randomness_in_r_rdb_rds_databases
 r-cran-formatr:
   version: 1.2.1-4
   issues:
@@ -21274,6 +21356,10 @@ r-cran-fpc:
   version: 2.1-11.1-1
   issues:
     - randomness_in_r_rdb_rds_databases
+r-cran-fracdiff:
+  version: 1.4-2-1
+  issues:
+    - randomness_in_r_rdb_rds_databases
 r-cran-fs:
   version: 1.2.6+dfsg-1
   issues:
@@ -21542,6 +21628,10 @@ r-cran-irace:
   version: 3.1-1
   issues:
     - randomness_in_r_rdb_rds_databases
+r-cran-irdisplay:
+  version: 0.7.0-1
+  issues:
+    - randomness_in_r_rdb_rds_databases
 r-cran-irlba:
   version: 2.0.0-1
   issues:
@@ -22593,6 +22683,10 @@ r-cran-shinybs:
   version: 0.61-1
   issues:
     - randomness_in_r_rdb_rds_databases
+r-cran-shinycssloaders:
+  version: 0.2.0-1
+  issues:
+    - randomness_in_r_rdb_rds_databases
 r-cran-shinydashboard:
   version: 0.6.1-1
   issues:
@@ -22882,6 +22976,10 @@ r-cran-urltools:
   version: 1.6.0-1
   issues:
     - randomness_in_r_rdb_rds_databases
+r-cran-uroot:
+  version: 2.0-9-1
+  issues:
+    - randomness_in_r_rdb_rds_databases
 r-cran-usethis:
   version: 1.4.0-1
   issues:
@@ -23412,6 +23510,10 @@ rig:
   version: 1.11-1
   issues:
     - gcc_captures_build_path
+ring:
+  version: 20190215.1.f152c98~ds1-1
+  comments: |
+    Embeds build path in binary via TOP_BUILDDIR preprocessor flag.
 ripmime:
   version: 1.4.0.10.debian.1-1
   comments: |
@@ -23674,6 +23776,10 @@ rtkit:
   version: 0.11-4
   issues:
     - gcc_captures_build_path
+rtklib:
+  version: 2.4.3+dfsg1-1
+  issues:
+    - captures_build_path_via_assert
 rtl-sdr:
   version: 0.5.3-11
   issues:
@@ -23859,6 +23965,10 @@ ruby-gd:
   version: 0.8.0-7
   issues:
     - gcc_captures_build_path
+ruby-github-linguist:
+  version: 6.4.0-2
+  issues:
+    - captures_build_path_via_assert
 ruby-github-markdown:
   version: 0.6.9-2
   issues:
@@ -23923,6 +24033,10 @@ ruby-json:
   version: 2.0.1+dfsg-2
   issues:
     - gcc_captures_build_path
+ruby-kgio:
+  version: 2.11.2-1
+  issues:
+    - captures_build_path_via_assert
 ruby-kyotocabinet:
   version: 1.32-2
   issues:
@@ -24035,6 +24149,10 @@ ruby-oj:
   version: 2.17.1-1
   issues:
     - gcc_captures_build_path
+ruby-openssl:
+  version: 2.1.2-1
+  issues:
+    - captures_build_path_via_assert
 ruby-ox:
   version: 2.1.1-2
   issues:
@@ -24081,6 +24199,10 @@ ruby-raindrops:
   version: 0.17.0-1
   issues:
     - gcc_captures_build_path
+ruby-rbtrace:
+  version: 0.4.10-1
+  issues:
+    - captures_build_path_via_assert
 ruby-rdiscount:
   version: 2.1.8-1
   issues:
@@ -24169,6 +24291,10 @@ ruby-text-table:
   version: 1.2.4-1
   bugs:
     - 795676
+ruby-thrift:
+  version: 0.11.0.0-1
+  issues:
+    - captures_build_path_via_assert
 ruby-timfel-krb5-auth:
   version: 0.8.3-2
   issues:
@@ -25486,6 +25612,10 @@ ssmtp:
     - timestamps_in_gzip_headers
   bugs:
     - 777398
+ssocr:
+  version: 2.19.0-2
+  issues:
+    - captures_build_path_via_assert
 st:
   version: 1.9-3.1
   bugs:
@@ -28024,6 +28154,10 @@ xlog:
   version: 2.0.13-2
   issues:
     - gcc_captures_build_path
+xlunzip:
+  version: 0.4-3
+  issues:
+    - captures_build_path_via_assert
 xmacro:
   version: 0.3pre-20000911-7
   issues:
@@ -28180,6 +28314,10 @@ xracer:
   version: 0.96.9.1-8
   issues:
     - gcc_captures_build_path
+xrdp:
+  version: 0.9.9-1
+  comments: |
+    Embeds build flags in binary so captures fprefixmap etc
 xscorch:
   version: 0.2.1-1+nmu1
   issues: