119.md 5.6 KB
Newer Older
1
---
2
layout: new/blog
3
week: 119
4
published: 2017-08-14 23:08:01
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35
---

Here's what happened in the [Reproducible
Builds](https://reproducible-builds.org) effort between Sunday July 30 and
Saturday August 5 2017:


Media coverage
--------------

We were mentioned on [Late Night Linux Episode
17](https://latenightlinux.com/late-night-linux-episode-17/), around 29:30.


Packages reviewed and fixed, and bugs filed
-------------------------------------------

Upstream packages:

* Bernhard M. Wiedemann:
  * [efl](https://phab.enlightenment.org/rEFL4d2117ef2a5344d298dfa7768d01feab0cf86558)
  (merged), unique ids based on memory address
  * [389-ds](https://lists.fedoraproject.org/archives/list/389-devel@lists.fedoraproject.org/thread/RJYESKP3VAHGM5J5W67APFAQPQA6SUY2/)
  (merged), `SOURCE_DATE_EPOCH` support.
  * [plowshare](https://github.com/mcrapet/plowshare/pull/97), `SOURCE_DATE_EPOCH` support
  * [sphinx](https://github.com/sphinx-doc/sphinx/pull/3972), file ordering
  * [sphinx](https://github.com/sphinx-doc/sphinx/pull/3973), `SOURCE_DATE_EPOCH` support

Debian packages:

* Adrian Bunk:
36 37 38 39 40 41 42 43
  * [#870212](https://bugs.debian.org/870212) filed against [glib2.0](https://tracker.debian.org/pkg/glib2.0).
  * [#870213](https://bugs.debian.org/870213) filed against [pajeng](https://tracker.debian.org/pkg/pajeng).
  * [#870733](https://bugs.debian.org/870733) filed against [openhpi](https://tracker.debian.org/pkg/openhpi).
  * [#870738](https://bugs.debian.org/870738) filed against [gtk2-engines-xfce](https://tracker.debian.org/pkg/gtk2-engines-xfce).
  * [#870741](https://bugs.debian.org/870741) filed against [libgda5](https://tracker.debian.org/pkg/libgda5).
  * [#870742](https://bugs.debian.org/870742) filed against [libgnome](https://tracker.debian.org/pkg/libgnome).
  * [#870749](https://bugs.debian.org/870749) filed against [glade](https://tracker.debian.org/pkg/glade).
  * [#870821](https://bugs.debian.org/870821) filed against [esys-particle](https://tracker.debian.org/pkg/esys-particle).
44
* Chris Lamb:
45 46 47
  * [#870131](https://bugs.debian.org/870131) filed against [autopep8](https://tracker.debian.org/pkg/autopep8).
  * [#870221](https://bugs.debian.org/870221) filed against [dpkg](https://tracker.debian.org/pkg/dpkg).
  * [#870573](https://bugs.debian.org/870573) filed against [grap](https://tracker.debian.org/pkg/grap).
48
* Johannes Schauer:
49
  * [#870585](https://bugs.debian.org/870585) filed against [hevea](https://tracker.debian.org/pkg/hevea).
50
* Logan Rosen:
51
  * [#870586](https://bugs.debian.org/870586) filed against [behave](https://tracker.debian.org/pkg/behave).
52
* Lucas Nussbaum:
53 54 55
  * [#871059](https://bugs.debian.org/871059) filed against [fltk1.3](https://tracker.debian.org/pkg/fltk1.3).
  * [#871155](https://bugs.debian.org/871155) filed against [brltty](https://tracker.debian.org/pkg/brltty).
  * [#871159](https://bugs.debian.org/871159) filed against [texlive-extra](https://tracker.debian.org/pkg/texlive-extra).
56
* jathan:
57
  * [#870890](https://bugs.debian.org/870890) filed against [apg](https://tracker.debian.org/pkg/apg).
58 59 60 61 62 63 64 65 66 67 68


Reviews of unreproducible packages
----------------------------------

29 package reviews have been added, 72 have been updated and 151 have been
removed in this week, adding to our knowledge about [identified
issues](https://tests.reproducible-builds.org/debian/index_issues.html).

4 issue types have been updated:

69 70 71 72
- Added [timestamps_generated_by_hevea](https://tests.reproducible-builds.org/issues/unstable/timestamps_generated_by_hevea_issue.html).
- Added [timestamps_in_source_generated_by_rcc](https://tests.reproducible-builds.org/issues/unstable/timestamps_in_source_generated_by_rcc_issue.html).
- Updated [build_id_differences_only](https://tests.reproducible-builds.org/issues/unstable/build_id_differences_only_issue.html): remove an obsolete example.
- Updated [golang_compiler_captures_build_path_in_binary](https://tests.reproducible-builds.org/issues/unstable/golang_compiler_captures_build_path_in_binary_issue.html): mark as
73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90
  not deterministic, because the patch fixing it is not yet upstreamed.


Weekly QA work
--------------

During our reproducibility testing, FTBFS bugs have been detected and reported by:

 - Adrian Bunk (36)
 - Andreas Beckmann (2)
 - Daniel Schepler (2)
 - Logan Rosen (1)
 - Lucas Nussbaum (93)


diffoscope development
----------------------

91
Version 85 was uploaded to unstable by Mattia Rizzolo. It included [contributions](https://salsa.debian.org/reproducible-builds/diffoscope/commits/85) from:
92 93 94 95 96 97 98 99 100 101

- Mattia Rizzolo:
  - Add an explicit Recommends: on the defusedxml python package.
  - Various other code quality tweaks.
- Juliana Oliveira Rodrigues:
  - Fix test_ico_image for ImageMagick `identify` >= 6.9.8.
  - Use the defusedxml XML library by default in the XML comparator, if it's
    available. This protects against various XML parser DoS attacks and other
    security holes, which other Python XML libraries are vulnerable to.
- Ximin Luo:
102
  - Force a flush when writing output to diff. (Closes: [#870049](https://bugs.debian.org/870049)).
103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124

as well as previous weeks' contributions, summarised in the
[changelog](http://metadata.ftp-master.debian.org/changelogs/main/d/diffoscope/diffoscope_85_changelog).

There were also further commits in git, which will be released in a later
version:

- Guangyuan Yang:
  - tests/iso9660: support `isoinfo`'s output coming from cdrtools' version
    instead of genisoimage's
- Mattia Rizzolo:
  - Code quality and test fixes.
- Chris Lamb:
  - Code quality and test fixes.


Misc.
-----

This week's edition was written by Ximin Luo, Bernhard M. Wiedemann and Chris
Lamb & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing
lists.