Debian Bug report logs -
#759999
dpkg: please set reproducible timestamps in .deb ar file headers
Reported by: Jérémy Bobbio <lunar@debian.org>
Date: Sat, 30 Aug 2014 23:03:01 UTC
Severity: wishlist
Tags: patch
Found in version 1.17.14
Fixed in version dpkg/1.18.8
Done: Guillem Jover <guillem@debian.org>
Bug is archived. No further changes may be made.
Toggle useless messages
Report forwarded
to debian-bugs-dist@lists.debian.org, reproducible-builds@lists.alioth.debian.org, Dpkg Developers <debian-dpkg@lists.debian.org>:
Bug#759999; Package dpkg.
(Sat, 30 Aug 2014 23:03:06 GMT) (full text, mbox, link).
Acknowledgement sent
to Jérémy Bobbio <lunar@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-builds@lists.alioth.debian.org, Dpkg Developers <debian-dpkg@lists.debian.org>.
(Sat, 30 Aug 2014 23:03:06 GMT) (full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Package: dpkg
Version: 1.17.14
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: toolchain, timestamps
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org
Hi!
`.deb` are ar archives. The archive internal headers currently capture
the time when the build was made. As part of the reproducible builds
project [1], it would be great if these timestamps could be made
easily reproducible.
Guillem Jover already expressed [2] that he preferred to keep these
timestamps meaningful. The attached patches will set them to be the date
of the latest changelog entry when a package is built using
`dpkg-buildpackage`. During the discussions at DebConf14, there was a
consensus that it was the most meaningful time reference to use.
The first patch will modify `dpkg-deb` to use the same timestamp for
every member of the ar archive.
The second patch will:
1. Make `dpkg-deb` try to look for a timestamp to use in the
DEB_BUILD_TIMESTAMP environment variable in epoch format.
If not set or not parseable, it will default to use the current
time.
2. Change `dpkg-buildpackage` to parse `debian/changelog` and preset
DEB_BUILD_TIMESTAMP to the value of its latest entry. Unless
DEB_BUILD_TIMESTAMP was already set in order to allow arbitrary
dates to be reproduced.
[1]: https://wiki.debian.org/ReproducibleBuilds
[2]: https://bugs.debian.org/719844#10
--
Lunar .''`.
lunar@debian.org : :Ⓐ : # apt-get install anarchism
`. `'`
`-
[0001-Use-a-single-timestamp-for-ar-headers-when-building-.patch (text/x-diff, attachment)]
[0002-Preset-build-timestamp-to-date-of-the-latest-changel.patch (text/x-diff, attachment)]
[signature.asc (application/pgp-signature, inline)]
Information forwarded
to debian-bugs-dist@lists.debian.org, Dpkg Developers <debian-dpkg@lists.debian.org>:
Bug#759999; Package dpkg.
(Mon, 06 Oct 2014 08:27:11 GMT) (full text, mbox, link).
Acknowledgement sent
to Jérémy Bobbio <lunar@debian.org>:
Extra info received and forwarded to list. Copy sent to Dpkg Developers <debian-dpkg@lists.debian.org>.
(Mon, 06 Oct 2014 08:27:12 GMT) (full text, mbox, link).
Message #10 received at 759999@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Jérémy Bobbio:
> The first patch will modify `dpkg-deb` to use the same timestamp for
> every member of the ar archive.
>
> The second patch will:
>
> 1. Make `dpkg-deb` try to look for a timestamp to use in the
> DEB_BUILD_TIMESTAMP environment variable in epoch format.
> If not set or not parseable, it will default to use the current
> time.
> 2. Change `dpkg-buildpackage` to parse `debian/changelog` and preset
> DEB_BUILD_TIMESTAMP to the value of its latest entry. Unless
> DEB_BUILD_TIMESTAMP was already set in order to allow arbitrary
> dates to be reproduced.
The patches rebased on current master are attached (36eda4c1bc).
--
Lunar .''`.
lunar@debian.org : :Ⓐ : # apt-get install anarchism
`. `'`
`-
[0001-Use-a-single-timestamp-for-ar-headers-when-building-.patch (text/x-diff, attachment)]
[0002-Preset-build-timestamp-to-latest-changelog-entry.patch (text/x-diff, attachment)]
[signature.asc (application/pgp-signature, inline)]
Information forwarded
to debian-bugs-dist@lists.debian.org, Dpkg Developers <debian-dpkg@lists.debian.org>:
Bug#759999; Package dpkg.
(Fri, 15 Jan 2016 21:33:06 GMT) (full text, mbox, link).
Acknowledgement sent
to Jérémy Bobbio <lunar@debian.org>:
Extra info received and forwarded to list. Copy sent to Dpkg Developers <debian-dpkg@lists.debian.org>.
(Fri, 15 Jan 2016 21:33:06 GMT) (full text, mbox, link).
Message #15 received at 759999@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
reassign 759886 dpkg-dev
retitle 759886 dpkg-dev: please make mtimes of packaged files deterministic
thanks
Hi!
The attached patch series is an attempt to make the mtimes of packaged
files deterministic. It is taken from the `pu/reproducible_builds`
dpkg branch maintained by the “reproducible builds” folks [1].
The first two patches introduce the idea of a canonical build timestamp
that will be used throughout dpkg-deb.
The first patch will make use of this timestamp to set the mtime in ar
headers (that's #759999). All headers will thus get the same timestamp
instead of recording the current time as they are added.
The second patch will use the --mtime and --clamp-mtime option of tar to
clamp the mtime of files recorded in control.tar and data.tar to the
build timestamp: files created at a later time will see their mtime
set to the build timestamp (that's #759886). As --clamp-mtime is only
available since tar/1.28-1 and has not yet been merged upstream,
dpkg-deb will first look for its availability by looking for the option
in the output of “tar --help”. If it's not available, it will fallback
to the previous behavior.
The third patch adds the ability to set the aforementioned build
timestamp using the SOURCE_DATE_EPOCH environment variable [2].
The forth patch changes dpkg-buildpackage to set SOURCE_DATE_EPOCH to
the time of the latest debian/changelog entry if it hasn't been already
set, effectively making the timestamps recorded by dpkg-deb in the most
common build process deterministic.
[1]: https://anonscm.debian.org/cgit/reproducible/dpkg.git/log/?h=pu/reproducible_builds
[2]: https://reproducible-builds.org/specs/source-date-epoch/
--
Lunar .''`.
lunar@debian.org : :Ⓐ : # apt-get install anarchism
`. `'`
`-
[0001-dpkg-deb-Use-a-single-timestamp-for-ar-headers-when-.patch (text/x-diff, attachment)]
[0002-dpkg-deb-Use-the-common-build-timestamp-for-all-file.patch (text/x-diff, attachment)]
[0003-dpkg-deb-Allow-to-set-the-build-timestamp-using-SOUR.patch (text/x-diff, attachment)]
[0004-dpkg-buildpackage-Preset-build-timestamp-to-latest-c.patch (text/x-diff, attachment)]
[signature.asc (application/pgp-signature, inline)]
Information forwarded
to debian-bugs-dist@lists.debian.org, Dpkg Developers <debian-dpkg@lists.debian.org>:
Bug#759999; Package dpkg.
(Mon, 18 Jan 2016 01:21:11 GMT) (full text, mbox, link).
Acknowledgement sent
to Guillem Jover <guillem@debian.org>:
Extra info received and forwarded to list. Copy sent to Dpkg Developers <debian-dpkg@lists.debian.org>.
(Mon, 18 Jan 2016 01:21:11 GMT) (full text, mbox, link).
Message #20 received at 759999@bugs.debian.org (full text, mbox, reply):
Hi!
On Fri, 2016-01-15 at 22:28:12 +0100, Jérémy Bobbio wrote:
> reassign 759886 dpkg-dev
> retitle 759886 dpkg-dev: please make mtimes of packaged files deterministic
> thanks
Thanks for the patches!
> The second patch will use the --mtime and --clamp-mtime option of tar to
> clamp the mtime of files recorded in control.tar and data.tar to the
> build timestamp: files created at a later time will see their mtime
> set to the build timestamp (that's #759886). As --clamp-mtime is only
> available since tar/1.28-1 and has not yet been merged upstream,
> dpkg-deb will first look for its availability by looking for the option
> in the output of “tar --help”. If it's not available, it will fallback
> to the previous behavior.
The --clamp-mtime options looks primising, but I'm not happy about its
current situation. Please get this upstreamed first. I don't mind making
dpkg depend on an extremely recent GNU tar, but I really don't want to
use a Debian specific option like this, as it could change semantics,
etc. And I don't like parsing --help output at all. I still have to fix
the situation with dpkg-source using the Debian specifi gzip --rsyncable
option, for example. :(
Thanks,
Guillem
Information forwarded
to debian-bugs-dist@lists.debian.org, Dpkg Developers <debian-dpkg@lists.debian.org>:
Bug#759999; Package dpkg.
(Sun, 08 May 2016 18:45:04 GMT) (full text, mbox, link).
Acknowledgement sent
to Alexis Bienvenüe <pado@passoire.fr>:
Extra info received and forwarded to list. Copy sent to Dpkg Developers <debian-dpkg@lists.debian.org>.
(Sun, 08 May 2016 18:45:04 GMT) (full text, mbox, link).
Message #25 received at 759999@bugs.debian.org (full text, mbox, reply):
Hi.
On Fri, 15 Jan 2016 22:28:12 +0100 <lunar@debian.org> wrote:
> The forth patch changes dpkg-buildpackage to set SOURCE_DATE_EPOCH to
> the time of the latest debian/changelog entry if it hasn't been already
> set, effectively making the timestamps recorded by dpkg-deb in the most
> common build process deterministic.
The SOURCE_DATE_EPOCH support is now implemented in pdftex/xetex:
SOURCE_DATE_EPOCH will only be used to set CreationDate and related
meta-data in produced files, and if SOURCE_DATE_EPOCH_TEX_PRIMITIVES
equals 1, then the TeX primitives year, month, etc. will also be set so
that the \today command will refer to the date given by
SOURCE_DATE_EPOCH. See the discussion starting at [1], the news [2] and
the commit [3].
The \today command is widely used in packages documentation, and I think
replacing its value with the last source modification date is
meaningful. It will also help reproducibility. Therefore I suggest to
also add those lines to scripts/dpkg-buildpackage.pl, along with
0004-dpkg-buildpackage-Preset-build-timestamp-to-latest-c.patch:
if (! exists($ENV{SOURCE_DATE_EPOCH_TEX_PRIMITIVES})) {
$ENV{SOURCE_DATE_EPOCH_TEX_PRIMITIVES} = 1;
}
Regards,
Alexis Bienvenüe.
[1] https://www.tug.org/pipermail/tex-k/2016-May/002691.html
[2]
https://www.tug.org/svn/texlive/trunk/Build/source/texk/web2c/pdftexdir/NEWS?revision=40889
[3]
https://www.tug.org/svn/texlive/trunk/Build/source/texk/web2c/lib/texmfmp.c?r1=40504&r2=40889&pathrev=40889
Information forwarded
to debian-bugs-dist@lists.debian.org, Dpkg Developers <debian-dpkg@lists.debian.org>:
Bug#759999; Package dpkg.
(Tue, 10 May 2016 09:09:06 GMT) (full text, mbox, link).
Acknowledgement sent
to Guillem Jover <guillem@debian.org>:
Extra info received and forwarded to list. Copy sent to Dpkg Developers <debian-dpkg@lists.debian.org>.
(Tue, 10 May 2016 09:09:06 GMT) (full text, mbox, link).
Message #30 received at 759999@bugs.debian.org (full text, mbox, reply):
Hi!
On Sun, 2016-05-08 at 20:41:28 +0200, Alexis Bienvenüe wrote:
> On Fri, 15 Jan 2016 22:28:12 +0100 <lunar@debian.org> wrote:
> > The forth patch changes dpkg-buildpackage to set SOURCE_DATE_EPOCH to
> > the time of the latest debian/changelog entry if it hasn't been already
> > set, effectively making the timestamps recorded by dpkg-deb in the most
> > common build process deterministic.
>
> The SOURCE_DATE_EPOCH support is now implemented in pdftex/xetex:
> SOURCE_DATE_EPOCH will only be used to set CreationDate and related
> meta-data in produced files, and if SOURCE_DATE_EPOCH_TEX_PRIMITIVES
> equals 1, then the TeX primitives year, month, etc. will also be set so
> that the \today command will refer to the date given by
> SOURCE_DATE_EPOCH. See the discussion starting at [1], the news [2] and
> the commit [3].
>
> The \today command is widely used in packages documentation, and I think
> replacing its value with the last source modification date is
> meaningful. It will also help reproducibility. Therefore I suggest to
> also add those lines to scripts/dpkg-buildpackage.pl, along with
> 0004-dpkg-buildpackage-Preset-build-timestamp-to-latest-c.patch:
>
> if (! exists($ENV{SOURCE_DATE_EPOCH_TEX_PRIMITIVES})) {
> $ENV{SOURCE_DATE_EPOCH_TEX_PRIMITIVES} = 1;
> }
This is very non-generic, and package or subsystem specific, which
implies starting to do things like this would not scale at all.
Consider what would happen if every package expected their own flag to
be set by dpkg. So I'm afraid I'll not be adding this to dpkg, sorry.
You should key such changes simply on SOURCE_DATE_EPOCH instead.
Thanks,
Guillem
Message sent on
to Jérémy Bobbio <lunar@debian.org>:
Bug#759999.
(Sun, 03 Jul 2016 21:33:17 GMT) (full text, mbox, link).
Message #33 received at 759999-submitter@bugs.debian.org (full text, mbox, reply):
Control: tag 759999 pending
Hi!
Bug #759999 in package dpkg reported by you has been fixed in
the dpkg/dpkg.git Git repository. You can see the changelog below, and
you can check the diff of the fix at:
https://anonscm.debian.org/cgit/dpkg/dpkg.git/diff/?id=f6f2371
---
commit f6f2371a5dfb7c4d5b2b096a063e2a54db455edb
Author: Guillem Jover <guillem@debian.org>
Date: Mon Jul 13 04:09:09 2015 +0200
dpkg-deb: Set ar timestamp and tar mtime clamping to SOURCE_DATE_EPOCH
The ar and tar file entries contain a timestamp which is usually filled
with the current build time and the file mtime respectively. This causes
the generated deb(5) packages to not be reproducible for the same source
package and same build environment.
We now check if the environment variable SOURCE_DATE_EPOCH is defined,
parse that and use it as the timestamp for ar and to clamp the mtime in
the tar file entries.
This variable is specified to contain the timestamp of the source
release date in seconds since the epoch.
Closes: #759999
Base-on-patch-by: Jérémy Bobbio <lunar@debian.org>
diff --git a/debian/changelog b/debian/changelog
index 4f612f9..464a29a 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -31,6 +31,9 @@ dpkg (1.18.8) UNRELEASED; urgency=medium
binary packages has an mtime later than the given time. Closes: #759886
* Use the same timestamp for the ar container as for tarball mtime clamping
in dpkg-deb.
+ * Set ar timestamp and tar mtime clamping to SOURCE_DATE_EPOCH if defined
+ in dpkg-deb. Base on a patch by Jérémy Bobbio <lunar@debian.org>.
+ Closes: #759999
* Perl modules:
- Use warnings::warnif() instead of carp() for deprecated warnings.
- Add new format_range() method and deprecate dpkg() and rfc822() methods
Added tag(s) pending.
Request was from Guillem Jover <guillem@debian.org>
to 759999-submitter@bugs.debian.org.
(Sun, 03 Jul 2016 21:33:17 GMT) (full text, mbox, link).
Reply sent
to Guillem Jover <guillem@debian.org>:
You have taken responsibility.
(Sun, 03 Jul 2016 22:45:17 GMT) (full text, mbox, link).
Notification sent
to Jérémy Bobbio <lunar@debian.org>:
Bug acknowledged by developer.
(Sun, 03 Jul 2016 22:45:18 GMT) (full text, mbox, link).
Message #40 received at 759999-close@bugs.debian.org (full text, mbox, reply):
Source: dpkg
Source-Version: 1.18.8
We believe that the bug you reported is fixed in the latest version of
dpkg, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 759999@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Guillem Jover <guillem@debian.org> (supplier of updated dpkg package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 03 Jul 2016 19:01:56 +0200
Source: dpkg
Binary: libdpkg-dev dpkg dpkg-dev libdpkg-perl dselect
Architecture: source
Version: 1.18.8
Distribution: unstable
Urgency: medium
Maintainer: Dpkg Developers <debian-dpkg@lists.debian.org>
Changed-By: Guillem Jover <guillem@debian.org>
Description:
dpkg - Debian package management system
dpkg-dev - Debian package development tools
dselect - Debian package management front-end
libdpkg-dev - Debian package management static library
libdpkg-perl - Dpkg perl modules
Closes: 539692 745366 759886 759999 765494 779559 823167 823805 823877 824515 824542 824572 824873 824938 826161 826334 827265 827628 827633 828146
Changes:
dpkg (1.18.8) unstable; urgency=medium
.
[ Guillem Jover ]
* Do not disable PIE buildflags on */kFreeBSD anymore. Closes: #823877
Thanks to Steven Chamberlain <steven@pyro.eu.org>.
* Add new long options in dpkg-buildpackage for any short option that is
a useful configurable candidate.
* Add configuration file support to dpkg-buildpackage, as buildpackage.conf
under either the dpkg system or user configuration directories.
Closes: #539692, #765494
* Check that debian/tests/control is a regular file before parsing it.
* Generate Testsuite-Triggers field from test dependencies in dpkg-source
into .dsc files. Based on a patch by Martin Pitt <martin.pitt@ubuntu.com>.
Closes: #779559
* Add new dpkg-source --no-overwrite-dir extraction option. Closes: #826334
* Fix number of entries computation returned by sysctl() on */kFreeBSD in
start-stop-daemon.
* Set return buffer length for sysctl(2) calls on */kFreeBSD in
start-stop-daemon.
* Abstract ar archive handling behind a new struct dpkg_ar and functions.
* On dpkg --force-chrootless only set changedir to instdir if defined.
Thanks to Niall Walsh <niallwalsh@celtux.org>. Closes: #824542
* Set primary group to 0 in dpkg when running as root.
Reported by Stuart Prescott <stuart@debian.org>.
* Activate file triggers for conffiles on purge, which has never happened
before. Before dpkg 1.17.0, conffiles were triggered on removal, which
was obviously wrong. Reported by Helmut Grohne <helmut@subdivi.de>.
* Fix strtol() errno check when parsing the COLUMNS envvar in dpkg-query.
Thanks to Sven Joachim <svenjoac@gmx.de>. Closes: #827265
* Use new GNU tar --clamp-mtime option in dpkg-deb to make sure no file in
binary packages has an mtime later than the given time. Closes: #759886
* Use the same timestamp for the ar container as for tarball mtime clamping
in dpkg-deb.
* Set ar timestamp and tar mtime clamping to SOURCE_DATE_EPOCH if defined
in dpkg-deb. Base on a patch by Jérémy Bobbio <lunar@debian.org>.
* Preset build timestamp to latest changelog entry in dpkg-buildpackage,
by setting SOURCE_DATE_EPOCH environment variable if it is not already
defined. Based on a patch by Jérémy Bobbio <lunar@debian.org>.
Closes: #759999
* Do not use the debian/rules build target fallback when building both
architecture independent and dependent packages in dpkg-buipdpackage.
* Use architecture «all» as part of the .changes filename when building
architecture independent binaries and no architecture dependent binaries.
Closes: #826161
* Do not emit warnings from dpkg-genchanges for automatic debug symbol
packages that are not found in debian/control.
* Export SOURCE_DATE_EPOCH from pkg-info.mk makefile snippet.
Closes: #824572
* Architecture support:
- Add TILE-Gx support to cputable. Closes: #823167
Thanks to Helmut Grohne <helmut@subdivi.de>.
* Perl modules:
- Use warnings::warnif() instead of carp() for deprecated warnings.
- Add new format_range() method and deprecate dpkg() and rfc822() methods
in Dpkg::Changelog.
- Replace changelog program parsers with perl modules.
- Add a getter for the Time::Piece object in Dpkg::Changelog.
- Add new Timestamp field to Dpkg::Changelog output, which ends up on
dpkg-parsechangelog's output.
- Validate source version in set_version_substvars()'s Dpkg::Substvars
method.
- Revert "Dpkg::Conf: Switch implementation to be hash based", as this
change broke backwards compatibility in multiple ways. The format_argv
option was set by default, the order was not preserved, which was
important for dpkg.cfg files, and duplicate option names stopped being
supported. Add regression tests to avoid similar changes in the future.
Closes: #824938
- Add support for system and user config loading in Dpkg::Conf.
- Add support for autopkgtest control files, with new CTRL_TESTS control
type, new recognized fields to Dpkg::Control::Fields, and new modules
Dpkg::Control::Tests and Dpkg::Control::Tests::Entry. Also update
Dpkg::Index to support these.
- Fix Dpkg::Deps so that architecture qualifiers only imply one another
if they are the same. Closes: #745366, #827628
- Add support for new environment variable DEB_BUILD_PATH to be able to
control the path in the fixdebugpath feature in Dpkg::Vendor::Debian.
- Preserve order when prepending shared library paths in Dpkg::Shlibs.
This fixes the order of paths passed via dpkg-shlibdeps -l option.
Closes: #823805
- Check whether dependency restrictions are implied in Dpkg::Deps::Simple.
Thanks to Ben Hutchings <ben@decadent.org.uk>. Closes: #827633
- Disable upstream tar signature when building format 1.0 source packages
in Dpkg::Source::Package::V1, as the current stable dpkg series do not
support extracting them.
- Preset Last-Update field in patch header template with current time in
Dpkg::Source::Package::V2. Thanks to Daniel Shahaf <danielsh@apache.org>.
Closes: #828146
* Packaging:
- Disable libmd usage in Debian and derivatives for now.
* Build system:
- Stop allowing to set deprecated bzip2 compressor as dpkg-deb default.
- Use libmd automatically if available.
- Uniformize library build options, from --with-zlib to --with-libz,
--with-bz2 to --with-libbz2 and --with-selinux to --with-libselinux.
* Test suite:
- Bump perlcritic ValuesAndExpressions::RequireNumberSeparators minimum
to 99999.
- Add new pod-spell unit test.
- Refactor common unit test checks for needed things into Test::Dpkg.
- Accept perl's Lancaster Consensus AUTHOR_TESTING variable.
- Add new minimum perl version unit test.
- Add new synopsis unit test.
- Add unit tests for dependency simplification with build profiles.
* Documentation:
- Improve dpkg-buildpackage(1) on environment expectations.
- Clarify the format of the db:Status-Abbrev virtual field in
dpkg-query(1). Closes: #824515
- Document the tar entry size limitation for deb(5) format.
- Document interaction between PIE and libraries in dpkg-buildflags(1).
Based on text by Christian Seiler <christian@iwakd.de>.
- Merge ENVIRONMENT sections in dpkg-buildflags(1).
- Document various long options in dpkg-source --help output.
- Move dpkg-source -q option from “Build options” to “General options”
section in --help output.
- Clarify shared library search order in dpkg-shlibdeps(1).
- Remove most remaining AUTHOR sections from man an POD, as they are
strongly discouraged, for being redundant, tending to get out-of-sync,
and their format being inconsistent. In addition most got already
removed in the past for the man pages.
- Mark perlcritic as an optional author test dependency in the README.
- Fix example code in Dpkg::Compression::FileHandle SYNOPSIS.
.
[ Updated programs translations ]
* German (Sven Joachim).
* Simplified Chinese (Zhou Mo). Closes: #824873
.
[ Updated scripts translations ]
* German (Helge Kreutzmann).
.
[ Updated manpages translations ]
* German (Helge Kreutzmann).
Checksums-Sha1:
1976784ae227d550c4741ec17f4d747cf980cb48 2026 dpkg_1.18.8.dsc
ecc3973037b85e6c7bc89928d7aa83ce6f13ec23 4633168 dpkg_1.18.8.tar.xz
Checksums-Sha256:
965e50539d337897a74dd77ea9e66d2baec917ec6e089bc442320e7706abee5f 2026 dpkg_1.18.8.dsc
0b5562578a46d5c54fe77c262cd0a13ad13f4ff4bda8ccc285757ad37a3f65b7 4633168 dpkg_1.18.8.tar.xz
Files:
14737307588416c1747e78fbb69f379f 2026 admin required dpkg_1.18.8.dsc
4729a5a9cd3755c0adf37e95e22f482e 4633168 admin required dpkg_1.18.8.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=jAm3
-----END PGP SIGNATURE-----
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Mon, 01 Aug 2016 08:02:47 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Wed May 17 09:37:11 2023;
Machine Name:
buxtehude
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.