Debian Bug report logs - #865623
cracklib2: please make the contents of /var/cache/cracklib/src-dicts reproducible

version graph

Package: src:cracklib2; Maintainer for src:cracklib2 is Jan Dittberner <jandd@debian.org>;

Reported by: Chris Lamb <lamby@debian.org>

Date: Fri, 23 Jun 2017 08:45:05 UTC

Severity: wishlist

Tags: fixed, patch

Found in version cracklib2/2.9.2-5

Fixed in version cracklib2/2.9.6-1

Done: Jan Dittberner <jandd@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Jan Dittberner <jandd@debian.org>:
Bug#865623; Package src:cracklib2. (Fri, 23 Jun 2017 08:45:08 GMT) (full text, mbox, link).

Acknowledgement sent to Chris Lamb <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Jan Dittberner <jandd@debian.org>. (Fri, 23 Jun 2017 08:45:08 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: submit@bugs.debian.org
Subject: cracklib2: please make the contents of /var/cache/cracklib/src-dicts reproducible
Date: Fri, 23 Jun 2017 09:42:01 +0100
[Message part 1 (text/plain, inline)]
Source: cracklib2
Version: 2.9.2-5
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: fileordering
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed
that cracklib2 generates /var/cache/cracklib/src-dicts with non-
reproducible output.

This is due to iterating over the filesystem (ie. in a non-deterministic
order) to populate the ${cracklib_dictpath_src} variable.

Patch attached.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb, Debian Project Leader
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[cracklib2.diff.txt (text/plain, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org:
Bug#865623; Package src:cracklib2. (Sun, 29 Jul 2018 16:33:06 GMT) (full text, mbox, link).

Acknowledgement sent to Jan Dittberner <jandd@debian.org>:
Extra info received and forwarded to list. (Sun, 29 Jul 2018 16:33:06 GMT) (full text, mbox, link).

Message #10 received at 865623@bugs.debian.org (full text, mbox, reply):

From: Jan Dittberner <jandd@debian.org>
To: 839532@bugs.debian.org, 865623@bugs.debian.org, 891868@bugs.debian.org
Cc: control@bugs.debian.org
Subject: Mark bugs fixed in git as pending
Date: Sun, 29 Jul 2018 18:10:35 +0200
[Message part 1 (text/plain, inline)]
tags 835386 + help
tags 839532 + fixed pending
tags 865623 + fixed pending
tags 891868 + fixed pending
thanks

I pushed changes to https://salsa.debian.org/debian/pkg-cracklib/, I'm not
uploading to not interfere with Python 3.7 transition yet.


Kind regards
Jan Dittberner

-- 
Jan Dittberner - Debian Developer
GPG-key: 4096R/0xA73E0055558FB8DD 2009-05-10
         B2FF 1D95 CE8F 7A22 DF4C  F09B A73E 0055 558F B8DD
https://portfolio.debian.net/ - https://people.debian.org/~jandd/

[signature.asc (application/pgp-signature, inline)]

Added tag(s) fixed and pending. Request was from Jan Dittberner <jandd@debian.org> to control@bugs.debian.org. (Sun, 29 Jul 2018 16:33:10 GMT) (full text, mbox, link).

Reply sent to Jan Dittberner <jandd@debian.org>:
You have taken responsibility. (Fri, 28 Dec 2018 22:51:05 GMT) (full text, mbox, link).

Notification sent to Chris Lamb <lamby@debian.org>:
Bug acknowledged by developer. (Fri, 28 Dec 2018 22:51:05 GMT) (full text, mbox, link).

Message #17 received at 865623-close@bugs.debian.org (full text, mbox, reply):

From: Jan Dittberner <jandd@debian.org>
To: 865623-close@bugs.debian.org
Subject: Bug#865623: fixed in cracklib2 2.9.6-1
Date: Fri, 28 Dec 2018 22:49:51 +0000
Source: cracklib2
Source-Version: 2.9.6-1

We believe that the bug you reported is fixed in the latest version of
cracklib2, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 865623@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jan Dittberner <jandd@debian.org> (supplier of updated cracklib2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 28 Dec 2018 23:19:25 +0100
Source: cracklib2
Binary: libcrack2 libcrack2-udeb libcrack2-dev cracklib-runtime python-cracklib python3-cracklib
Architecture: source amd64
Version: 2.9.6-1
Distribution: unstable
Urgency: medium
Maintainer: Jan Dittberner <jandd@debian.org>
Changed-By: Jan Dittberner <jandd@debian.org>
Description:
 cracklib-runtime - runtime support for password checker library cracklib2
 libcrack2  - pro-active password checker library
 libcrack2-dev - pro-active password checker library - development files
 libcrack2-udeb - pro-active password checker library (udeb)
 python-cracklib - Python bindings for password checker library cracklib2
 python3-cracklib - Python3 bindings for password checker library cracklib2
Closes: 839532 865623
Changes:
 cracklib2 (2.9.6-1) unstable; urgency=medium
 .
   [ Jan Dittberner ]
   * New upstream version
   * Lintian fix: add missing symbols to debian/libcrack2.symbols
   * Update VCS and Homepage URLs in debian/control
   * Update copyright information in debian/copyright
   * Fix lintian warning override_dh_auto_test-does-not-check-
     DEB_BUILD_OPTIONS
   * Add DEB_BUILD_MAINT_OPTIONS for hardening
   * Update debian/watch file to use the github release page
   * debian/control: Bump Standards Version to 4.1.5
     - remove Priority: extra for libcrack2-dev
   * Apply patch by Chris Lamb to make contents of /var/cache/cracklib/src-dict
     reproducible by sorting the file lists (Closes: #865623)
   * Bump debian/compat level and debhelper dependency to 10
   * Remove --with_autotools_dev use debhelper dh_update_autotools_config
     instead
   * Fix "FTBFS if built twice in a row: aborting due to unexpected
     upstream changes" by removing config.h.in that is regenerated by
     autoheader (Closes: #839532)
 .
   [ Ondřej Nový ]
   * d/copyright: Use https protocol in Format field
 .
   [ Jan Dittberner ]
   * Remove useless autotools-dev from Build-Depends to fix lintian
     warning
Checksums-Sha1:
 87e571401f24304f1b97125c7aaa6841cd59c2f7 2549 cracklib2_2.9.6-1.dsc
 9199e7b8830717565a844430653f5a90a04fcd65 642402 cracklib2_2.9.6.orig.tar.gz
 64212ee255af5d9c2a9952b1e308ca303f6bd0d4 26700 cracklib2_2.9.6-1.debian.tar.xz
 36342ac55be5f6ba9826bf460a20eae39fc02c14 11080 cracklib-runtime-dbgsym_2.9.6-1_amd64.deb
 97044eefc716cac7311d76083cbba4c251cf361b 154780 cracklib-runtime_2.9.6-1_amd64.deb
 bafa6138c61c006f98977c04090bcf60ca70c8ef 12629 cracklib2_2.9.6-1_amd64.buildinfo
 21d145370f213e6b79b314488298aa887b4d11c8 25512 libcrack2-dbgsym_2.9.6-1_amd64.deb
 165e50634896a4d553a1d2c4ab1c1ef76c640b57 32652 libcrack2-dev_2.9.6-1_amd64.deb
 b29ceb2cd24fedd5f473c9e45f3521abd3da8b9a 125756 libcrack2-udeb_2.9.6-1_amd64.udeb
 17de19195a9c715b7805673f2c36c4198bc0c8a7 55256 libcrack2_2.9.6-1_amd64.deb
 760a96696eaf5c7a5a8115f92ff2265aabfdeea8 13232 python-cracklib-dbgsym_2.9.6-1_amd64.deb
 f80bb6b622ab2856d868bd25bfa7dc307fd8a8c2 23920 python-cracklib_2.9.6-1_amd64.deb
 0cd8f7844a5c058875693b2d6d31c179d3bce63c 15412 python3-cracklib-dbgsym_2.9.6-1_amd64.deb
 044209a6752a582fbea45d5b86a6dafc27f19f7d 23956 python3-cracklib_2.9.6-1_amd64.deb
Checksums-Sha256:
 bbde9841146ef5d6e0dcf606cf3f05858b6c41079a7d2a8af929fac748da60d8 2549 cracklib2_2.9.6-1.dsc
 17cf76943de272fd579ed831a1fd85339b393f8d00bf9e0d17c91e972f583343 642402 cracklib2_2.9.6.orig.tar.gz
 25bc6a4591e36fb72b687612a9777186dbba4336d68ffff21efb7c513d0cbf2d 26700 cracklib2_2.9.6-1.debian.tar.xz
 33e26365dd0405e29fd183ddf4c0cd4db4c40daba0aff27400aaa3b9e69b206a 11080 cracklib-runtime-dbgsym_2.9.6-1_amd64.deb
 cab09fca33f6087a9198af758c099f78206d7520657119acad7c79fbb8403ea3 154780 cracklib-runtime_2.9.6-1_amd64.deb
 f698eef70e4138404550a87a51c1dbd7410e48a09b3ad410a4b3c20fe20bc803 12629 cracklib2_2.9.6-1_amd64.buildinfo
 768ce657a43a651c7635382c0f9600202a3ad991c0a02156c158660347cf1b43 25512 libcrack2-dbgsym_2.9.6-1_amd64.deb
 86c11fb5edda3d6d68de7097331eb502e03533d3eb2793d9438ea43835ac2ef3 32652 libcrack2-dev_2.9.6-1_amd64.deb
 6b666e234d2934d86b087fc67df70e52d4f2d23a94361334c8289c721757dd6a 125756 libcrack2-udeb_2.9.6-1_amd64.udeb
 8bac75376f756655f56b01587155d63c7f9e9b689f3895786045453b301f1e18 55256 libcrack2_2.9.6-1_amd64.deb
 3de50a666f12e4581127787fc1e0598d448cc15d3e943c3cdaa186a0f80d3744 13232 python-cracklib-dbgsym_2.9.6-1_amd64.deb
 ccc5aca29222d1717b688afe7cf38d0089150e58b164c12c2915fdd6b123cff9 23920 python-cracklib_2.9.6-1_amd64.deb
 13468f4268fb7a44ad65baddb3f2cb01454fbb2d19ca59426d158445a820378c 15412 python3-cracklib-dbgsym_2.9.6-1_amd64.deb
 383bbf6fb40d00263de2bd4655f20085d20d2d35ea1ede9341a4a8de3cd1a268 23956 python3-cracklib_2.9.6-1_amd64.deb
Files:
 6ae57bfc5d103735e567695149407046 2549 libs optional cracklib2_2.9.6-1.dsc
 c52f463585d85924b28cdc1e373ae06d 642402 libs optional cracklib2_2.9.6.orig.tar.gz
 a7717462f2c5559c4bd6f2dfa5a78589 26700 libs optional cracklib2_2.9.6-1.debian.tar.xz
 b52322ad108a670943083cade49b53e9 11080 debug optional cracklib-runtime-dbgsym_2.9.6-1_amd64.deb
 2cefd04ba28a0841c75826010a6fea34 154780 admin optional cracklib-runtime_2.9.6-1_amd64.deb
 d1547562e4d80d950b8ad108210da0f2 12629 libs optional cracklib2_2.9.6-1_amd64.buildinfo
 04a0e9b15f55acc484a737aadff24f23 25512 debug optional libcrack2-dbgsym_2.9.6-1_amd64.deb
 0a8cb73906d840b078d689efa8abc6ab 32652 libdevel optional libcrack2-dev_2.9.6-1_amd64.deb
 98a0ae534a4b7832d44418da5fc32abb 125756 debian-installer optional libcrack2-udeb_2.9.6-1_amd64.udeb
 2cbad1ad1ff7a4d3ae153fa1a12ce944 55256 libs optional libcrack2_2.9.6-1_amd64.deb
 ab4f715eb9031745cf9d32cc0e0a4ed4 13232 debug optional python-cracklib-dbgsym_2.9.6-1_amd64.deb
 bb1d9940f00bcb1b37e84cfc25d46587 23920 python optional python-cracklib_2.9.6-1_amd64.deb
 9cdacd7f26121b522b05cec20f4c08d6 15412 debug optional python3-cracklib-dbgsym_2.9.6-1_amd64.deb
 a827a4f27645693dc2540a7b71ace5f6 23956 python optional python3-cracklib_2.9.6-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=316C
-----END PGP SIGNATURE-----

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sat, 02 Feb 2019 07:27:38 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 09:34:21 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.