Debian Bug report logs - #924462
node-opencv: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>

To: submit@bugs.debian.org

Subject: node-opencv: please make the build reproducible

Date: Wed, 13 Mar 2019 05:12:44 -0400

[Message part 1 (text/plain, inline)]

Source: node-opencv
Version: 6.0.0+git20180416.cfc96ba0-2
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed
that node-opencv could not be built reproducibly.

This is because it ships nondeterministic examples that are generated
in the tests and subsequently installed in the binary under a "tmp"
directory.

Patch attached.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[node-opencv.diff.txt (text/plain, attachment)]

Message #8 received at 924462-submitter@bugs.debian.org (full text, mbox, reply):

From: Xavier Guimard <noreply@salsa.debian.org>

To: 924462-submitter@bugs.debian.org

Subject: Bug #924462 in node-opencv marked as pending

Date: Wed, 13 Mar 2019 09:22:57 +0000

Control: tag -1 pending

Hello,

Bug #924462 in node-opencv reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/js-team/node-opencv/commit/dd71a99f780334cd5b6c25380a99ce5a9d11120d

------------------------------------------------------------------------
Add dh_installexamples -Xtmp/ to make build reproductible

Thanks to Chris Lamb

Closes: #924462
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/924462

Message #15 received at 924462-close@bugs.debian.org (full text, mbox, reply):

From: Utkarsh Gupta <guptautkarsh2102@gmail.com>

To: 924462-close@bugs.debian.org

Subject: Bug#924462: fixed in node-opencv 6.0.0+git20180416.cfc96ba0-3

Date: Wed, 27 Mar 2019 06:36:09 +0000

Source: node-opencv
Source-Version: 6.0.0+git20180416.cfc96ba0-3

We believe that the bug you reported is fixed in the latest version of
node-opencv, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 924462@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Utkarsh Gupta <guptautkarsh2102@gmail.com> (supplier of updated node-opencv package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 27 Mar 2019 04:27:41 +0530
Source: node-opencv
Architecture: source
Version: 6.0.0+git20180416.cfc96ba0-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed-By: Utkarsh Gupta <guptautkarsh2102@gmail.com>
Closes: 924462 925571
Changes:
 node-opencv (6.0.0+git20180416.cfc96ba0-3) unstable; urgency=medium
 .
   * Team upload
 .
   [ Xavier Guimard ]
   * Add dh_installexamples -Xtmp/ to make build reproductible. Thanks to
     Chris Lamb (Closes: #924462)
 .
   [ Utkarsh Gupta ]
   * Add patch to fix CVE-2019-10061 (Closes: #925571)
Checksums-Sha1: 
 448f68ab1012a5cd776ef4512f91ac07ed63e1cf 2268 node-opencv_6.0.0+git20180416.cfc96ba0-3.dsc
 d165adf379adb89821c78fbc9805ea56ee8d66bc 6604 node-opencv_6.0.0+git20180416.cfc96ba0-3.debian.tar.xz
Checksums-Sha256: 
 80c41f7339d44192beb4c24950739c6406bd7d297ffede8b57657755f478e65b 2268 node-opencv_6.0.0+git20180416.cfc96ba0-3.dsc
 46d079ee8b21aee25a32dc86d1a529298f8a7b9f4beb57ae50a9eb90e7693a3d 6604 node-opencv_6.0.0+git20180416.cfc96ba0-3.debian.tar.xz
Files: 
 bbc4614acbd79a6cf21b26a987d69788 2268 javascript optional node-opencv_6.0.0+git20180416.cfc96ba0-3.dsc
 e36834ac3d89a62afccbd200de69cb43 6604 javascript optional node-opencv_6.0.0+git20180416.cfc96ba0-3.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=Yp1S
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.