Debian Bug report logs -
#964369
nmap: please make the obfuscated nmap_service.exe file reproducible
Reported by: "Chris Lamb" <lamby@debian.org>
Date: Mon, 6 Jul 2020 08:36:02 UTC
Severity: wishlist
Tags: patch
Found in version nmap/7.80+dfsg1-4
Fixed in version nmap/7.80+dfsg1-5
Done: Hilko Bengen <bengen@debian.org>
Bug is archived. No further changes may be made.
Toggle useless messages
Report forwarded
to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Debian Security Tools <team+pkg-security@tracker.debian.org>:
Bug#964369; Package src:nmap.
(Mon, 06 Jul 2020 08:36:04 GMT) (full text, mbox, link).
Acknowledgement sent
to "Chris Lamb" <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Debian Security Tools <team+pkg-security@tracker.debian.org>.
(Mon, 06 Jul 2020 08:36:04 GMT) (full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Source: nmap
Version: 7.80+dfsg1-4
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org
Hi,
Whilst working on the Reproducible Builds effort [0] we noticed that
the newly-obfuscated nmap_service.exe file was not being obfuscated
reproducibly and varied on the current build time.
Patch attached.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-
[nmap.diff.txt (text/plain, attachment)]
Message sent on
to "Chris Lamb" <lamby@debian.org>:
Bug#964369.
(Mon, 06 Jul 2020 21:06:03 GMT) (full text, mbox, link).
Message #8 received at 964369-submitter@bugs.debian.org (full text, mbox, reply):
Control: tag -1 pending
Hello,
Bug #964369 in nmap reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:
https://salsa.debian.org/pkg-security-team/nmap/-/commit/31d526b4b8368374725db8a5c725cf5244baf0f3
------------------------------------------------------------------------
Make nmap_service.ex_ reproducible, thanks to Chris Lamb for the patch (Closes: #964369)
------------------------------------------------------------------------
(this message was generated automatically)
--
Greetings
https://bugs.debian.org/964369
Added tag(s) pending.
Request was from Hilko Bengen <bengen@debian.org>
to 964369-submitter@bugs.debian.org.
(Mon, 06 Jul 2020 21:06:03 GMT) (full text, mbox, link).
Reply sent
to Hilko Bengen <bengen@debian.org>:
You have taken responsibility.
(Mon, 06 Jul 2020 21:21:06 GMT) (full text, mbox, link).
Notification sent
to "Chris Lamb" <lamby@debian.org>:
Bug acknowledged by developer.
(Mon, 06 Jul 2020 21:21:06 GMT) (full text, mbox, link).
Message #15 received at 964369-close@bugs.debian.org (full text, mbox, reply):
Source: nmap
Source-Version: 7.80+dfsg1-5
Done: Hilko Bengen <bengen@debian.org>
We believe that the bug you reported is fixed in the latest version of
nmap, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 964369@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Hilko Bengen <bengen@debian.org> (supplier of updated nmap package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 06 Jul 2020 23:01:39 +0200
Source: nmap
Architecture: source
Version: 7.80+dfsg1-5
Distribution: unstable
Urgency: medium
Maintainer: Debian Security Tools <team+pkg-security@tracker.debian.org>
Changed-By: Hilko Bengen <bengen@debian.org>
Closes: 964369
Changes:
nmap (7.80+dfsg1-5) unstable; urgency=medium
.
* Make nmap_service.ex_ reproducible, thanks to Chris Lamb for the patch
(Closes: #964369)
Checksums-Sha1:
5372459c69570d088ab0869103f83d053c910a77 2300 nmap_7.80+dfsg1-5.dsc
7195de333ba2128582e0b30394765cf829e2bbb4 34008 nmap_7.80+dfsg1-5.debian.tar.xz
93c8160efdb27718df662f7197ab3179aa95b7b6 6397 nmap_7.80+dfsg1-5_source.buildinfo
Checksums-Sha256:
a5fa8fd868319d30b97e94a39c97a09614041fa27f3ad0a2c378b55c3475896f 2300 nmap_7.80+dfsg1-5.dsc
9e79feb979597fb69c75409e9508a28fbcc244f5b5b6e9aaa8a34f5096c05635 34008 nmap_7.80+dfsg1-5.debian.tar.xz
257c51983fd987f034277c59157df0d82ab54a648dcfe454172f86b534bc3c69 6397 nmap_7.80+dfsg1-5_source.buildinfo
Files:
7d91acec3375f3821a4f34ea141257b2 2300 net optional nmap_7.80+dfsg1-5.dsc
8b98ad18b955ef6d8ff1373b92fb1f40 34008 net optional nmap_7.80+dfsg1-5.debian.tar.xz
6b10c2ce60db8289f94d82f2a06d65ea 6397 net optional nmap_7.80+dfsg1-5_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJGBAEBCAAwFiEErnMQVUQqHZbPTUx4dbcQY1whOn4FAl8DkV4SHGJlbmdlbkBk
ZWJpYW4ub3JnAAoJEHW3EGNcITp+KDYP/0wJf4x3m46NpzQS6rmviZnhw/C3Vcs2
YCfi25CmmP22mYlQHutcoKBoP3k4tsH9sHJuqAgPfy/zw4YLR0ltrAVFLYeZx9Jn
FCd7ShSKedoUd0yetmOLx2wcgBveiLKJ0JjscNKxSEjsLMdUyOPziaKXTxdq5gCa
YjAW2Ns4jFsvS0JxI1Od2gfz8GFs0fdShDXuG74HbW2hOJZTVTkQ237F96/2PRZ+
Nlt3ioTwf1twqXv+8RqGRT/MequHK8uEdPhmZUFtpfgY8LHTbGWUE+Pk5rMKh24b
YRoELKYanUf4IupkyGFYbboGD/Esz3WAPo6uN+LhAR27Zh46Z7NBPdFhosaSiURh
Wu6o7q51YgS9VVr4jAlwK5Z6OfpNPO/vInpmVddvBqD2h7B4YtOtyTIQEkZrvmzJ
zsTzkfGbQyDyO4AT/+54QqPNAd1MNZHqy0JfMNtnJfsMsbTDB+25+XdcQ4f7wRww
4n2mj7xeJAKUF9y0C89wNPRiyUr2VNPevvQupnaDVi4jcZI7htiSnl+SKogzMFC9
hN1TjGwv1vsEBMA32+i/W/mEQLAjfF7crVk3MqG4HG1r+Chpn1ZROjyRHogoIISC
chitRq5PIM48i+OXjxBSt4EVw1eLxKnU0x8C24oqd3GUQM0wJW+XadpAAzyM/gxb
wkIby9xAiQHk
=q1uD
-----END PGP SIGNATURE-----
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Sun, 09 Aug 2020 07:30:59 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Wed May 17 10:07:07 2023;
Machine Name:
buxtehude
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.