--- /srv/rebuilderd/tmp/rebuilderdNnzdyL/inputs/git-annex_10.20261006-1_amd64.deb +++ /srv/rebuilderd/tmp/rebuilderdNnzdyL/out/git-annex_10.20261006-1_amd64.deb ├── file list │ @@ -1,3 +1,3 @@ │ -rw-r--r-- 0 0 0 4 2026-10-21 18:46:59.000000 debian-binary │ --rw-r--r-- 0 0 0 20980 2026-10-21 18:46:59.000000 control.tar.xz │ --rw-r--r-- 0 0 0 15893328 2026-10-21 18:46:59.000000 data.tar.xz │ +-rw-r--r-- 0 0 0 20976 2026-10-21 18:46:59.000000 control.tar.xz │ +-rw-r--r-- 0 0 0 15893312 2026-10-21 18:46:59.000000 data.tar.xz ├── control.tar.xz │ ├── control.tar │ │ ├── ./md5sums │ │ │ ├── ./md5sums │ │ │ │┄ Files differ ├── data.tar.xz │ ├── data.tar │ │ ├── file list │ │ │ @@ -412,15 +412,15 @@ │ │ │ drwxr-xr-x 0 root (0) root (0) 0 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/security/ │ │ │ -rw-r--r-- 0 root (0) root (0) 2794 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/security/CVE-2014-6274.html │ │ │ -rw-r--r-- 0 root (0) root (0) 2817 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/security/CVE-2017-12976.html │ │ │ -rw-r--r-- 0 root (0) root (0) 6821 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/security/CVE-2018-10857_and_CVE-2018-10859.html │ │ │ -rw-r--r-- 0 root (0) root (0) 2895 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/security/checksum_exposure_to_encrypted_special_remotes.html │ │ │ -rw-r--r-- 0 root (0) root (0) 3642 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/security/mitigation.html │ │ │ -rw-r--r-- 0 root (0) root (0) 2296 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/security/p2phttp_denial_of_service.html │ │ │ --rw-r--r-- 0 root (0) root (0) 18663 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/security.html │ │ │ +-rw-r--r-- 0 root (0) root (0) 18665 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/security.html │ │ │ -rw-r--r-- 0 root (0) root (0) 2432 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/shortcuts.html │ │ │ -rw-r--r-- 0 root (0) root (0) 2327 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/sidebar.html │ │ │ drwxr-xr-x 0 root (0) root (0) 0 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/sims/ │ │ │ -rw-r--r-- 0 root (0) root (0) 2320 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/sims/balanced.html │ │ │ -rw-r--r-- 0 root (0) root (0) 2425 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/sims/randomwanted.html │ │ │ -rw-r--r-- 0 root (0) root (0) 2830 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/sims/sizebalanced_cluster.html │ │ │ -rw-r--r-- 0 root (0) root (0) 4267 2026-10-21 18:46:59.000000 ./usr/share/doc/git-annex/html/sims/sizebalanced_splitbrain.html │ │ ├── ./usr/share/doc/git-annex/html/security/CVE-2014-6274.html │ │ │ @@ -89,15 +89,15 @@ │ │ │ │ │ │

The creds embedded in the git repo were not encrypted. │ │ │ git-annex enableremote will warn when used on a remote that has │ │ │ this problem. For details, see insecure embedded creds.

│ │ │ │ │ │

Fixed in git-annex 5.20140919.

│ │ │ │ │ │ -

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/x86_64-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl-base /usr/lib/x86_64-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 23405) line 1. BEGIN failed--compilation aborted at (eval 23405) line 1. ]]

│ │ │ +

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/x86_64-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl-base /usr/lib/x86_64-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 27085) line 1. BEGIN failed--compilation aborted at (eval 27085) line 1. ]]

│ │ │ │ │ │ │ │ │ ├── html2text {} │ │ │ │ @@ -17,11 +17,11 @@ │ │ │ │ _i_n_s_e_c_u_r_e_ _e_m_b_e_d_d_e_d_ _c_r_e_d_s. │ │ │ │ Fixed in git-annex 5.20140919. │ │ │ │ [[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the │ │ │ │ Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/x86_64- │ │ │ │ linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/x86_64-linux-gnu/ │ │ │ │ perl5/5.42 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl-base /usr/lib/ │ │ │ │ x86_64-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at │ │ │ │ -(eval 23405) line 1. BEGIN failed--compilation aborted at (eval 23405) line 1. │ │ │ │ +(eval 27085) line 1. BEGIN failed--compilation aborted at (eval 27085) line 1. │ │ │ │ ]] │ │ │ │ Comments on this page are closed. │ │ │ │ Last edited Tue Oct 6 14:06:39 2026 │ │ ├── ./usr/share/doc/git-annex/html/security/CVE-2017-12976.html │ │ │ @@ -89,15 +89,15 @@ │ │ │ repository url to cause the victim to execute arbitrary code via │ │ │ -oProxyCommand.

│ │ │ │ │ │

Fixed in git-annex 6.20170818

│ │ │ │ │ │

This is related to a git security hole, CVE-2017-1000117.

│ │ │ │ │ │ -

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/x86_64-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl-base /usr/lib/x86_64-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 23393) line 1. BEGIN failed--compilation aborted at (eval 23393) line 1. ]]

│ │ │ +

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/x86_64-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl-base /usr/lib/x86_64-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 27117) line 1. BEGIN failed--compilation aborted at (eval 27117) line 1. ]]

│ │ │ │ │ │ │ │ │ ├── html2text {} │ │ │ │ @@ -17,11 +17,11 @@ │ │ │ │ Fixed in git-annex 6.20170818 │ │ │ │ This is related to a git security hole, _C_V_E_-_2_0_1_7_-_1_0_0_0_1_1_7. │ │ │ │ [[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the │ │ │ │ Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/x86_64- │ │ │ │ linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/x86_64-linux-gnu/ │ │ │ │ perl5/5.42 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl-base /usr/lib/ │ │ │ │ x86_64-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at │ │ │ │ -(eval 23393) line 1. BEGIN failed--compilation aborted at (eval 23393) line 1. │ │ │ │ +(eval 27117) line 1. BEGIN failed--compilation aborted at (eval 27117) line 1. │ │ │ │ ]] │ │ │ │ Comments on this page are closed. │ │ │ │ Last edited Tue Oct 6 14:06:39 2026 │ │ ├── ./usr/share/doc/git-annex/html/security/checksum_exposure_to_encrypted_special_remotes.html │ │ │ @@ -91,15 +91,15 @@ │ │ │ │ │ │

For details, see [[!commit b890f3a53d936b5e40aa9acc5876cb98f18b9657]]

│ │ │ │ │ │

No CVE was assigned for this issue.

│ │ │ │ │ │

Fixed in git-annex 6.20160419

│ │ │ │ │ │ -

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/x86_64-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl-base /usr/lib/x86_64-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 23373) line 1. BEGIN failed--compilation aborted at (eval 23373) line 1. ]]

│ │ │ +

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/x86_64-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl-base /usr/lib/x86_64-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 27097) line 1. BEGIN failed--compilation aborted at (eval 27097) line 1. ]]

│ │ │ │ │ │ │ │ │ ├── html2text {} │ │ │ │ @@ -18,11 +18,11 @@ │ │ │ │ No CVE was assigned for this issue. │ │ │ │ Fixed in git-annex 6.20160419 │ │ │ │ [[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the │ │ │ │ Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/x86_64- │ │ │ │ linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/x86_64-linux-gnu/ │ │ │ │ perl5/5.42 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl-base /usr/lib/ │ │ │ │ x86_64-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at │ │ │ │ -(eval 23373) line 1. BEGIN failed--compilation aborted at (eval 23373) line 1. │ │ │ │ +(eval 27097) line 1. BEGIN failed--compilation aborted at (eval 27097) line 1. │ │ │ │ ]] │ │ │ │ Comments on this page are closed. │ │ │ │ Last edited Tue Oct 6 14:06:39 2026 │ │ ├── ./usr/share/doc/git-annex/html/security.html │ │ │ @@ -114,15 +114,15 @@ │ │ │ │ │ │

The creds embedded in the git repo were not encrypted. │ │ │ git-annex enableremote will warn when used on a remote that has │ │ │ this problem. For details, see insecure embedded creds.

│ │ │ │ │ │

Fixed in git-annex 5.20140919.

│ │ │ │ │ │ -

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/x86_64-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl-base /usr/lib/x86_64-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 8701) line 1. BEGIN failed--compilation aborted at (eval 8701) line 1. ]]

│ │ │ +

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/x86_64-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl-base /usr/lib/x86_64-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 9988) line 1. BEGIN failed--compilation aborted at (eval 9988) line 1. ]]

│ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │