--- /srv/rebuilderd/tmp/rebuilderdhjPHXS/inputs/qt6-multimedia-dev_6.11.2-3_arm64.deb
+++ /srv/rebuilderd/tmp/rebuilderdhjPHXS/out/qt6-multimedia-dev_6.11.2-3_arm64.deb
├── file list
│ @@ -1,3 +1,3 @@
│  -rw-r--r--   0        0        0        4 2026-09-20 15:02:27.000000 debian-binary
│  -rw-r--r--   0        0        0     6804 2026-09-20 15:02:27.000000 control.tar.xz
│ --rw-r--r--   0        0        0    77800 2026-09-20 15:02:27.000000 data.tar.xz
│ +-rw-r--r--   0        0        0    77804 2026-09-20 15:02:27.000000 data.tar.xz
├── control.tar.xz
│ ├── control.tar
│ │ ├── ./md5sums
│ │ │ ├── ./md5sums
│ │ │ │┄ Files differ
├── data.tar.xz
│ ├── data.tar
│ │ ├── ./usr/lib/aarch64-linux-gnu/qt6/sbom/qtmultimedia-6.11.2.spdx
│ │ │ @@ -712,24 +712,24 @@
│ │ │      Id: resonance-audio
│ │ │      Name: Resonance Audio
│ │ │      Description: 3D audio support.
│ │ │      Qt usage: Used to implement spatial audio.
│ │ │      License: Apache License 2.0
│ │ │      License file: LICENSE
│ │ │  </text>
│ │ │ -PackageVerificationCode: 12b29975c24bdd591d3fd81e89ed68e5eb676553
│ │ │ +PackageVerificationCode: 13f5b1ba25572497cfd259f3e9ce131baf018bb2
│ │ │  FilesAnalyzed: true
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-b2f5eee8c656 CONTAINS SPDXRef-Package-qtmultimedia-qt-bundled-3rdparty-module-BundledResonanceAudio-b2f5eee8c656
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-bundled-3rdparty-module-BundledResonanceAudio-b2f5eee8c656 DEPENDS_ON DocumentRef-qtbase-4a3a51929f52:SPDXRef-Package-qtbase-qt-module-PlatformModuleInternal-4a3a51929f52
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-bundled-3rdparty-module-BundledResonanceAudio-b2f5eee8c656 DEPENDS_ON SPDXRef-Package-qtmultimedia-qt-3rdparty-sources-BundledResonanceAudio-Attribution-pffft-b2f5eee8c656
│ │ │  
│ │ │  FileName: ./lib/aarch64-linux-gnu/libQt6BundledResonanceAudio.a
│ │ │  SPDXID: SPDXRef-PackagedFile-qt-bundled-3rdparty-module-BundledResonanceAudio-b2f5eee8c656
│ │ │  FileType: BINARY
│ │ │ -FileChecksum: SHA1: 9f14a84ee96996863a84328a7ddf73c0da11d63b
│ │ │ +FileChecksum: SHA1: b1673c6369549c4f9c8dc1e080fef31ed378a492
│ │ │  LicenseConcluded: Apache-2.0
│ │ │  FileCopyrightText: <text>Copyright (c) 2015, 2017, 2018 Google Inc.
│ │ │  </text>
│ │ │  LicenseInfoInFile: NOASSERTION
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-bundled-3rdparty-module-BundledResonanceAudio-b2f5eee8c656 CONTAINS SPDXRef-PackagedFile-qt-bundled-3rdparty-module-BundledResonanceAudio-b2f5eee8c656
│ │ │  Relationship: SPDXRef-PackagedFile-qt-bundled-3rdparty-module-BundledResonanceAudio-b2f5eee8c656 GENERATED_FROM NOASSERTION
│ │ │  RelationshipComment: /src_dir/qtmultimedia/src/3rdparty/resonance-audio/platforms/common/utils.cc
│ │ │ @@ -1466,15 +1466,15 @@
│ │ │  PackageComment: <text>
│ │ │  CMake target name: FFmpegMediaPluginImplPrivate
│ │ │  CMake exported target name: Qt6::FFmpegMediaPluginImpl
│ │ │  Contained in CMake package: Qt6FFmpegMediaPluginImplPrivate
│ │ │  </text>
│ │ │  ExternalRef: SECURITY cpe23Type cpe:2.3:a:qt:qt:6.11.2:*:*:*:*:*:*:*
│ │ │  ExternalRef: SECURITY cpe23Type cpe:2.3:a:qt:qtmultimedia:6.11.2:*:*:*:*:*:*:*
│ │ │ -PackageVerificationCode: bf4144fe07acd926b94e7ae64ebd8a659f86960d
│ │ │ +PackageVerificationCode: ea2ffdfe8024aac198ca81bbf98ab51101a3e9a5
│ │ │  FilesAnalyzed: true
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-b2f5eee8c656 CONTAINS SPDXRef-Package-qtmultimedia-qt-module-FFmpegMediaPluginImplPrivate-b2f5eee8c656
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-module-FFmpegMediaPluginImplPrivate-b2f5eee8c656 DEPENDS_ON DocumentRef-qtbase-4a3a51929f52:SPDXRef-Package-qtbase-qt-module-PlatformModuleInternal-4a3a51929f52
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-module-FFmpegMediaPluginImplPrivate-b2f5eee8c656 DEPENDS_ON DocumentRef-qtdeclarative-f184672f2f20:SPDXRef-Package-qtdeclarative-qt-module-Quick-f184672f2f20
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-module-FFmpegMediaPluginImplPrivate-b2f5eee8c656 DEPENDS_ON DocumentRef-qtbase-4a3a51929f52:SPDXRef-Package-qtbase-qt-module-OpenGL-4a3a51929f52
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-module-FFmpegMediaPluginImplPrivate-b2f5eee8c656 DEPENDS_ON DocumentRef-qtbase-4a3a51929f52:SPDXRef-Package-qtbase-qt-module-Core-4a3a51929f52
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-module-FFmpegMediaPluginImplPrivate-b2f5eee8c656 DEPENDS_ON SPDXRef-Package-qtmultimedia-system-3rdparty-EGL-b2f5eee8c656
│ │ │ @@ -1482,15 +1482,15 @@
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-module-FFmpegMediaPluginImplPrivate-b2f5eee8c656 DEPENDS_ON SPDXRef-Package-qtmultimedia-qt-module-Multimedia-b2f5eee8c656
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-module-FFmpegMediaPluginImplPrivate-b2f5eee8c656 DEPENDS_ON SPDXRef-Package-qtmultimedia-system-3rdparty-FFmpeg-b2f5eee8c656
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-module-FFmpegMediaPluginImplPrivate-b2f5eee8c656 DEPENDS_ON SPDXRef-Package-qtmultimedia-qt-3rdparty-sources-FFmpegMediaPluginImplPrivate-Attribution-signalsmith-stretch-b2f5eee8c656
│ │ │  
│ │ │  FileName: ./lib/aarch64-linux-gnu/libQt6FFmpegMediaPluginImpl.a
│ │ │  SPDXID: SPDXRef-PackagedFile-qt-module-FFmpegMediaPluginImplPrivate-b2f5eee8c656
│ │ │  FileType: BINARY
│ │ │ -FileChecksum: SHA1: 01c8af5f3e11408e90f6ad29d15e275c126f132f
│ │ │ +FileChecksum: SHA1: f0bd5f618458eacffa7f9d0cac0fa0ff074d5ce3
│ │ │  LicenseConcluded: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only
│ │ │  FileCopyrightText: <text>Copyright (C) The Qt Company Ltd. and other contributors.</text>
│ │ │  LicenseInfoInFile: NOASSERTION
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-module-FFmpegMediaPluginImplPrivate-b2f5eee8c656 CONTAINS SPDXRef-PackagedFile-qt-module-FFmpegMediaPluginImplPrivate-b2f5eee8c656
│ │ │  Relationship: SPDXRef-PackagedFile-qt-module-FFmpegMediaPluginImplPrivate-b2f5eee8c656 GENERATED_FROM NOASSERTION
│ │ │  RelationshipComment: /src_dir/qtmultimedia/src/plugins/multimedia/ffmpeg/ffmpeg_pch.h
│ │ │  Relationship: SPDXRef-PackagedFile-qt-module-FFmpegMediaPluginImplPrivate-b2f5eee8c656 GENERATED_FROM NOASSERTION
│ │ │ @@ -1779,27 +1779,27 @@
│ │ │  PackageComment: <text>
│ │ │  CMake target name: MultimediaTestLibPrivate
│ │ │  CMake exported target name: Qt6::MultimediaTestLib
│ │ │  Contained in CMake package: Qt6MultimediaTestLibPrivate
│ │ │  </text>
│ │ │  ExternalRef: SECURITY cpe23Type cpe:2.3:a:qt:qt:6.11.2:*:*:*:*:*:*:*
│ │ │  ExternalRef: SECURITY cpe23Type cpe:2.3:a:qt:qtmultimedia:6.11.2:*:*:*:*:*:*:*
│ │ │ -PackageVerificationCode: 83ca3d6c7e8750e4bd6ac6893a4055618a88e7fa
│ │ │ +PackageVerificationCode: 697296d4eb6156d45858b9a1aa33f65a3d5dede1
│ │ │  FilesAnalyzed: true
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-b2f5eee8c656 CONTAINS SPDXRef-Package-qtmultimedia-qt-module-MultimediaTestLibPrivate-b2f5eee8c656
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-module-MultimediaTestLibPrivate-b2f5eee8c656 DEPENDS_ON DocumentRef-qtbase-4a3a51929f52:SPDXRef-Package-qtbase-qt-module-PlatformModuleInternal-4a3a51929f52
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-module-MultimediaTestLibPrivate-b2f5eee8c656 DEPENDS_ON DocumentRef-qtbase-4a3a51929f52:SPDXRef-Package-qtbase-qt-module-Core-4a3a51929f52
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-module-MultimediaTestLibPrivate-b2f5eee8c656 DEPENDS_ON DocumentRef-qtbase-4a3a51929f52:SPDXRef-Package-qtbase-qt-module-Gui-4a3a51929f52
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-module-MultimediaTestLibPrivate-b2f5eee8c656 DEPENDS_ON DocumentRef-qtbase-4a3a51929f52:SPDXRef-Package-qtbase-qt-module-Test-4a3a51929f52
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-module-MultimediaTestLibPrivate-b2f5eee8c656 DEPENDS_ON SPDXRef-Package-qtmultimedia-qt-module-Multimedia-b2f5eee8c656
│ │ │  
│ │ │  FileName: ./lib/aarch64-linux-gnu/libQt6MultimediaTestLib.a
│ │ │  SPDXID: SPDXRef-PackagedFile-qt-module-MultimediaTestLibPrivate-b2f5eee8c656
│ │ │  FileType: BINARY
│ │ │ -FileChecksum: SHA1: 7b7b6b91487c98f0f232e54d1e58a467eb5ead24
│ │ │ +FileChecksum: SHA1: 0e50f5d22ed87a72fdbda6533a6c952cf31e1610
│ │ │  LicenseConcluded: LicenseRef-Qt-Commercial OR GPL-3.0-only
│ │ │  FileCopyrightText: <text>Copyright (C) The Qt Company Ltd. and other contributors.</text>
│ │ │  LicenseInfoInFile: NOASSERTION
│ │ │  Relationship: SPDXRef-Package-qtmultimedia-qt-module-MultimediaTestLibPrivate-b2f5eee8c656 CONTAINS SPDXRef-PackagedFile-qt-module-MultimediaTestLibPrivate-b2f5eee8c656
│ │ │  Relationship: SPDXRef-PackagedFile-qt-module-MultimediaTestLibPrivate-b2f5eee8c656 GENERATED_FROM NOASSERTION
│ │ │  RelationshipComment: /src_dir/qtmultimedia/src/multimediatestlib/audiogenerationutils_p.h
│ │ │  Relationship: SPDXRef-PackagedFile-qt-module-MultimediaTestLibPrivate-b2f5eee8c656 GENERATED_FROM NOASSERTION