--- /srv/rebuilderd/tmp/rebuilderdy2XcL1/inputs/git-annex_10.20261026-1_i386.deb +++ /srv/rebuilderd/tmp/rebuilderdy2XcL1/out/git-annex_10.20261026-1_i386.deb ├── file list │ @@ -1,3 +1,3 @@ │ -rw-r--r-- 0 0 0 4 2026-10-26 21:48:23.000000 debian-binary │ -rw-r--r-- 0 0 0 21112 2026-10-26 21:48:23.000000 control.tar.xz │ --rw-r--r-- 0 0 0 15865832 2026-10-26 21:48:23.000000 data.tar.xz │ +-rw-r--r-- 0 0 0 15865888 2026-10-26 21:48:23.000000 data.tar.xz ├── control.tar.xz │ ├── control.tar │ │ ├── ./md5sums │ │ │ ├── ./md5sums │ │ │ │┄ Files differ ├── data.tar.xz │ ├── data.tar │ │ ├── file list │ │ │ @@ -415,15 +415,15 @@ │ │ │ -rw-r--r-- 0 root (0) root (0) 2786 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/security/CVE-2014-6274.html │ │ │ -rw-r--r-- 0 root (0) root (0) 2809 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/security/CVE-2017-12976.html │ │ │ -rw-r--r-- 0 root (0) root (0) 6821 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/security/CVE-2018-10857_and_CVE-2018-10859.html │ │ │ -rw-r--r-- 0 root (0) root (0) 2887 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/security/checksum_exposure_to_encrypted_special_remotes.html │ │ │ -rw-r--r-- 0 root (0) root (0) 5458 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/security/cross_repository_data_exfiltration_via_special_remote.html │ │ │ -rw-r--r-- 0 root (0) root (0) 3642 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/security/mitigation.html │ │ │ -rw-r--r-- 0 root (0) root (0) 2296 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/security/p2phttp_denial_of_service.html │ │ │ --rw-r--r-- 0 root (0) root (0) 22667 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/security.html │ │ │ +-rw-r--r-- 0 root (0) root (0) 22673 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/security.html │ │ │ -rw-r--r-- 0 root (0) root (0) 2432 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/shortcuts.html │ │ │ -rw-r--r-- 0 root (0) root (0) 2327 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/sidebar.html │ │ │ drwxr-xr-x 0 root (0) root (0) 0 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/sims/ │ │ │ -rw-r--r-- 0 root (0) root (0) 2320 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/sims/balanced.html │ │ │ -rw-r--r-- 0 root (0) root (0) 2425 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/sims/randomwanted.html │ │ │ -rw-r--r-- 0 root (0) root (0) 2830 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/sims/sizebalanced_cluster.html │ │ │ -rw-r--r-- 0 root (0) root (0) 4267 2026-10-26 21:48:23.000000 ./usr/share/doc/git-annex/html/sims/sizebalanced_splitbrain.html │ │ ├── ./usr/share/doc/git-annex/html/security/CVE-2014-6274.html │ │ │ @@ -89,15 +89,15 @@ │ │ │ │ │ │

The creds embedded in the git repo were not encrypted. │ │ │ git-annex enableremote will warn when used on a remote that has │ │ │ this problem. For details, see insecure embedded creds.

│ │ │ │ │ │

Fixed in git-annex 5.20140919.

│ │ │ │ │ │ -

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/i386-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/i386-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/i386-linux-gnu/perl-base /usr/lib/i386-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 23434) line 1. BEGIN failed--compilation aborted at (eval 23434) line 1. ]]

│ │ │ +

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/i386-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/i386-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/i386-linux-gnu/perl-base /usr/lib/i386-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 28727) line 1. BEGIN failed--compilation aborted at (eval 28727) line 1. ]]

│ │ │ │ │ │ │ │ │ ├── html2text {} │ │ │ │ @@ -16,11 +16,11 @@ │ │ │ │ will warn when used on a remote that has this problem. For details, see │ │ │ │ _i_n_s_e_c_u_r_e_ _e_m_b_e_d_d_e_d_ _c_r_e_d_s. │ │ │ │ Fixed in git-annex 5.20140919. │ │ │ │ [[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the │ │ │ │ Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/i386-linux- │ │ │ │ gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/i386-linux-gnu/perl5/5.42 │ │ │ │ /usr/share/perl5 /usr/lib/i386-linux-gnu/perl-base /usr/lib/i386-linux-gnu/ │ │ │ │ -perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 23434) line │ │ │ │ -1. BEGIN failed--compilation aborted at (eval 23434) line 1. ]] │ │ │ │ +perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 28727) line │ │ │ │ +1. BEGIN failed--compilation aborted at (eval 28727) line 1. ]] │ │ │ │ Comments on this page are closed. │ │ │ │ Last edited Mon Oct 26 18:00:01 2026 │ │ ├── ./usr/share/doc/git-annex/html/security/CVE-2017-12976.html │ │ │ @@ -89,15 +89,15 @@ │ │ │ repository url to cause the victim to execute arbitrary code via │ │ │ -oProxyCommand.

│ │ │ │ │ │

Fixed in git-annex 6.20170818

│ │ │ │ │ │

This is related to a git security hole, CVE-2017-1000117.

│ │ │ │ │ │ -

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/i386-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/i386-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/i386-linux-gnu/perl-base /usr/lib/i386-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 23422) line 1. BEGIN failed--compilation aborted at (eval 23422) line 1. ]]

│ │ │ +

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/i386-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/i386-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/i386-linux-gnu/perl-base /usr/lib/i386-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 28671) line 1. BEGIN failed--compilation aborted at (eval 28671) line 1. ]]

│ │ │ │ │ │ │ │ │ ├── html2text {} │ │ │ │ @@ -16,11 +16,11 @@ │ │ │ │ oProxyCommand. │ │ │ │ Fixed in git-annex 6.20170818 │ │ │ │ This is related to a git security hole, _C_V_E_-_2_0_1_7_-_1_0_0_0_1_1_7. │ │ │ │ [[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the │ │ │ │ Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/i386-linux- │ │ │ │ gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/i386-linux-gnu/perl5/5.42 │ │ │ │ /usr/share/perl5 /usr/lib/i386-linux-gnu/perl-base /usr/lib/i386-linux-gnu/ │ │ │ │ -perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 23422) line │ │ │ │ -1. BEGIN failed--compilation aborted at (eval 23422) line 1. ]] │ │ │ │ +perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 28671) line │ │ │ │ +1. BEGIN failed--compilation aborted at (eval 28671) line 1. ]] │ │ │ │ Comments on this page are closed. │ │ │ │ Last edited Mon Oct 26 18:00:01 2026 │ │ ├── ./usr/share/doc/git-annex/html/security/checksum_exposure_to_encrypted_special_remotes.html │ │ │ @@ -91,15 +91,15 @@ │ │ │ │ │ │

For details, see [[!commit b890f3a53d936b5e40aa9acc5876cb98f18b9657]]

│ │ │ │ │ │

No CVE was assigned for this issue.

│ │ │ │ │ │

Fixed in git-annex 6.20160419

│ │ │ │ │ │ -

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/i386-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/i386-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/i386-linux-gnu/perl-base /usr/lib/i386-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 23402) line 1. BEGIN failed--compilation aborted at (eval 23402) line 1. ]]

│ │ │ +

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/i386-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/i386-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/i386-linux-gnu/perl-base /usr/lib/i386-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 28691) line 1. BEGIN failed--compilation aborted at (eval 28691) line 1. ]]

│ │ │ │ │ │ │ │ │ ├── html2text {} │ │ │ │ @@ -17,11 +17,11 @@ │ │ │ │ For details, see [[!commit b890f3a53d936b5e40aa9acc5876cb98f18b9657]] │ │ │ │ No CVE was assigned for this issue. │ │ │ │ Fixed in git-annex 6.20160419 │ │ │ │ [[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the │ │ │ │ Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/i386-linux- │ │ │ │ gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/i386-linux-gnu/perl5/5.42 │ │ │ │ /usr/share/perl5 /usr/lib/i386-linux-gnu/perl-base /usr/lib/i386-linux-gnu/ │ │ │ │ -perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 23402) line │ │ │ │ -1. BEGIN failed--compilation aborted at (eval 23402) line 1. ]] │ │ │ │ +perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 28691) line │ │ │ │ +1. BEGIN failed--compilation aborted at (eval 28691) line 1. ]] │ │ │ │ Comments on this page are closed. │ │ │ │ Last edited Mon Oct 26 18:00:01 2026 │ │ ├── ./usr/share/doc/git-annex/html/security.html │ │ │ @@ -114,15 +114,15 @@ │ │ │ │ │ │

The creds embedded in the git repo were not encrypted. │ │ │ git-annex enableremote will warn when used on a remote that has │ │ │ this problem. For details, see insecure embedded creds.

│ │ │ │ │ │

Fixed in git-annex 5.20140919.

│ │ │ │ │ │ -

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/i386-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/i386-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/i386-linux-gnu/perl-base /usr/lib/i386-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 8704) line 1. BEGIN failed--compilation aborted at (eval 8704) line 1. ]]

│ │ │ +

[[!meta Error: Can't locate Date/Parse.pm in @INC (you may need to install the Date::Parse module) (@INC entries checked: /etc/perl /usr/local/lib/i386-linux-gnu/perl/5.42.3 /usr/local/share/perl/5.42.3 /usr/lib/i386-linux-gnu/perl5/5.42 /usr/share/perl5 /usr/lib/i386-linux-gnu/perl-base /usr/lib/i386-linux-gnu/perl/5.42 /usr/share/perl/5.42 /usr/local/lib/site_perl) at (eval 12395) line 1. BEGIN failed--compilation aborted at (eval 12395) line 1. ]]

│ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │ │