[Reproducible-builds] Bug#803482: ncurses: please make the build reproducible, take two

[Esa Peuha]

Source: ncurses
Version: 6.0+20151024-1
Severity: wishlist
User: reproducible-builds at lists.alioth.debian.org
X-Debbugs-Cc: reproducible-builds at lists.alioth.debian.org

Hi!

While ncurses 6.0+20151017-1 fixed the earlier reproducibility bug
#801864, it also introduced a reproducibility regression; now all the
lib*_g.a files in the lib*-dbg packages are affected by the umask,
uid/gid and build time of the build environment. The reason for this
regression is upstream patch 20151010, specifically the update of
CF_AR_FLAGS in aclocal.m4 (which is propagated to configure) that
causes the static libraries to be generated with "ar -curvU". I don't
really know where this should be fixed (patching aclocal.m4 doesn't
seem right since it's a generated file) so I can't suggest a patch.