[rrdtool-maint] Bug#894441: dpkg-buildpackage: SOURCE_DATE_EPOCH must ignore bin-nmu changelog entries. Breaks M-A:same

[Sven Joachim]

On 2018-03-30 15:02 +0100, Chris Lamb wrote:

> [adding 894441@ to CC]
>
> Hi Jean-Michel,
>
>> Filled as #894441
>> https://bugs.debian.org/894441
>
> Thanks for this. I was just briefly wondering whether this is related to:
>
>   https://lists.debian.org/debian-security/2017/05/msg00011.html

It seems so.  What you are describing there had been noticed by Ian
Jackson before:

https://lists.debian.org/debian-devel/2016/11/msg00328.html

Ian then filed bug #843773 against sbuild, and as a result sbuild (as of
version 0.73.0-1) no longer reuses the timestamp of the last changelog
entry in binNMUs.

The same version of sbuild introduced a --binNMU-timestamp option, and I
think wanna-build should use it to achieve a consistent
SOURCE_DATE_EPOCH across architectures in binNMUs.  Something along
these lines had already been proposed in #843773.

Cheers,
       Sven