possible repercussions for RB tooling of Debian migrating from zlib to zlib-ng

Fay Stegerman flx at obfusk.net
Thu Sep 26 16:34:46 UTC 2024


Hi,

I wrote about issues encountered with "unreproducible zlib/deflate compression
in ZIP/APK files" [1] before.  Debian is apparently considering migrating from
zlib to zlib-ng [2], which could affect RB: assuming zlib-ng output is properly
deterministic for the same version it should not affect reproducibility of
Debian packages themselves, but it could affect using a Debian base system to
reproduce other software (like Android APKs).

- Fay

[1] https://lists.reproducible-builds.org/pipermail/rb-general/2024-September/003526.html
[2] https://lists.debian.org/debian-devel/2024/09/msg00334.html


More information about the rb-general mailing list