On Wed, Dec 03, 2003 at 05:44:36PM +0100, Santiago Vila wrote: > file=main/libp/libpng/libpng2_1.0.12-3.woody.3_i386.deb > wget -q -O 1.deb http://ftp.debian.org/debian/pool/$file > wget -q -O 2.deb http://security.debian.org/pool/updates/$file > diff 1.deb 2.deb
> Binary files 1.deb and 2.deb differ $ dpkg -x 1.deb 1 ; dpkg -x 2.deb 2 $ diff -ur 1 2 Binary files 1/usr/share/doc/libpng2/changelog.Debian.gz and 2/usr/share/doc/libpng2/changelog.Debian.gz differ $ zdiff -qs */usr/share/doc/libpng2/changelog.Debian.gz Files - and /tmp/changelogDebian.gz.10985 are identical So, only the gzip compression on the changelog is different... which means that both packages are created independently from the same source, with the same resulting binaries etc, only apparently using different versions of gzip and/or different default options for gzip. > How could this happen? Should I worry about it? Very strange, maybe it has something to do with them being security-team NMU's, one is build by security team, the other by the maintainer. Should you worry? I don't know, depends on wether it's normal that two different builds circulate on offical archives... --Jeroen -- Jeroen van Wolffelaar +31-30-253 4499 [EMAIL PROTECTED] http://Jeroen.A-Eskwadraat.nl
