Objects built with `gcc -flto -ffat-lto-objects` will contain random strings in the form of `.gnu.lto_.inline.24c30dabb443e726`. They will change at each build. Temporary (?) solution: pass the full path of the source as the argument to `-frandom-seed`.
Our notes about issues affecting packages are stored in notes.git and are targeted at packages in Debian in 'unstable/amd64' (unless they say otherwise).