Bug#1063272: xerces-c: NMU diff for 64-bit time_t transition

2024-02-28 Thread Steve Langasek
Dear maintainer,

Please find attached a final version of this patch for the time_t
transition.  This patch is being uploaded to unstable.

Note that this adds a versioned build-dependency on dpkg-dev, to guard
against accidental backports with a wrong ABI.

Thanks!


-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.5.0-14-generic (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
diff -Nru xerces-c-3.2.4+debian/debian/changelog 
xerces-c-3.2.4+debian/debian/changelog
--- xerces-c-3.2.4+debian/debian/changelog  2023-12-28 20:17:42.0 
+
+++ xerces-c-3.2.4+debian/debian/changelog  2024-02-29 07:28:56.0 
+
@@ -1,3 +1,10 @@
+xerces-c (3.2.4+debian-1.2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Rename libraries for 64-bit time_t transition.  Closes: #1063272
+
+ -- Steve Langasek   Thu, 29 Feb 2024 07:28:56 +
+
 xerces-c (3.2.4+debian-1.1) unstable; urgency=medium
 
   * Non-maintainer upload.
diff -Nru xerces-c-3.2.4+debian/debian/control 
xerces-c-3.2.4+debian/debian/control
--- xerces-c-3.2.4+debian/debian/control2023-12-28 20:17:42.0 
+
+++ xerces-c-3.2.4+debian/debian/control2024-02-29 07:28:56.0 
+
@@ -1,7 +1,7 @@
 Source: xerces-c
 Section: libs
 Priority: optional
-Build-Depends: debhelper-compat(=12),
+Build-Depends: dpkg-dev (>= 1.22.5), debhelper-compat(=12),
libcurl4-gnutls-dev,
libicu-dev
 Build-Depends-Indep: doxygen,
@@ -17,7 +17,10 @@
 Homepage: https://xerces.apache.org/xerces-c/
 
 
-Package: libxerces-c3.2
+Package: libxerces-c3.2t64
+Provides: ${t64:Provides}
+Replaces: libxerces-c3.2
+Breaks: libxerces-c3.2 (<< ${source:Version})
 Architecture: any
 Multi-Arch: same
 Pre-Depends: ${misc:Pre-Depends}
@@ -40,7 +43,7 @@
 Multi-Arch: same
 Depends: libc6-dev | libc-dev,
  libicu-dev,
- libxerces-c3.2 (= ${binary:Version}),
+ libxerces-c3.2t64 (= ${binary:Version}),
  ${misc:Depends}
 Conflicts: libxerces-c2-dev,
libxerces25-dev,
diff -Nru xerces-c-3.2.4+debian/debian/libxerces-c3.2.install 
xerces-c-3.2.4+debian/debian/libxerces-c3.2.install
--- xerces-c-3.2.4+debian/debian/libxerces-c3.2.install 2023-12-28 
20:17:42.0 +
+++ xerces-c-3.2.4+debian/debian/libxerces-c3.2.install 1970-01-01 
00:00:00.0 +
@@ -1 +0,0 @@
-usr/lib/*/libxerces-c-*.so
diff -Nru xerces-c-3.2.4+debian/debian/libxerces-c3.2.lintian-overrides 
xerces-c-3.2.4+debian/debian/libxerces-c3.2.lintian-overrides
--- xerces-c-3.2.4+debian/debian/libxerces-c3.2.lintian-overrides   
2023-12-28 20:17:42.0 +
+++ xerces-c-3.2.4+debian/debian/libxerces-c3.2.lintian-overrides   
1970-01-01 00:00:00.0 +
@@ -1,5 +0,0 @@
-libxerces-c3.2: package-name-doesnt-match-sonames libxerces-c-3.2
-# The xerces-3 packages install their shared libaries with weird
-# names, which confuses lintian.
-
-
diff -Nru xerces-c-3.2.4+debian/debian/libxerces-c3.2.shlibs 
xerces-c-3.2.4+debian/debian/libxerces-c3.2.shlibs
--- xerces-c-3.2.4+debian/debian/libxerces-c3.2.shlibs  2023-12-28 
20:17:42.0 +
+++ xerces-c-3.2.4+debian/debian/libxerces-c3.2.shlibs  1970-01-01 
00:00:00.0 +
@@ -1 +0,0 @@
-libxerces-c 3.2 libxerces-c3.2
diff -Nru xerces-c-3.2.4+debian/debian/libxerces-c3.2t64.install 
xerces-c-3.2.4+debian/debian/libxerces-c3.2t64.install
--- xerces-c-3.2.4+debian/debian/libxerces-c3.2t64.install  1970-01-01 
00:00:00.0 +
+++ xerces-c-3.2.4+debian/debian/libxerces-c3.2t64.install  2023-12-28 
20:17:42.0 +
@@ -0,0 +1 @@
+usr/lib/*/libxerces-c-*.so
diff -Nru xerces-c-3.2.4+debian/debian/libxerces-c3.2t64.lintian-overrides 
xerces-c-3.2.4+debian/debian/libxerces-c3.2t64.lintian-overrides
--- xerces-c-3.2.4+debian/debian/libxerces-c3.2t64.lintian-overrides
1970-01-01 00:00:00.0 +
+++ xerces-c-3.2.4+debian/debian/libxerces-c3.2t64.lintian-overrides
2024-02-29 07:25:22.0 +
@@ -0,0 +1,6 @@
+libxerces-c3.2t64: package-name-doesnt-match-sonames libxerces-c-3.2
+# The xerces-3 packages install their shared libaries with weird
+# names, which confuses lintian.
+
+
+libxerces-c3.2t64: package-name-doesnt-match-sonames libxerces-c3.2
diff -Nru xerces-c-3.2.4+debian/debian/libxerces-c3.2t64.shlibs 
xerces-c-3.2.4+debian/debian/libxerces-c3.2t64.shlibs
--- xerces-c-3.2.4+debian/debian/libxerces-c3.2t64.shlibs   1970-01-01 
00:00:00.0 +
+++ xerces-c-3.2.4+debian/debian/libxerces-c3.2t64.shlibs   2024-02-29 
07:25:22.0 +
@@ -0,0 +1 @@
+libxerces-c 3.2 libxerces-c3.2t64
diff -Nru xerces-c-3.2.4+debian/debian/rules 

Bug#1063272: xerces-c: NMU diff for 64-bit time_t transition

2024-02-05 Thread Steve Langasek
Source: xerces-c
Version: 3.2.4+debian-1.1
Severity: serious
Tags: patch pending sid trixie
Justification: library ABI skew on upgrade
User: debian-...@lists.debian.org
Usertags: time-t

NOTICE: these changes must not be uploaded to unstable yet!

Dear maintainer,

As part of the 64-bit time_t transition required to support 32-bit
architectures in 2038 and beyond
(https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified
xerces-c as a source package shipping runtime libraries whose ABI
either is affected by the change in size of time_t, or could not be
analyzed via abi-compliance-checker (and therefore to be on the safe
side we assume is affected).

To ensure that inconsistent combinations of libraries with their
reverse-dependencies are never installed together, it is necessary to
have a library transition, which is most easily done by renaming the
runtime library package.

Since turning on 64-bit time_t is being handled centrally through a change
to the default dpkg-buildflags (https://bugs.debian.org/1037136), it is
important that libraries affected by this ABI change all be uploaded close
together in time.  Therefore I have prepared a 0-day NMU for xerces-c
which will initially be uploaded to experimental if possible, then to
unstable after packages have cleared binary NEW.

Please find the patch for this NMU attached.

If you have any concerns about this patch, please reach out ASAP.  Although
this package will be uploaded to experimental immediately, there will be a
period of several days before we begin uploads to unstable; so if information
becomes available that your package should not be included in the transition,
there is time for us to amend the planned uploads.



-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 
'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.5.0-14-generic (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
diff -Nru xerces-c-3.2.4+debian/debian/changelog 
xerces-c-3.2.4+debian/debian/changelog
--- xerces-c-3.2.4+debian/debian/changelog  2023-12-28 20:17:42.0 
+
+++ xerces-c-3.2.4+debian/debian/changelog  2024-02-05 23:03:16.0 
+
@@ -1,3 +1,10 @@
+xerces-c (3.2.4+debian-1.2) experimental; urgency=medium
+
+  * Non-maintainer upload.
+  * Rename libraries for 64-bit time_t transition.
+
+ -- Steve Langasek   Mon, 05 Feb 2024 23:03:16 +
+
 xerces-c (3.2.4+debian-1.1) unstable; urgency=medium
 
   * Non-maintainer upload.
diff -Nru xerces-c-3.2.4+debian/debian/control 
xerces-c-3.2.4+debian/debian/control
--- xerces-c-3.2.4+debian/debian/control2023-12-28 20:17:42.0 
+
+++ xerces-c-3.2.4+debian/debian/control2024-02-05 23:03:16.0 
+
@@ -17,7 +17,10 @@
 Homepage: https://xerces.apache.org/xerces-c/
 
 
-Package: libxerces-c3.2
+Package: libxerces-c3.2t64
+Provides: ${t64:Provides}
+Replaces: libxerces-c3.2
+Breaks: libxerces-c3.2 (<< ${source:Version})
 Architecture: any
 Multi-Arch: same
 Pre-Depends: ${misc:Pre-Depends}
@@ -40,7 +43,7 @@
 Multi-Arch: same
 Depends: libc6-dev | libc-dev,
  libicu-dev,
- libxerces-c3.2 (= ${binary:Version}),
+ libxerces-c3.2t64 (= ${binary:Version}),
  ${misc:Depends}
 Conflicts: libxerces-c2-dev,
libxerces25-dev,
diff -Nru xerces-c-3.2.4+debian/debian/libxerces-c3.2.install 
xerces-c-3.2.4+debian/debian/libxerces-c3.2.install
--- xerces-c-3.2.4+debian/debian/libxerces-c3.2.install 2023-12-28 
20:17:42.0 +
+++ xerces-c-3.2.4+debian/debian/libxerces-c3.2.install 1970-01-01 
00:00:00.0 +
@@ -1 +0,0 @@
-usr/lib/*/libxerces-c-*.so
diff -Nru xerces-c-3.2.4+debian/debian/libxerces-c3.2.lintian-overrides 
xerces-c-3.2.4+debian/debian/libxerces-c3.2.lintian-overrides
--- xerces-c-3.2.4+debian/debian/libxerces-c3.2.lintian-overrides   
2023-12-28 20:17:42.0 +
+++ xerces-c-3.2.4+debian/debian/libxerces-c3.2.lintian-overrides   
1970-01-01 00:00:00.0 +
@@ -1,5 +0,0 @@
-libxerces-c3.2: package-name-doesnt-match-sonames libxerces-c-3.2
-# The xerces-3 packages install their shared libaries with weird
-# names, which confuses lintian.
-
-
diff -Nru xerces-c-3.2.4+debian/debian/libxerces-c3.2.shlibs 
xerces-c-3.2.4+debian/debian/libxerces-c3.2.shlibs
--- xerces-c-3.2.4+debian/debian/libxerces-c3.2.shlibs  2023-12-28 
20:17:42.0 +
+++ xerces-c-3.2.4+debian/debian/libxerces-c3.2.shlibs  1970-01-01 
00:00:00.0 +
@@ -1 +0,0 @@
-libxerces-c 3.2 libxerces-c3.2
diff -Nru xerces-c-3.2.4+debian/debian/libxerces-c3.2t64.install 
xerces-c-3.2.4+debian/debian/libxerces-c3.2t64.install
--- xerces-c-3.2.4+debian/debian/libxerces-c3.2t64.install  1970-01-01