Your message dated Thu, 1 Feb 2024 09:50:25 -0800
with message-id <[email protected]>
and subject line Re: Bug#1062291: libfido2: NMU diff for 64-bit time_t
transition
has caused the Debian Bug report #1062291,
regarding libfido2: NMU diff for 64-bit time_t transition
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1062291: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1062291
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libfido2
Version: 1.14.0-1
Severity: serious
Tags: patch pending
Justification: library ABI skew on upgrade
User: [email protected]
Usertags: time-t
Dear maintainer,
As part of the 64-bit time_t transition required to support 32-bit
architectures in 2038 and beyond
(https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified
libfido2 as a source package shipping runtime libraries whose ABI
either is affected by the change in size of time_t, or could not be
analyzed via abi-compliance-checker (and therefore to be on the safe
side we assume is affected).
To ensure that inconsistent combinations of libraries with their
reverse-dependencies are never installed together, it is necessary to
have a library transition, which is most easily done by renaming the
runtime library package.
Since turning on 64-bit time_t is being handled centrally through a change
to the default dpkg-buildflags (https://bugs.debian.org/1037136), it is
important that libraries affected by this ABI change all be uploaded close
together in time. Therefore I have prepared a 0-day NMU for libfido2
which will initially be uploaded to experimental if possible, then to
unstable after packages have cleared binary NEW.
Please find the patch for this NMU attached.
If you have any concerns about this patch, please reach out ASAP. Although
this package will be uploaded to experimental immediately, there will be a
period of several days before we begin uploads to unstable; so if information
becomes available that your package should not be included in the transition,
there is time for us to amend the planned uploads.
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.5.0-14-generic (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
diff -Nru libfido2-1.14.0/debian/.gitignore libfido2-1.14.0/debian/.gitignore
--- libfido2-1.14.0/debian/.gitignore 2023-11-25 16:34:59.000000000 +0000
+++ libfido2-1.14.0/debian/.gitignore 1970-01-01 00:00:00.000000000 +0000
@@ -1 +0,0 @@
-/files
diff -Nru libfido2-1.14.0/debian/changelog libfido2-1.14.0/debian/changelog
--- libfido2-1.14.0/debian/changelog 2023-11-25 16:34:59.000000000 +0000
+++ libfido2-1.14.0/debian/changelog 2024-02-01 00:26:22.000000000 +0000
@@ -1,3 +1,10 @@
+libfido2 (1.14.0-1.1) experimental; urgency=medium
+
+ * Non-maintainer upload.
+ * Rename libraries for 64-bit time_t transition.
+
+ -- Steve Langasek <[email protected]> Thu, 01 Feb 2024 00:26:22 +0000
+
libfido2 (1.14.0-1) unstable; urgency=medium
* New upstream release.
diff -Nru libfido2-1.14.0/debian/control libfido2-1.14.0/debian/control
--- libfido2-1.14.0/debian/control 2023-11-25 16:34:59.000000000 +0000
+++ libfido2-1.14.0/debian/control 2024-02-01 00:26:22.000000000 +0000
@@ -19,7 +19,10 @@
Vcs-Browser: https://salsa.debian.org/auth-team/libfido2
Vcs-Git: https://salsa.debian.org/auth-team/libfido2.git
-Package: libfido2-1
+Package: libfido2-1t64
+Provides: ${t64:Provides}
+Replaces: libfido2-1
+Breaks: libfido2-1 (<< ${source:Version})
Architecture: any
Multi-Arch: same
Depends: ${shlibs:Depends}, ${misc:Depends}
@@ -34,7 +37,7 @@
Section: libdevel
Architecture: any
Multi-Arch: same
-Depends: libfido2-1 (= ${binary:Version}), libssl-dev, ${misc:Depends}
+Depends: libfido2-1t64 (= ${binary:Version}), libssl-dev, ${misc:Depends}
Description: library for generating and verifying FIDO 2.0 objects -- headers
A library for communicating with a FIDO device over USB or NFC, and for
verifying attestation and assertion signatures. FIDO U2F (CTAP 1) and FIDO
@@ -60,7 +63,7 @@
Section: utils
Architecture: any
Multi-Arch: foreign
-Depends: libfido2-1 (= ${binary:Version}), ${misc:Depends}, ${shlibs:Depends}
+Depends: libfido2-1t64 (= ${binary:Version}), ${misc:Depends},
${shlibs:Depends}
Description: command-line tools to configure and use a FIDO 2 token
A set of tools to manage a FIDO 2 token, generate credentials and
assertions, and verify them.
diff -Nru libfido2-1.14.0/debian/libfido2-1.install
libfido2-1.14.0/debian/libfido2-1.install
--- libfido2-1.14.0/debian/libfido2-1.install 2023-11-25 16:34:59.000000000
+0000
+++ libfido2-1.14.0/debian/libfido2-1.install 1970-01-01 00:00:00.000000000
+0000
@@ -1 +0,0 @@
-usr/lib/*/libfido2.so.*
diff -Nru libfido2-1.14.0/debian/libfido2-1.symbols
libfido2-1.14.0/debian/libfido2-1.symbols
--- libfido2-1.14.0/debian/libfido2-1.symbols 2023-11-25 16:34:59.000000000
+0000
+++ libfido2-1.14.0/debian/libfido2-1.symbols 1970-01-01 00:00:00.000000000
+0000
@@ -1,266 +0,0 @@
-libfido2.so.1 libfido2-1 #MINVER#
-* Build-Depends-Package: libfido2-dev
- eddsa_pk_free@Base 1.1.0
- eddsa_pk_from_EVP_PKEY@Base 1.1.0
- eddsa_pk_from_ptr@Base 1.1.0
- eddsa_pk_new@Base 1.1.0
- eddsa_pk_to_EVP_PKEY@Base 1.1.0
- es256_pk_free@Base 1.1.0
- es256_pk_from_EC_KEY@Base 1.1.0
- es256_pk_from_EVP_PKEY@Base 1.9.0
- es256_pk_from_ptr@Base 1.1.0
- es256_pk_new@Base 1.1.0
- es256_pk_to_EVP_PKEY@Base 1.1.0
- es384_pk_free@Base 1.12.0
- es384_pk_from_EC_KEY@Base 1.12.0
- es384_pk_from_EVP_PKEY@Base 1.12.0
- es384_pk_from_ptr@Base 1.12.0
- es384_pk_new@Base 1.12.0
- es384_pk_to_EVP_PKEY@Base 1.12.0
- fido_assert_allow_cred@Base 1.1.0
- fido_assert_authdata_len@Base 1.1.0
- fido_assert_authdata_ptr@Base 1.1.0
- fido_assert_authdata_raw_len@Base 1.14.0
- fido_assert_authdata_raw_ptr@Base 1.14.0
- fido_assert_blob_len@Base 1.7.0
- fido_assert_blob_ptr@Base 1.7.0
- fido_assert_clientdata_hash_len@Base 1.1.0
- fido_assert_clientdata_hash_ptr@Base 1.1.0
- fido_assert_count@Base 1.1.0
- fido_assert_empty_allow_list@Base 1.13.0
- fido_assert_flags@Base 1.1.0
- fido_assert_free@Base 1.1.0
- fido_assert_hmac_secret_len@Base 1.1.0
- fido_assert_hmac_secret_ptr@Base 1.1.0
- fido_assert_id_len@Base 1.1.0
- fido_assert_id_ptr@Base 1.1.0
- fido_assert_largeblob_key_len@Base 1.7.0
- fido_assert_largeblob_key_ptr@Base 1.7.0
- fido_assert_new@Base 1.1.0
- fido_assert_rp_id@Base 1.1.0
- fido_assert_set_authdata@Base 1.1.0
- fido_assert_set_authdata_raw@Base 1.3.0
- fido_assert_set_clientdata@Base 1.8.0
- fido_assert_set_clientdata_hash@Base 1.1.0
- fido_assert_set_count@Base 1.1.0
- fido_assert_set_extensions@Base 1.1.0
- fido_assert_set_hmac_salt@Base 1.1.0
- fido_assert_set_hmac_secret@Base 1.7.0
- fido_assert_set_options@Base 1.1.0
- fido_assert_set_rp@Base 1.1.0
- fido_assert_set_sig@Base 1.1.0
- fido_assert_set_up@Base 1.2.0
- fido_assert_set_uv@Base 1.2.0
- fido_assert_set_winhello_appid@Base 1.14.0
- fido_assert_sig_len@Base 1.1.0
- fido_assert_sig_ptr@Base 1.1.0
- fido_assert_sigcount@Base 1.3.0
- fido_assert_user_display_name@Base 1.1.0
- fido_assert_user_icon@Base 1.1.0
- fido_assert_user_id_len@Base 1.1.0
- fido_assert_user_id_ptr@Base 1.1.0
- fido_assert_user_name@Base 1.1.0
- fido_assert_verify@Base 1.1.0
- fido_bio_dev_enroll_begin@Base 1.3.0
- fido_bio_dev_enroll_cancel@Base 1.3.0
- fido_bio_dev_enroll_continue@Base 1.3.0
- fido_bio_dev_enroll_remove@Base 1.3.0
- fido_bio_dev_get_info@Base 1.3.0
- fido_bio_dev_get_template_array@Base 1.3.0
- fido_bio_dev_set_template_name@Base 1.3.0
- fido_bio_enroll_free@Base 1.3.0
- fido_bio_enroll_last_status@Base 1.3.0
- fido_bio_enroll_new@Base 1.3.0
- fido_bio_enroll_remaining_samples@Base 1.3.0
- fido_bio_info_free@Base 1.3.0
- fido_bio_info_max_samples@Base 1.3.0
- fido_bio_info_new@Base 1.3.0
- fido_bio_info_type@Base 1.3.0
- fido_bio_template@Base 1.3.0
- fido_bio_template_array_count@Base 1.3.0
- fido_bio_template_array_free@Base 1.3.0
- fido_bio_template_array_new@Base 1.3.0
- fido_bio_template_free@Base 1.3.0
- fido_bio_template_id_len@Base 1.3.0
- fido_bio_template_id_ptr@Base 1.3.0
- fido_bio_template_name@Base 1.3.0
- fido_bio_template_new@Base 1.3.0
- fido_bio_template_set_id@Base 1.3.0
- fido_bio_template_set_name@Base 1.3.0
- fido_cbor_info_aaguid_len@Base 1.1.0
- fido_cbor_info_aaguid_ptr@Base 1.1.0
- fido_cbor_info_algorithm_cose@Base 1.8.0
- fido_cbor_info_algorithm_count@Base 1.8.0
- fido_cbor_info_algorithm_type@Base 1.8.0
- fido_cbor_info_certs_len@Base 1.12.0
- fido_cbor_info_certs_name_ptr@Base 1.12.0
- fido_cbor_info_certs_value_ptr@Base 1.12.0
- fido_cbor_info_extensions_len@Base 1.1.0
- fido_cbor_info_extensions_ptr@Base 1.1.0
- fido_cbor_info_free@Base 1.1.0
- fido_cbor_info_fwversion@Base 1.4.0
- fido_cbor_info_maxcredbloblen@Base 1.7.0
- fido_cbor_info_maxcredcntlst@Base 1.5.0
- fido_cbor_info_maxcredidlen@Base 1.5.0
- fido_cbor_info_maxlargeblob@Base 1.11.0
- fido_cbor_info_maxmsgsiz@Base 1.1.0
- fido_cbor_info_maxrpid_minpinlen@Base 1.12.0
- fido_cbor_info_minpinlen@Base 1.12.0
- fido_cbor_info_new@Base 1.1.0
- fido_cbor_info_new_pin_required@Base 1.12.0
- fido_cbor_info_options_len@Base 1.1.0
- fido_cbor_info_options_name_ptr@Base 1.1.0
- fido_cbor_info_options_value_ptr@Base 1.1.0
- fido_cbor_info_protocols_len@Base 1.1.0
- fido_cbor_info_protocols_ptr@Base 1.1.0
- fido_cbor_info_rk_remaining@Base 1.12.0
- fido_cbor_info_transports_len@Base 1.8.0
- fido_cbor_info_transports_ptr@Base 1.8.0
- fido_cbor_info_uv_attempts@Base 1.12.0
- fido_cbor_info_uv_modality@Base 1.12.0
- fido_cbor_info_versions_len@Base 1.1.0
- fido_cbor_info_versions_ptr@Base 1.1.0
- fido_cred_aaguid_len@Base 1.5.0
- fido_cred_aaguid_ptr@Base 1.5.0
- fido_cred_attstmt_len@Base 1.9.0
- fido_cred_attstmt_ptr@Base 1.9.0
- fido_cred_authdata_len@Base 1.1.0
- fido_cred_authdata_ptr@Base 1.1.0
- fido_cred_authdata_raw_len@Base 1.6.0
- fido_cred_authdata_raw_ptr@Base 1.6.0
- fido_cred_clientdata_hash_len@Base 1.1.0
- fido_cred_clientdata_hash_ptr@Base 1.1.0
- fido_cred_display_name@Base 1.2.0
- fido_cred_empty_exclude_list@Base 1.13.0
- fido_cred_exclude@Base 1.1.0
- fido_cred_flags@Base 1.1.0
- fido_cred_fmt@Base 1.1.0
- fido_cred_free@Base 1.1.0
- fido_cred_id_len@Base 1.1.0
- fido_cred_id_ptr@Base 1.1.0
- fido_cred_largeblob_key_len@Base 1.7.0
- fido_cred_largeblob_key_ptr@Base 1.7.0
- fido_cred_new@Base 1.1.0
- fido_cred_pin_minlen@Base 1.9.0
- fido_cred_prot@Base 1.4.0
- fido_cred_pubkey_len@Base 1.1.0
- fido_cred_pubkey_ptr@Base 1.1.0
- fido_cred_rp_id@Base 1.1.0
- fido_cred_rp_name@Base 1.1.0
- fido_cred_set_attstmt@Base 1.9.0
- fido_cred_set_authdata@Base 1.1.0
- fido_cred_set_authdata_raw@Base 1.3.0
- fido_cred_set_blob@Base 1.7.0
- fido_cred_set_clientdata@Base 1.8.0
- fido_cred_set_clientdata_hash@Base 1.1.0
- fido_cred_set_extensions@Base 1.1.0
- fido_cred_set_fmt@Base 1.1.0
- fido_cred_set_id@Base 1.8.0
- fido_cred_set_options@Base 1.1.0
- fido_cred_set_pin_minlen@Base 1.9.0
- fido_cred_set_prot@Base 1.4.0
- fido_cred_set_rk@Base 1.2.0
- fido_cred_set_rp@Base 1.1.0
- fido_cred_set_sig@Base 1.1.0
- fido_cred_set_type@Base 1.1.0
- fido_cred_set_user@Base 1.1.0
- fido_cred_set_uv@Base 1.2.0
- fido_cred_set_x509@Base 1.1.0
- fido_cred_sig_len@Base 1.1.0
- fido_cred_sig_ptr@Base 1.1.0
- fido_cred_sigcount@Base 1.6.0
- fido_cred_type@Base 1.2.0
- fido_cred_user_id_len@Base 1.2.0
- fido_cred_user_id_ptr@Base 1.2.0
- fido_cred_user_name@Base 1.2.0
- fido_cred_verify@Base 1.1.0
- fido_cred_verify_self@Base 1.3.0
- fido_cred_x5c_len@Base 1.1.0
- fido_cred_x5c_ptr@Base 1.1.0
- fido_credman_del_dev_rk@Base 1.2.0
- fido_credman_get_dev_metadata@Base 1.2.0
- fido_credman_get_dev_rk@Base 1.2.0
- fido_credman_get_dev_rp@Base 1.2.0
- fido_credman_metadata_free@Base 1.2.0
- fido_credman_metadata_new@Base 1.2.0
- fido_credman_rk@Base 1.2.0
- fido_credman_rk_count@Base 1.2.0
- fido_credman_rk_existing@Base 1.2.0
- fido_credman_rk_free@Base 1.2.0
- fido_credman_rk_new@Base 1.2.0
- fido_credman_rk_remaining@Base 1.2.0
- fido_credman_rp_count@Base 1.2.0
- fido_credman_rp_free@Base 1.2.0
- fido_credman_rp_id@Base 1.2.0
- fido_credman_rp_id_hash_len@Base 1.2.0
- fido_credman_rp_id_hash_ptr@Base 1.2.0
- fido_credman_rp_name@Base 1.2.0
- fido_credman_rp_new@Base 1.2.0
- fido_credman_set_dev_rk@Base 1.8.0
- fido_dev_build@Base 1.1.0
- fido_dev_cancel@Base 1.3.0
- fido_dev_close@Base 1.1.0
- fido_dev_enable_entattest@Base 1.7.0
- fido_dev_flags@Base 1.1.0
- fido_dev_force_fido2@Base 1.1.0
- fido_dev_force_pin_change@Base 1.7.0
- fido_dev_force_u2f@Base 1.1.0
- fido_dev_free@Base 1.1.0
- fido_dev_get_assert@Base 1.1.0
- fido_dev_get_cbor_info@Base 1.1.0
- fido_dev_get_retry_count@Base 1.1.0
- fido_dev_get_touch_begin@Base 1.5.0
- fido_dev_get_touch_status@Base 1.5.0
- fido_dev_get_uv_retry_count@Base 1.6.0
- fido_dev_has_pin@Base 1.5.0
- fido_dev_has_uv@Base 1.7.0
- fido_dev_info_free@Base 1.1.0
- fido_dev_info_manifest@Base 1.1.0
- fido_dev_info_manufacturer_string@Base 1.1.0
- fido_dev_info_new@Base 1.1.0
- fido_dev_info_path@Base 1.1.0
- fido_dev_info_product@Base 1.1.0
- fido_dev_info_product_string@Base 1.1.0
- fido_dev_info_ptr@Base 1.1.0
- fido_dev_info_set@Base 1.10.0
- fido_dev_info_vendor@Base 1.1.0
- fido_dev_io_handle@Base 1.10.0
- fido_dev_is_fido2@Base 1.1.0
- fido_dev_is_winhello@Base 1.8.0
- fido_dev_largeblob_get@Base 1.7.0
- fido_dev_largeblob_get_array@Base 1.7.0
- fido_dev_largeblob_remove@Base 1.7.0
- fido_dev_largeblob_set@Base 1.7.0
- fido_dev_largeblob_set_array@Base 1.7.0
- fido_dev_major@Base 1.1.0
- fido_dev_make_cred@Base 1.1.0
- fido_dev_minor@Base 1.1.0
- fido_dev_new@Base 1.1.0
- fido_dev_new_with_info@Base 1.10.0
- fido_dev_open@Base 1.1.0
- fido_dev_open_with_info@Base 1.10.0
- fido_dev_protocol@Base 1.1.0
- fido_dev_reset@Base 1.1.0
- fido_dev_set_io_functions@Base 1.1.0
- fido_dev_set_pin@Base 1.1.0
- fido_dev_set_pin_minlen@Base 1.7.0
- fido_dev_set_pin_minlen_rpid@Base 1.9.0
- fido_dev_set_sigmask@Base 1.7.0
- fido_dev_set_timeout@Base 1.9.0
- fido_dev_set_transport_functions@Base 1.4.0
- fido_dev_supports_cred_prot@Base 1.5.0
- fido_dev_supports_credman@Base 1.6.0
- fido_dev_supports_credman@Base 1.7.0
- fido_dev_supports_permissions@Base 1.7.0
- fido_dev_supports_pin@Base 1.5.0
- fido_dev_supports_uv@Base 1.7.0
- fido_dev_toggle_always_uv@Base 1.7.0
- fido_init@Base 1.1.0
- fido_set_log_handler@Base 1.4.0
- fido_strerr@Base 1.1.0
- rs256_pk_free@Base 1.1.0
- rs256_pk_from_EVP_PKEY@Base 1.9.0
- rs256_pk_from_RSA@Base 1.1.0
- rs256_pk_from_ptr@Base 1.1.0
- rs256_pk_new@Base 1.1.0
- rs256_pk_to_EVP_PKEY@Base 1.1.0
diff -Nru libfido2-1.14.0/debian/libfido2-1t64.install
libfido2-1.14.0/debian/libfido2-1t64.install
--- libfido2-1.14.0/debian/libfido2-1t64.install 1970-01-01
00:00:00.000000000 +0000
+++ libfido2-1.14.0/debian/libfido2-1t64.install 2023-11-25
16:34:59.000000000 +0000
@@ -0,0 +1 @@
+usr/lib/*/libfido2.so.*
diff -Nru libfido2-1.14.0/debian/libfido2-1t64.lintian-overrides
libfido2-1.14.0/debian/libfido2-1t64.lintian-overrides
--- libfido2-1.14.0/debian/libfido2-1t64.lintian-overrides 1970-01-01
00:00:00.000000000 +0000
+++ libfido2-1.14.0/debian/libfido2-1t64.lintian-overrides 2024-02-01
00:26:22.000000000 +0000
@@ -0,0 +1 @@
+libfido2-1t64: package-name-doesnt-match-sonames libfido2-1
diff -Nru libfido2-1.14.0/debian/libfido2-1t64.symbols
libfido2-1.14.0/debian/libfido2-1t64.symbols
--- libfido2-1.14.0/debian/libfido2-1t64.symbols 1970-01-01
00:00:00.000000000 +0000
+++ libfido2-1.14.0/debian/libfido2-1t64.symbols 2024-02-01
00:26:22.000000000 +0000
@@ -0,0 +1,266 @@
+libfido2.so.1 libfido2-1t64 #MINVER#
+* Build-Depends-Package: libfido2-dev
+ eddsa_pk_free@Base 1.1.0
+ eddsa_pk_from_EVP_PKEY@Base 1.1.0
+ eddsa_pk_from_ptr@Base 1.1.0
+ eddsa_pk_new@Base 1.1.0
+ eddsa_pk_to_EVP_PKEY@Base 1.1.0
+ es256_pk_free@Base 1.1.0
+ es256_pk_from_EC_KEY@Base 1.1.0
+ es256_pk_from_EVP_PKEY@Base 1.9.0
+ es256_pk_from_ptr@Base 1.1.0
+ es256_pk_new@Base 1.1.0
+ es256_pk_to_EVP_PKEY@Base 1.1.0
+ es384_pk_free@Base 1.12.0
+ es384_pk_from_EC_KEY@Base 1.12.0
+ es384_pk_from_EVP_PKEY@Base 1.12.0
+ es384_pk_from_ptr@Base 1.12.0
+ es384_pk_new@Base 1.12.0
+ es384_pk_to_EVP_PKEY@Base 1.12.0
+ fido_assert_allow_cred@Base 1.1.0
+ fido_assert_authdata_len@Base 1.1.0
+ fido_assert_authdata_ptr@Base 1.1.0
+ fido_assert_authdata_raw_len@Base 1.14.0
+ fido_assert_authdata_raw_ptr@Base 1.14.0
+ fido_assert_blob_len@Base 1.7.0
+ fido_assert_blob_ptr@Base 1.7.0
+ fido_assert_clientdata_hash_len@Base 1.1.0
+ fido_assert_clientdata_hash_ptr@Base 1.1.0
+ fido_assert_count@Base 1.1.0
+ fido_assert_empty_allow_list@Base 1.13.0
+ fido_assert_flags@Base 1.1.0
+ fido_assert_free@Base 1.1.0
+ fido_assert_hmac_secret_len@Base 1.1.0
+ fido_assert_hmac_secret_ptr@Base 1.1.0
+ fido_assert_id_len@Base 1.1.0
+ fido_assert_id_ptr@Base 1.1.0
+ fido_assert_largeblob_key_len@Base 1.7.0
+ fido_assert_largeblob_key_ptr@Base 1.7.0
+ fido_assert_new@Base 1.1.0
+ fido_assert_rp_id@Base 1.1.0
+ fido_assert_set_authdata@Base 1.1.0
+ fido_assert_set_authdata_raw@Base 1.3.0
+ fido_assert_set_clientdata@Base 1.8.0
+ fido_assert_set_clientdata_hash@Base 1.1.0
+ fido_assert_set_count@Base 1.1.0
+ fido_assert_set_extensions@Base 1.1.0
+ fido_assert_set_hmac_salt@Base 1.1.0
+ fido_assert_set_hmac_secret@Base 1.7.0
+ fido_assert_set_options@Base 1.1.0
+ fido_assert_set_rp@Base 1.1.0
+ fido_assert_set_sig@Base 1.1.0
+ fido_assert_set_up@Base 1.2.0
+ fido_assert_set_uv@Base 1.2.0
+ fido_assert_set_winhello_appid@Base 1.14.0
+ fido_assert_sig_len@Base 1.1.0
+ fido_assert_sig_ptr@Base 1.1.0
+ fido_assert_sigcount@Base 1.3.0
+ fido_assert_user_display_name@Base 1.1.0
+ fido_assert_user_icon@Base 1.1.0
+ fido_assert_user_id_len@Base 1.1.0
+ fido_assert_user_id_ptr@Base 1.1.0
+ fido_assert_user_name@Base 1.1.0
+ fido_assert_verify@Base 1.1.0
+ fido_bio_dev_enroll_begin@Base 1.3.0
+ fido_bio_dev_enroll_cancel@Base 1.3.0
+ fido_bio_dev_enroll_continue@Base 1.3.0
+ fido_bio_dev_enroll_remove@Base 1.3.0
+ fido_bio_dev_get_info@Base 1.3.0
+ fido_bio_dev_get_template_array@Base 1.3.0
+ fido_bio_dev_set_template_name@Base 1.3.0
+ fido_bio_enroll_free@Base 1.3.0
+ fido_bio_enroll_last_status@Base 1.3.0
+ fido_bio_enroll_new@Base 1.3.0
+ fido_bio_enroll_remaining_samples@Base 1.3.0
+ fido_bio_info_free@Base 1.3.0
+ fido_bio_info_max_samples@Base 1.3.0
+ fido_bio_info_new@Base 1.3.0
+ fido_bio_info_type@Base 1.3.0
+ fido_bio_template@Base 1.3.0
+ fido_bio_template_array_count@Base 1.3.0
+ fido_bio_template_array_free@Base 1.3.0
+ fido_bio_template_array_new@Base 1.3.0
+ fido_bio_template_free@Base 1.3.0
+ fido_bio_template_id_len@Base 1.3.0
+ fido_bio_template_id_ptr@Base 1.3.0
+ fido_bio_template_name@Base 1.3.0
+ fido_bio_template_new@Base 1.3.0
+ fido_bio_template_set_id@Base 1.3.0
+ fido_bio_template_set_name@Base 1.3.0
+ fido_cbor_info_aaguid_len@Base 1.1.0
+ fido_cbor_info_aaguid_ptr@Base 1.1.0
+ fido_cbor_info_algorithm_cose@Base 1.8.0
+ fido_cbor_info_algorithm_count@Base 1.8.0
+ fido_cbor_info_algorithm_type@Base 1.8.0
+ fido_cbor_info_certs_len@Base 1.12.0
+ fido_cbor_info_certs_name_ptr@Base 1.12.0
+ fido_cbor_info_certs_value_ptr@Base 1.12.0
+ fido_cbor_info_extensions_len@Base 1.1.0
+ fido_cbor_info_extensions_ptr@Base 1.1.0
+ fido_cbor_info_free@Base 1.1.0
+ fido_cbor_info_fwversion@Base 1.4.0
+ fido_cbor_info_maxcredbloblen@Base 1.7.0
+ fido_cbor_info_maxcredcntlst@Base 1.5.0
+ fido_cbor_info_maxcredidlen@Base 1.5.0
+ fido_cbor_info_maxlargeblob@Base 1.11.0
+ fido_cbor_info_maxmsgsiz@Base 1.1.0
+ fido_cbor_info_maxrpid_minpinlen@Base 1.12.0
+ fido_cbor_info_minpinlen@Base 1.12.0
+ fido_cbor_info_new@Base 1.1.0
+ fido_cbor_info_new_pin_required@Base 1.12.0
+ fido_cbor_info_options_len@Base 1.1.0
+ fido_cbor_info_options_name_ptr@Base 1.1.0
+ fido_cbor_info_options_value_ptr@Base 1.1.0
+ fido_cbor_info_protocols_len@Base 1.1.0
+ fido_cbor_info_protocols_ptr@Base 1.1.0
+ fido_cbor_info_rk_remaining@Base 1.12.0
+ fido_cbor_info_transports_len@Base 1.8.0
+ fido_cbor_info_transports_ptr@Base 1.8.0
+ fido_cbor_info_uv_attempts@Base 1.12.0
+ fido_cbor_info_uv_modality@Base 1.12.0
+ fido_cbor_info_versions_len@Base 1.1.0
+ fido_cbor_info_versions_ptr@Base 1.1.0
+ fido_cred_aaguid_len@Base 1.5.0
+ fido_cred_aaguid_ptr@Base 1.5.0
+ fido_cred_attstmt_len@Base 1.9.0
+ fido_cred_attstmt_ptr@Base 1.9.0
+ fido_cred_authdata_len@Base 1.1.0
+ fido_cred_authdata_ptr@Base 1.1.0
+ fido_cred_authdata_raw_len@Base 1.6.0
+ fido_cred_authdata_raw_ptr@Base 1.6.0
+ fido_cred_clientdata_hash_len@Base 1.1.0
+ fido_cred_clientdata_hash_ptr@Base 1.1.0
+ fido_cred_display_name@Base 1.2.0
+ fido_cred_empty_exclude_list@Base 1.13.0
+ fido_cred_exclude@Base 1.1.0
+ fido_cred_flags@Base 1.1.0
+ fido_cred_fmt@Base 1.1.0
+ fido_cred_free@Base 1.1.0
+ fido_cred_id_len@Base 1.1.0
+ fido_cred_id_ptr@Base 1.1.0
+ fido_cred_largeblob_key_len@Base 1.7.0
+ fido_cred_largeblob_key_ptr@Base 1.7.0
+ fido_cred_new@Base 1.1.0
+ fido_cred_pin_minlen@Base 1.9.0
+ fido_cred_prot@Base 1.4.0
+ fido_cred_pubkey_len@Base 1.1.0
+ fido_cred_pubkey_ptr@Base 1.1.0
+ fido_cred_rp_id@Base 1.1.0
+ fido_cred_rp_name@Base 1.1.0
+ fido_cred_set_attstmt@Base 1.9.0
+ fido_cred_set_authdata@Base 1.1.0
+ fido_cred_set_authdata_raw@Base 1.3.0
+ fido_cred_set_blob@Base 1.7.0
+ fido_cred_set_clientdata@Base 1.8.0
+ fido_cred_set_clientdata_hash@Base 1.1.0
+ fido_cred_set_extensions@Base 1.1.0
+ fido_cred_set_fmt@Base 1.1.0
+ fido_cred_set_id@Base 1.8.0
+ fido_cred_set_options@Base 1.1.0
+ fido_cred_set_pin_minlen@Base 1.9.0
+ fido_cred_set_prot@Base 1.4.0
+ fido_cred_set_rk@Base 1.2.0
+ fido_cred_set_rp@Base 1.1.0
+ fido_cred_set_sig@Base 1.1.0
+ fido_cred_set_type@Base 1.1.0
+ fido_cred_set_user@Base 1.1.0
+ fido_cred_set_uv@Base 1.2.0
+ fido_cred_set_x509@Base 1.1.0
+ fido_cred_sig_len@Base 1.1.0
+ fido_cred_sig_ptr@Base 1.1.0
+ fido_cred_sigcount@Base 1.6.0
+ fido_cred_type@Base 1.2.0
+ fido_cred_user_id_len@Base 1.2.0
+ fido_cred_user_id_ptr@Base 1.2.0
+ fido_cred_user_name@Base 1.2.0
+ fido_cred_verify@Base 1.1.0
+ fido_cred_verify_self@Base 1.3.0
+ fido_cred_x5c_len@Base 1.1.0
+ fido_cred_x5c_ptr@Base 1.1.0
+ fido_credman_del_dev_rk@Base 1.2.0
+ fido_credman_get_dev_metadata@Base 1.2.0
+ fido_credman_get_dev_rk@Base 1.2.0
+ fido_credman_get_dev_rp@Base 1.2.0
+ fido_credman_metadata_free@Base 1.2.0
+ fido_credman_metadata_new@Base 1.2.0
+ fido_credman_rk@Base 1.2.0
+ fido_credman_rk_count@Base 1.2.0
+ fido_credman_rk_existing@Base 1.2.0
+ fido_credman_rk_free@Base 1.2.0
+ fido_credman_rk_new@Base 1.2.0
+ fido_credman_rk_remaining@Base 1.2.0
+ fido_credman_rp_count@Base 1.2.0
+ fido_credman_rp_free@Base 1.2.0
+ fido_credman_rp_id@Base 1.2.0
+ fido_credman_rp_id_hash_len@Base 1.2.0
+ fido_credman_rp_id_hash_ptr@Base 1.2.0
+ fido_credman_rp_name@Base 1.2.0
+ fido_credman_rp_new@Base 1.2.0
+ fido_credman_set_dev_rk@Base 1.8.0
+ fido_dev_build@Base 1.1.0
+ fido_dev_cancel@Base 1.3.0
+ fido_dev_close@Base 1.1.0
+ fido_dev_enable_entattest@Base 1.7.0
+ fido_dev_flags@Base 1.1.0
+ fido_dev_force_fido2@Base 1.1.0
+ fido_dev_force_pin_change@Base 1.7.0
+ fido_dev_force_u2f@Base 1.1.0
+ fido_dev_free@Base 1.1.0
+ fido_dev_get_assert@Base 1.1.0
+ fido_dev_get_cbor_info@Base 1.1.0
+ fido_dev_get_retry_count@Base 1.1.0
+ fido_dev_get_touch_begin@Base 1.5.0
+ fido_dev_get_touch_status@Base 1.5.0
+ fido_dev_get_uv_retry_count@Base 1.6.0
+ fido_dev_has_pin@Base 1.5.0
+ fido_dev_has_uv@Base 1.7.0
+ fido_dev_info_free@Base 1.1.0
+ fido_dev_info_manifest@Base 1.1.0
+ fido_dev_info_manufacturer_string@Base 1.1.0
+ fido_dev_info_new@Base 1.1.0
+ fido_dev_info_path@Base 1.1.0
+ fido_dev_info_product@Base 1.1.0
+ fido_dev_info_product_string@Base 1.1.0
+ fido_dev_info_ptr@Base 1.1.0
+ fido_dev_info_set@Base 1.10.0
+ fido_dev_info_vendor@Base 1.1.0
+ fido_dev_io_handle@Base 1.10.0
+ fido_dev_is_fido2@Base 1.1.0
+ fido_dev_is_winhello@Base 1.8.0
+ fido_dev_largeblob_get@Base 1.7.0
+ fido_dev_largeblob_get_array@Base 1.7.0
+ fido_dev_largeblob_remove@Base 1.7.0
+ fido_dev_largeblob_set@Base 1.7.0
+ fido_dev_largeblob_set_array@Base 1.7.0
+ fido_dev_major@Base 1.1.0
+ fido_dev_make_cred@Base 1.1.0
+ fido_dev_minor@Base 1.1.0
+ fido_dev_new@Base 1.1.0
+ fido_dev_new_with_info@Base 1.10.0
+ fido_dev_open@Base 1.1.0
+ fido_dev_open_with_info@Base 1.10.0
+ fido_dev_protocol@Base 1.1.0
+ fido_dev_reset@Base 1.1.0
+ fido_dev_set_io_functions@Base 1.1.0
+ fido_dev_set_pin@Base 1.1.0
+ fido_dev_set_pin_minlen@Base 1.7.0
+ fido_dev_set_pin_minlen_rpid@Base 1.9.0
+ fido_dev_set_sigmask@Base 1.7.0
+ fido_dev_set_timeout@Base 1.9.0
+ fido_dev_set_transport_functions@Base 1.4.0
+ fido_dev_supports_cred_prot@Base 1.5.0
+ fido_dev_supports_credman@Base 1.6.0
+ fido_dev_supports_credman@Base 1.7.0
+ fido_dev_supports_permissions@Base 1.7.0
+ fido_dev_supports_pin@Base 1.5.0
+ fido_dev_supports_uv@Base 1.7.0
+ fido_dev_toggle_always_uv@Base 1.7.0
+ fido_init@Base 1.1.0
+ fido_set_log_handler@Base 1.4.0
+ fido_strerr@Base 1.1.0
+ rs256_pk_free@Base 1.1.0
+ rs256_pk_from_EVP_PKEY@Base 1.9.0
+ rs256_pk_from_RSA@Base 1.1.0
+ rs256_pk_from_ptr@Base 1.1.0
+ rs256_pk_new@Base 1.1.0
+ rs256_pk_to_EVP_PKEY@Base 1.1.0
--- End Message ---
--- Begin Message ---
On Thu, Feb 01, 2024 at 01:17:29PM +0000, Colin Watson wrote:
> On Thu, Feb 01, 2024 at 12:26:58AM +0000, Steve Langasek wrote:
> > As part of the 64-bit time_t transition required to support 32-bit
> > architectures in 2038 and beyond
> > (https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified
> > libfido2 as a source package shipping runtime libraries whose ABI
> > either is affected by the change in size of time_t, or could not be
> > analyzed via abi-compliance-checker (and therefore to be on the safe
> > side we assume is affected).
> [...]
> > If you have any concerns about this patch, please reach out ASAP. Although
> > this package will be uploaded to experimental immediately, there will be a
> > period of several days before we begin uploads to unstable; so if
> > information
> > becomes available that your package should not be included in the
> > transition,
> > there is time for us to amend the planned uploads.
> This one surprised me, because there doesn't seem to be anything about
> either times or offsets in libfido2's ABI as far as I can see.
> https://people.canonical.com/~vorlon/armhf-time_t/compat_reports/libfido2-dev/lfs_to_timet/compat_report.html
> reports 100% binary compatibility. The source compatibility tab there
> does indeed show a time_t change, but I didn't think that was cause for
> a SONAME change as long as it doesn't affect libfido2's own exported
> symbols - am I missing something here?
The thing is, the way in which we're driving a-c-c doesn't actually inspect
the .so's because it's non-trivial to map these from headers, so the "binary
compatibility" table is always a no-op unfortunately.
I've checked libfido2.so.1 and confirmed that these functions are not
exported and therefore this is a false positive. I've updated the tooling
to exclude libfido2-dev, and am closing this bug report. The NMU to
experimental can be ignored / superseded / removed at your discretion.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developer https://www.debian.org/
[email protected] [email protected]
signature.asc
Description: PGP signature
--- End Message ---
