Your message dated Wed, 28 Feb 2024 03:15:58 +0000
with message-id <[email protected]>
and subject line Bug#1062500: fixed in duo-unix 1.11.3-1.1
has caused the Debian Bug report #1062500,
regarding duo-unix: NMU diff for 64-bit time_t transition
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1062500: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1062500
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: duo-unix
Version: 1.11.3-1
Severity: serious
Tags: patch pending
Justification: library ABI skew on upgrade
User: [email protected]
Usertags: time-t
Dear maintainer,
As part of the 64-bit time_t transition required to support 32-bit
architectures in 2038 and beyond
(https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified
duo-unix as a source package shipping runtime libraries whose ABI
either is affected by the change in size of time_t, or could not be
analyzed via abi-compliance-checker (and therefore to be on the safe
side we assume is affected).
To ensure that inconsistent combinations of libraries with their
reverse-dependencies are never installed together, it is necessary to
have a library transition, which is most easily done by renaming the
runtime library package.
Since turning on 64-bit time_t is being handled centrally through a change
to the default dpkg-buildflags (https://bugs.debian.org/1037136), it is
important that libraries affected by this ABI change all be uploaded close
together in time. Therefore I have prepared a 0-day NMU for duo-unix
which will initially be uploaded to experimental if possible, then to
unstable after packages have cleared binary NEW.
Please find the patch for this NMU attached.
If you have any concerns about this patch, please reach out ASAP. Although
this package will be uploaded to experimental immediately, there will be a
period of several days before we begin uploads to unstable; so if information
becomes available that your package should not be included in the transition,
there is time for us to amend the planned uploads.
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.5.0-15-generic (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
diff -Nru duo-unix-1.11.3/debian/changelog duo-unix-1.11.3/debian/changelog
--- duo-unix-1.11.3/debian/changelog 2020-03-14 17:08:43.000000000 +0000
+++ duo-unix-1.11.3/debian/changelog 2024-02-01 17:34:50.000000000 +0000
@@ -1,3 +1,10 @@
+duo-unix (1.11.3-1.1) experimental; urgency=medium
+
+ * Non-maintainer upload.
+ * Rename libraries for 64-bit time_t transition.
+
+ -- Michael Hudson-Doyle <[email protected]> Thu, 01 Feb 2024 17:34:50 +0000
+
duo-unix (1.11.3-1) unstable; urgency=medium
* New upstream release (Closes: 952392).
diff -Nru duo-unix-1.11.3/debian/control duo-unix-1.11.3/debian/control
--- duo-unix-1.11.3/debian/control 2020-03-14 17:08:43.000000000 +0000
+++ duo-unix-1.11.3/debian/control 2024-02-01 17:34:50.000000000 +0000
@@ -11,7 +11,7 @@
Architecture: any
Multi-Arch: same
Pre-Depends: ${misc:Pre-Depends}
-Depends: ${shlibs:Depends}, ${misc:Depends}, libduo3 (= ${binary:Version}),
+Depends: ${shlibs:Depends}, ${misc:Depends}, libduo3t64 (= ${binary:Version}),
libpam-runtime (>= 1.1.1-3~)
Description: PAM module for Duo Security two-factor authentication
This provides the PAM module needed to interact with the Duo Security
@@ -21,7 +21,7 @@
Package: login-duo
Section: admin
Architecture: any
-Depends: ${shlibs:Depends}, ${misc:Depends}, libduo3 (= ${binary:Version}),
+Depends: ${shlibs:Depends}, ${misc:Depends}, libduo3t64 (= ${binary:Version}),
openssh-server
Description: login wrapper for Duo Security two-factor authentication
This provides the login wrapper needed to interact with the Duo Security
@@ -29,7 +29,10 @@
be used along with global OpenSSH server configurations. Also includes
manpage and configuration.
-Package: libduo3
+Package: libduo3t64
+Provides: ${t64:Provides}
+Replaces: libduo3
+Breaks: libduo3 (<< ${source:Version})
Architecture: any
Multi-Arch: same
Pre-Depends: ${misc:Pre-Depends}
@@ -42,7 +45,7 @@
Package: libduo-dev
Section: libdevel
Architecture: any
-Depends: libduo3 (= ${binary:Version}), ${misc:Depends}
+Depends: libduo3t64 (= ${binary:Version}), ${misc:Depends}
Description: Duo Security development libraries and header files
This package provides the development libraries and header files needed to
link against the Duo Security library functions. Also includes the manpages
diff -Nru duo-unix-1.11.3/debian/libduo3.install
duo-unix-1.11.3/debian/libduo3.install
--- duo-unix-1.11.3/debian/libduo3.install 2011-09-02 23:13:26.000000000
+0000
+++ duo-unix-1.11.3/debian/libduo3.install 1970-01-01 00:00:00.000000000
+0000
@@ -1 +0,0 @@
-usr/lib/*/libduo.so.3*
diff -Nru duo-unix-1.11.3/debian/libduo3.manpages
duo-unix-1.11.3/debian/libduo3.manpages
--- duo-unix-1.11.3/debian/libduo3.manpages 2011-04-12 18:52:07.000000000
+0000
+++ duo-unix-1.11.3/debian/libduo3.manpages 1970-01-01 00:00:00.000000000
+0000
@@ -1 +0,0 @@
-debian/tmp/usr/share/man/man3/duo.3
diff -Nru duo-unix-1.11.3/debian/libduo3.symbols
duo-unix-1.11.3/debian/libduo3.symbols
--- duo-unix-1.11.3/debian/libduo3.symbols 2020-03-14 17:08:43.000000000
+0000
+++ duo-unix-1.11.3/debian/libduo3.symbols 1970-01-01 00:00:00.000000000
+0000
@@ -1,21 +0,0 @@
-libduo.so.3 libduo3 #MINVER#
- duo_add_optional_param@Base 1.11.3
- duo_add_param@Base 1.11.3
- duo_check_groups@Base 1.9.6
- duo_close@Base 1.5
- duo_common_ini_handler@Base 1.9.6
- duo_config_close@Base 1.11.3
- duo_config_default@Base 1.9.6
- duo_debug@Base 1.9.6
- duo_geterr@Base 1.5
- duo_local_ip@Base 1.9.6
- duo_log@Base 1.9.6
- duo_login@Base 1.5
- duo_open@Base 1.5
- duo_parse_config@Base 1.5
- duo_reset_conv_funcs@Base 1.9.6
- duo_set_boolean_option@Base 1.9.6
- duo_set_conv_funcs@Base 1.5
- duo_split_at@Base 1.11.3
- duo_syslog@Base 1.9.6
- duo_zero_free@Base 1.11.3
diff -Nru duo-unix-1.11.3/debian/libduo3t64.install
duo-unix-1.11.3/debian/libduo3t64.install
--- duo-unix-1.11.3/debian/libduo3t64.install 1970-01-01 00:00:00.000000000
+0000
+++ duo-unix-1.11.3/debian/libduo3t64.install 2011-09-02 23:13:26.000000000
+0000
@@ -0,0 +1 @@
+usr/lib/*/libduo.so.3*
diff -Nru duo-unix-1.11.3/debian/libduo3t64.lintian-overrides
duo-unix-1.11.3/debian/libduo3t64.lintian-overrides
--- duo-unix-1.11.3/debian/libduo3t64.lintian-overrides 1970-01-01
00:00:00.000000000 +0000
+++ duo-unix-1.11.3/debian/libduo3t64.lintian-overrides 2024-02-01
17:34:50.000000000 +0000
@@ -0,0 +1 @@
+libduo3t64: package-name-doesnt-match-sonames libduo3
diff -Nru duo-unix-1.11.3/debian/libduo3t64.manpages
duo-unix-1.11.3/debian/libduo3t64.manpages
--- duo-unix-1.11.3/debian/libduo3t64.manpages 1970-01-01 00:00:00.000000000
+0000
+++ duo-unix-1.11.3/debian/libduo3t64.manpages 2011-04-12 18:52:07.000000000
+0000
@@ -0,0 +1 @@
+debian/tmp/usr/share/man/man3/duo.3
diff -Nru duo-unix-1.11.3/debian/libduo3t64.symbols
duo-unix-1.11.3/debian/libduo3t64.symbols
--- duo-unix-1.11.3/debian/libduo3t64.symbols 1970-01-01 00:00:00.000000000
+0000
+++ duo-unix-1.11.3/debian/libduo3t64.symbols 2024-02-01 17:34:50.000000000
+0000
@@ -0,0 +1,21 @@
+libduo.so.3 libduo3t64 #MINVER#
+ duo_add_optional_param@Base 1.11.3
+ duo_add_param@Base 1.11.3
+ duo_check_groups@Base 1.9.6
+ duo_close@Base 1.5
+ duo_common_ini_handler@Base 1.9.6
+ duo_config_close@Base 1.11.3
+ duo_config_default@Base 1.9.6
+ duo_debug@Base 1.9.6
+ duo_geterr@Base 1.5
+ duo_local_ip@Base 1.9.6
+ duo_log@Base 1.9.6
+ duo_login@Base 1.5
+ duo_open@Base 1.5
+ duo_parse_config@Base 1.5
+ duo_reset_conv_funcs@Base 1.9.6
+ duo_set_boolean_option@Base 1.9.6
+ duo_set_conv_funcs@Base 1.5
+ duo_split_at@Base 1.11.3
+ duo_syslog@Base 1.9.6
+ duo_zero_free@Base 1.11.3
--- End Message ---
--- Begin Message ---
Source: duo-unix
Source-Version: 1.11.3-1.1
Done: Michael Hudson-Doyle <[email protected]>
We believe that the bug you reported is fixed in the latest version of
duo-unix, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Hudson-Doyle <[email protected]> (supplier of updated duo-unix
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 28 Feb 2024 02:30:53 +0000
Source: duo-unix
Architecture: source
Version: 1.11.3-1.1
Distribution: unstable
Urgency: medium
Maintainer: Kees Cook <[email protected]>
Changed-By: Michael Hudson-Doyle <[email protected]>
Closes: 1062500
Changes:
duo-unix (1.11.3-1.1) unstable; urgency=medium
.
* Non-maintainer upload.
* Rename libraries for 64-bit time_t transition. Closes: #1062500
Checksums-Sha1:
ea999bea774e9d60604d54adb9b29e4645cb261d 1987 duo-unix_1.11.3-1.1.dsc
c69b9af2b838733987ddabc8ab23f2b73d1a52c6 11064
duo-unix_1.11.3-1.1.debian.tar.xz
c782b3f5deea7a5a596829221892c7bbcdcbdcec 7098
duo-unix_1.11.3-1.1_source.buildinfo
Checksums-Sha256:
baf93c065a47e71e7593c1c5fd0cb26789e9e4fbc1cb5f5c0cb84a3f604e50af 1987
duo-unix_1.11.3-1.1.dsc
abc2e05b8fa2737fabe2df24c91a92fb97a8679f61ad5320e2bcba983d1de5ba 11064
duo-unix_1.11.3-1.1.debian.tar.xz
4bc3025aa139128f2679384b431405a1e588eb231872c9d898cde35baa1d30b5 7098
duo-unix_1.11.3-1.1_source.buildinfo
Files:
a2cf15de3f54be1a34e5806d2c50e0cf 1987 libs optional duo-unix_1.11.3-1.1.dsc
c84823f9e321b580f9aa7da6487c1a87 11064 libs optional
duo-unix_1.11.3-1.1.debian.tar.xz
4d5fb3becc8b1cb727dbf5f21c6b0aaf 7098 libs optional
duo-unix_1.11.3-1.1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJIBAEBCAAyFiEEiiBE+E9xaoW3f/djEd9ClMyjmJMFAmXemvQUHG13aHVkc29u
QGRlYmlhbi5vcmcACgkQEd9ClMyjmJPN2g//TfLaXRcOZECW1hbta+9Uv8Z1sjSm
svYrT64LS1pO07fDDhZWq6zRruIWEYRrBg/2iVLj4Pz5rol/HTfBRkh2M6rQ9uyt
SMb3zHiKa+xr30kDjNIpsIobVT9/aG7Zz5SoFa6Gz2TPHDPMFeUzMJA+1WKky83C
4hTsXzZafj8TDRuydlrPKlZXLFHm25dlb5K7unpT5e73t8m9K01FSDcdw+3NgBb5
/aMVPVRzn/szLEhTH8Xmc1MrqUsyKkpEo4oiphPuWFBDYEnRftQRaiIcQyAl472+
Ia8HnejP3yqCWc3clgdKTXuJ9bk9CfXNwfyz13rPE8kJR2igxa2k4rMQgJZ8acUl
KzENjEAV/xjjE/Kfx5fc0rAeQFF1d+QXiFbfBhdTDTZvhuI0I9SLn64w2+K2yMoW
tlH2g05i/EeWYbaVPT4/U+R8OtoVpTcaBB75iXdYyg095j86lxCSMfgxjLcS1AvQ
vaAYIhDDLdYsGKLyDTdUjE3ijpng9r1CnBuwcjap7GL2y7LbXlqDxENpnl4N2A0w
HFMfRbE1qLE0teTna4oyjkZXc+1TQUDx2NzUpJBYJ2f42CGzqaM/cJwLfqfXBb3H
u5lrG0JPt30roc2j359bjWOAFr6pelc2jlQW5Xy6+bIlM776orPqpGbRgyXvvA1V
mtzn69knIOAEjdw=
=/DUE
-----END PGP SIGNATURE-----
pgpGDJxBJuVC7.pgp
Description: PGP signature
--- End Message ---
