Source: libcoap3 Version: 4.3.4-1 Severity: serious Tags: patch pending Justification: library ABI skew on upgrade User: debian-...@lists.debian.org Usertags: time-t
Dear maintainer, As part of the 64-bit time_t transition required to support 32-bit architectures in 2038 and beyond (https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified libcoap3 as a source package shipping runtime libraries whose ABI either is affected by the change in size of time_t, or could not be analyzed via abi-compliance-checker (and therefore to be on the safe side we assume is affected). To ensure that inconsistent combinations of libraries with their reverse-dependencies are never installed together, it is necessary to have a library transition, which is most easily done by renaming the runtime library package. Since turning on 64-bit time_t is being handled centrally through a change to the default dpkg-buildflags (https://bugs.debian.org/1037136), it is important that libraries affected by this ABI change all be uploaded close together in time. Therefore I have prepared a 0-day NMU for libcoap3 which will initially be uploaded to experimental if possible, then to unstable after packages have cleared binary NEW. Please find the patch for this NMU attached. If you have any concerns about this patch, please reach out ASAP. Although this package will be uploaded to experimental immediately, there will be a period of several days before we begin uploads to unstable; so if information becomes available that your package should not be included in the transition, there is time for us to amend the planned uploads. -- System Information: Debian Release: trixie/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 6.5.0-14-generic (SMP w/12 CPU threads; PREEMPT) Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system)
diff -Nru libcoap3-4.3.4/debian/changelog libcoap3-4.3.4/debian/changelog --- libcoap3-4.3.4/debian/changelog 2023-10-28 04:11:11.000000000 +0000 +++ libcoap3-4.3.4/debian/changelog 2024-01-31 20:56:26.000000000 +0000 @@ -1,3 +1,10 @@ +libcoap3 (4.3.4-1.1) experimental; urgency=medium + + * Non-maintainer upload. + * Rename libraries for 64-bit time_t transition. + + -- Steve Langasek <vor...@debian.org> Wed, 31 Jan 2024 20:56:26 +0000 + libcoap3 (4.3.4-1) unstable; urgency=medium * [bd299e2] New upstream version 4.3.4 diff -Nru libcoap3-4.3.4/debian/control libcoap3-4.3.4/debian/control --- libcoap3-4.3.4/debian/control 2023-10-28 04:07:18.000000000 +0000 +++ libcoap3-4.3.4/debian/control 2024-01-31 20:56:26.000000000 +0000 @@ -20,7 +20,10 @@ Vcs-Browser: https://salsa.debian.org/debian-iot-team/libcoap3 Vcs-Git: https://salsa.debian.org/debian-iot-team/libcoap3.git -Package: libcoap3 +Package: libcoap3t64 +Provides: ${t64:Provides} +Replaces: libcoap3 +Breaks: libcoap3 (<< ${source:Version}) Architecture: any Multi-Arch: same Depends: @@ -45,7 +48,7 @@ Package: libcoap3-bin Architecture: any Depends: - libcoap3 (= ${binary:Version}), + libcoap3t64 (= ${binary:Version}), ${misc:Depends}, ${shlibs:Depends}, Conflicts: @@ -88,7 +91,7 @@ Multi-Arch: same Depends: libc6-dev, - libcoap3 (= ${binary:Version}), + libcoap3t64 (= ${binary:Version}), ${misc:Depends}, ${shlibs:Depends}, Description: C-Implementation of CoAP - development files API version 3 diff -Nru libcoap3-4.3.4/debian/libcoap3.docs libcoap3-4.3.4/debian/libcoap3.docs --- libcoap3-4.3.4/debian/libcoap3.docs 2022-11-28 09:42:22.000000000 +0000 +++ libcoap3-4.3.4/debian/libcoap3.docs 1970-01-01 00:00:00.000000000 +0000 @@ -1,3 +0,0 @@ -CONTRIBUTE -README -TODO diff -Nru libcoap3-4.3.4/debian/libcoap3.install.in libcoap3-4.3.4/debian/libcoap3.install.in --- libcoap3-4.3.4/debian/libcoap3.install.in 2022-11-28 09:42:22.000000000 +0000 +++ libcoap3-4.3.4/debian/libcoap3.install.in 1970-01-01 00:00:00.000000000 +0000 @@ -1,3 +0,0 @@ -usr/lib/@DEB_HOST_MULTIARCH@/libcoap-*.so.* -usr/share/man/man3 -usr/share/man/man7 diff -Nru libcoap3-4.3.4/debian/libcoap3.lintian-overrides libcoap3-4.3.4/debian/libcoap3.lintian-overrides --- libcoap3-4.3.4/debian/libcoap3.lintian-overrides 2022-11-28 09:42:22.000000000 +0000 +++ libcoap3-4.3.4/debian/libcoap3.lintian-overrides 1970-01-01 00:00:00.000000000 +0000 @@ -1,7 +0,0 @@ -# libcoap is licensed BSD-2-clause only, the GPL part comes in with the -# copyright for the Debian packaging! -libcoap3: possible-gpl-code-linked-with-openssl -# This warning is correct but useless as we want to package the various possible -# libraries within this package, it's overkill to package every library in it's -# own binary package. -libcoap3: package-name-doesnt-match-sonames libcoap-3-gnutls3 libcoap-3-notls3 libcoap-3-openssl3 diff -Nru libcoap3-4.3.4/debian/libcoap3.symbols libcoap3-4.3.4/debian/libcoap3.symbols --- libcoap3-4.3.4/debian/libcoap3.symbols 2022-11-28 09:42:22.000000000 +0000 +++ libcoap3-4.3.4/debian/libcoap3.symbols 1970-01-01 00:00:00.000000000 +0000 @@ -1,11 +0,0 @@ -libcoap-3-gnutls.so.3 libcoap3 #MINVER# -* Build-Depends-Package: libcoap3-dev - *@VER_3 4.3.0~ - -libcoap-3-notls.so.3 libcoap3 #MINVER# -* Build-Depends-Package: libcoap3-dev - *@VER_3 4.3.0~ - -libcoap-3-openssl.so.3 libcoap3 #MINVER# -* Build-Depends-Package: libcoap3-dev - *@VER_3 4.3.0~ diff -Nru libcoap3-4.3.4/debian/libcoap3t64.docs libcoap3-4.3.4/debian/libcoap3t64.docs --- libcoap3-4.3.4/debian/libcoap3t64.docs 1970-01-01 00:00:00.000000000 +0000 +++ libcoap3-4.3.4/debian/libcoap3t64.docs 2022-11-28 09:42:22.000000000 +0000 @@ -0,0 +1,3 @@ +CONTRIBUTE +README +TODO diff -Nru libcoap3-4.3.4/debian/libcoap3t64.install.in libcoap3-4.3.4/debian/libcoap3t64.install.in --- libcoap3-4.3.4/debian/libcoap3t64.install.in 1970-01-01 00:00:00.000000000 +0000 +++ libcoap3-4.3.4/debian/libcoap3t64.install.in 2022-11-28 09:42:22.000000000 +0000 @@ -0,0 +1,3 @@ +usr/lib/@DEB_HOST_MULTIARCH@/libcoap-*.so.* +usr/share/man/man3 +usr/share/man/man7 diff -Nru libcoap3-4.3.4/debian/libcoap3t64.lintian-overrides libcoap3-4.3.4/debian/libcoap3t64.lintian-overrides --- libcoap3-4.3.4/debian/libcoap3t64.lintian-overrides 1970-01-01 00:00:00.000000000 +0000 +++ libcoap3-4.3.4/debian/libcoap3t64.lintian-overrides 2024-01-31 20:56:26.000000000 +0000 @@ -0,0 +1,8 @@ +# libcoap is licensed BSD-2-clause only, the GPL part comes in with the +# copyright for the Debian packaging! +libcoap3t64: possible-gpl-code-linked-with-openssl +# This warning is correct but useless as we want to package the various possible +# libraries within this package, it's overkill to package every library in it's +# own binary package. +libcoap3t64: package-name-doesnt-match-sonames libcoap-3-gnutls3 libcoap-3-notls3 libcoap-3-openssl3 +libcoap3t64: package-name-doesnt-match-sonames libcoap3 diff -Nru libcoap3-4.3.4/debian/libcoap3t64.symbols libcoap3-4.3.4/debian/libcoap3t64.symbols --- libcoap3-4.3.4/debian/libcoap3t64.symbols 1970-01-01 00:00:00.000000000 +0000 +++ libcoap3-4.3.4/debian/libcoap3t64.symbols 2024-01-31 20:56:26.000000000 +0000 @@ -0,0 +1,11 @@ +libcoap-3-gnutls.so.3 libcoap3t64 #MINVER# +* Build-Depends-Package: libcoap3t64-dev + *@VER_3 4.3.0~ + +libcoap-3-notls.so.3 libcoap3t64 #MINVER# +* Build-Depends-Package: libcoap3t64-dev + *@VER_3 4.3.0~ + +libcoap-3-openssl.so.3 libcoap3t64 #MINVER# +* Build-Depends-Package: libcoap3t64-dev + *@VER_3 4.3.0~
