• Bug#1061308: atheme-services: identified for time_t transition but no A

    From Steve Langasek@21:1/5 to All on Mon Jan 22 15:20:01 2024
    Package: atheme-services
    Version: 7.2.12-1
    Severity: serious
    User: debian-arm@lists.debian.org
    Usertags: time-t

    Dear maintainers,

    Analysis of the archive for the 64-bit time_t transition[0][1] identifies atheme-services as an affected package, on the basis that the headers could
    not be compiled and analyzed out of the box using abi-compliance-checker[2],
    so we have to assume it's affected.

    However, atheme-services' shlibs file declares a dependency on a library package name that contains no ABI information:

    $ cat DEBIAN/shlibs
    libathemecore 1 atheme-services (>= 7.2.12)
    libmowgli-2 0 atheme-services (>= 7.2.12)
    $

    It is therefore not obvious that we should rename the package to 'atheme-services-t64' as part of this transition.

    Looking at the archive, the only package that depends on these libraries is atheme-services-contrib, built from the same source package.

    Since there is no self-evident thing to do with the library package name
    here, and it's not certain that the library ABIs are affected by 64-bit
    time_t, and the only reverse dependency is from the same source package (so this is an internal transition), we will not be handling this package as
    part of the mass NMUs. However, I am filing a serious bug because partial upgrades from bookworm to trixie on 32-bit architectures (upgrading atheme-services without also upgrading atheme-services-contrib) MAY result
    in ABI skew and broken behavior. So as maintainers, you should decide how
    you want to handle this. (Maybe sufficient to, after the dpkg changes land, upload with bumping the versioned dep on atheme-services and adding a
    versioned breaks on atheme-services-contrib.)

    Thanks,
    --
    Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. Ubuntu Developer https://www.debian.org/ slangasek@ubuntu.com vorlon@debian.org

    [0] https://wiki.debian.org/ReleaseGoals/64bit-time
    [1] https://lists.debian.org/debian-devel/2024/01/msg00041.html
    [2] https://adrien.dcln.fr/misc/armhf-time_t/2024-01-17/logs/atheme-services/base/log.txt

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEErEg/aN5yj0PyIC/KVo0w8yGyEz0FAmWudzoACgkQVo0w8yGy Ez3QnQ//YFchoEsbHrX/DLPErH2r/zM0rFaiHwGjMWquKPhFjCGVOIyLm7txJjyy 127hjSdHS10hvdyqPugfFdSie1t4hIZqrV9NhX5KzGpCOOf6sO5+hUt/TP+5knkd FG4WNsfRe5B4L9r6MBhcocVKdYFV4bLVF2uoTjadp6Mk5N6ioALzlO4LaUeJxgsb 10Fnr38H834CiW/ubQ4jEWa8+/ZQT+swaXcrPWiIHT99KwzMR3YgHQfYOeWKElD2 BgBCbS2MiAcAQaZynpKZ6+zqPbGADji0nLu126gJSb8x9tdSzC6tfn7cGbR5rj0e TJnVXhmgQtO6VmWhyEL8rqdz8LeO1rNkcmpfY8EyX29jLSJdE/LfjpDMdDH1VRLw
    f8aoOe1