• Bug#1062632: libsolv: NMU diff for 64-bit time_t transition

    From Luca Boccassi@21:1/5 to All on Wed Feb 7 17:10:02 2024
    Control: tags -1 -pending
    Control: close -1

    On Fri, 02 Feb 2024 07:47:44 +0000 Steve Langasek <vorlon@debian.org>
    wrote:
    Source: libsolv
    Version: 0.7.28-1
    Severity: serious
    Tags: patch pending
    Justification: library ABI skew on upgrade
    User: debian-arm@lists.debian.org
    Usertags: time-t

    NOTICE: these changes must not be uploaded to unstable yet!

    Dear maintainer,

    As part of the 64-bit time_t transition required to support 32-bit architectures in 2038 and beyond (https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified
    libsolv as a source package shipping runtime libraries whose ABI
    either is affected by the change in size of time_t, or could not be
    analyzed via abi-compliance-checker (and therefore to be on the safe
    side we assume is affected).

    To ensure that inconsistent combinations of libraries with their reverse-dependencies are never installed together, it is necessary to
    have a library transition, which is most easily done by renaming the
    runtime library package.

    Since turning on 64-bit time_t is being handled centrally through a
    change
    to the default dpkg-buildflags (https://bugs.debian.org/1037136), it
    is
    important that libraries affected by this ABI change all be uploaded
    close
    together in time.  Therefore I have prepared a 0-day NMU for libsolv
    which will initially be uploaded to experimental if possible, then to unstable after packages have cleared binary NEW.

    Please find the patch for this NMU attached.

    If you have any concerns about this patch, please reach out ASAP. 
    Although
    this package will be uploaded to experimental immediately, there will
    be a
    period of several days before we begin uploads to unstable; so if
    information
    becomes available that your package should not be included in the
    transition,
    there is time for us to amend the planned uploads.

    There are no mentions of 'time_t' in the public headers of this
    library. The logs shows that it's a false positive, as the automated
    tool simply wasn't able to build it:

    https://adrien.dcln.fr/misc/armhf-time_t/2023-12-18/logs/libsolvext-dev/base/log.txt

    Closing as not applicable.

    --
    Kind regards,
    Luca Boccassi

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEErCSqx93EIPGOymuRKGv37813JB4FAmXDqkQACgkQKGv37813 JB7heQ//fVdRuPR/paw5TY2xIW0ULGp9EalG9DEij/du1lxtochCGhK/gjLwcf8W vaz0qNCPvFHebPGcyZUA6GsWfjjn1jTjk1aecikQ8J1dN3ZbgyGreOJkKqk7ky11 8iUUpVylt0hc8e2cPGc3F5SkM+uMWy7OCqJeI7wcF8Rj4hsl8X+GPha11UbLTzOC aF3erX31oW1HFSNA9joiMIH13Q+ciXT+QBJnl8PaJzC2r8KyDBI5Lm+m61KHS37K LuNrifRB18FogFxP9sn098S5dbxOEm/3aBttfHQ6DEX4LK5K9lnqx/4pAvCbXI9X MtU0Rprzif8DMZygnXleVwqW9fHWYoKoei8vRMIJmIKwFrjz4xeIj0xEroJsYszK 1E2WiCx4oqbaxMf4FCqBLyQVSRfe5Lpjt+Q1k6c6BnfGwY7q/Q6LpZDTda0j5RWj Ij07bVjqlfOOePQgjAILuQvaD2MY8wxvuSF2QnQqwqDs82NCrnUAYvgxkvuilwl1 lxjrLIw3C+S4haHjuLidRLi96lt5iQh4coLbphCjganm8b1z4r1xFjbwDMes0g3X sYoZr4brMopxdDS9DpfW8XNiTgxo9+Iy/uDQL9Qw7yBVLSYi7ub06tqs5HdzlX6p h3YhMMQZobSUJU+eeYR8xVkkJurk7xUct2FYIwkGSllMViVBP00=
    =tfOn
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)