Bug#1062570: libpng1.6: NMU diff for 64-bit time_t transition

2024-02-06 Thread Gianfranco Costamagna

control: found -1 1.6.40-3

On Sun, 4 Feb 2024 11:05:46 +0100 Gianfranco Costamagna 
 wrote:

control: affects -1 1.6.40-3

G.
On Thu, 01 Feb 2024 23:12:06 + Steve Langasek  wrote:
> Source: libpng1.6
> Version: 1.6.42-1
> Severity: serious
> Tags: patch pending
> Justification: library ABI skew on upgrade
> User: debian-...@lists.debian.org
> Usertags: time-t
> 
> NOTICE: these changes must not be uploaded to unstable yet!
> 
> Dear maintainer,
> 
> As part of the 64-bit time_t transition required to support 32-bit

> architectures in 2038 and beyond
> (https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified
> libpng1.6 as a source package shipping runtime libraries whose ABI
> either is affected by the change in size of time_t, or could not be
> analyzed via abi-compliance-checker (and therefore to be on the safe
> side we assume is affected).
> 
> To ensure that inconsistent combinations of libraries with their

> reverse-dependencies are never installed together, it is necessary to
> have a library transition, which is most easily done by renaming the
> runtime library package.
> 
> Since turning on 64-bit time_t is being handled centrally through a change

> to the default dpkg-buildflags (https://bugs.debian.org/1037136), it is
> important that libraries affected by this ABI change all be uploaded close
> together in time.  Therefore I have prepared a 0-day NMU for libpng1.6
> which will initially be uploaded to experimental if possible, then to
> unstable after packages have cleared binary NEW.
> 
> Please find the patch for this NMU attached.
> 
> If you have any concerns about this patch, please reach out ASAP.  Although

> this package will be uploaded to experimental immediately, there will be a
> period of several days before we begin uploads to unstable; so if information
> becomes available that your package should not be included in the transition,
> there is time for us to amend the planned uploads.
> 
> 
> 
> -- System Information:

> Debian Release: trixie/sid
>   APT prefers unstable
>   APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
> Architecture: amd64 (x86_64)
> 
> Kernel: Linux 6.5.0-14-generic (SMP w/12 CPU threads; PREEMPT)

> Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
> Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
> Shell: /bin/sh linked to /usr/bin/dash
> Init: systemd (via /run/systemd/system)


OpenPGP_signature.asc
Description: OpenPGP digital signature


Bug#1062570: libpng1.6: NMU diff for 64-bit time_t transition

2024-02-04 Thread Gianfranco Costamagna

control: affects -1 1.6.40-3

G.
On Thu, 01 Feb 2024 23:12:06 + Steve Langasek  wrote:

Source: libpng1.6
Version: 1.6.42-1
Severity: serious
Tags: patch pending
Justification: library ABI skew on upgrade
User: debian-...@lists.debian.org
Usertags: time-t

NOTICE: these changes must not be uploaded to unstable yet!

Dear maintainer,

As part of the 64-bit time_t transition required to support 32-bit
architectures in 2038 and beyond
(https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified
libpng1.6 as a source package shipping runtime libraries whose ABI
either is affected by the change in size of time_t, or could not be
analyzed via abi-compliance-checker (and therefore to be on the safe
side we assume is affected).

To ensure that inconsistent combinations of libraries with their
reverse-dependencies are never installed together, it is necessary to
have a library transition, which is most easily done by renaming the
runtime library package.

Since turning on 64-bit time_t is being handled centrally through a change
to the default dpkg-buildflags (https://bugs.debian.org/1037136), it is
important that libraries affected by this ABI change all be uploaded close
together in time.  Therefore I have prepared a 0-day NMU for libpng1.6
which will initially be uploaded to experimental if possible, then to
unstable after packages have cleared binary NEW.

Please find the patch for this NMU attached.

If you have any concerns about this patch, please reach out ASAP.  Although
this package will be uploaded to experimental immediately, there will be a
period of several days before we begin uploads to unstable; so if information
becomes available that your package should not be included in the transition,
there is time for us to amend the planned uploads.



-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.5.0-14-generic (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)


OpenPGP_signature.asc
Description: OpenPGP digital signature


Bug#1062570: libpng1.6: NMU diff for 64-bit time_t transition

2024-02-01 Thread Steve Langasek
Source: libpng1.6
Version: 1.6.42-1
Severity: serious
Tags: patch pending
Justification: library ABI skew on upgrade
User: debian-...@lists.debian.org
Usertags: time-t

NOTICE: these changes must not be uploaded to unstable yet!

Dear maintainer,

As part of the 64-bit time_t transition required to support 32-bit
architectures in 2038 and beyond
(https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified
libpng1.6 as a source package shipping runtime libraries whose ABI
either is affected by the change in size of time_t, or could not be
analyzed via abi-compliance-checker (and therefore to be on the safe
side we assume is affected).

To ensure that inconsistent combinations of libraries with their
reverse-dependencies are never installed together, it is necessary to
have a library transition, which is most easily done by renaming the
runtime library package.

Since turning on 64-bit time_t is being handled centrally through a change
to the default dpkg-buildflags (https://bugs.debian.org/1037136), it is
important that libraries affected by this ABI change all be uploaded close
together in time.  Therefore I have prepared a 0-day NMU for libpng1.6
which will initially be uploaded to experimental if possible, then to
unstable after packages have cleared binary NEW.

Please find the patch for this NMU attached.

If you have any concerns about this patch, please reach out ASAP.  Although
this package will be uploaded to experimental immediately, there will be a
period of several days before we begin uploads to unstable; so if information
becomes available that your package should not be included in the transition,
there is time for us to amend the planned uploads.



-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.5.0-14-generic (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
diff -Nru libpng1.6-1.6.42/debian/changelog libpng1.6-1.6.42/debian/changelog
--- libpng1.6-1.6.42/debian/changelog   2024-01-30 08:03:50.0 +
+++ libpng1.6-1.6.42/debian/changelog   2024-02-01 23:11:39.0 +
@@ -1,3 +1,10 @@
+libpng1.6 (1.6.42-1.1) experimental; urgency=medium
+
+  * Non-maintainer upload.
+  * Rename libraries for 64-bit time_t transition.
+
+ -- Steve Langasek   Thu, 01 Feb 2024 23:11:39 +
+
 libpng1.6 (1.6.42-1) unstable; urgency=medium
 
   * New upstream version 1.6.42
diff -Nru libpng1.6-1.6.42/debian/control libpng1.6-1.6.42/debian/control
--- libpng1.6-1.6.42/debian/control 2023-10-10 15:55:59.0 +
+++ libpng1.6-1.6.42/debian/control 2024-02-01 23:11:39.0 +
@@ -12,7 +12,10 @@
 Homepage: http://libpng.org/pub/png/libpng.html
 Rules-Requires-Root: no
 
-Package: libpng16-16
+Package: libpng16-16t64
+Provides: ${t64:Provides}
+Replaces: libpng16-16
+Breaks: libpng16-16 (<< ${source:Version})
 Architecture: any
 Depends: ${shlibs:Depends}, ${misc:Depends}
 Multi-Arch: same
@@ -27,7 +30,7 @@
 Section: libdevel
 Architecture: any
 Multi-Arch: same
-Depends: ${misc:Depends}, libpng16-16 (= ${binary:Version}), zlib1g-dev
+Depends: ${misc:Depends}, libpng16-16t64 (= ${binary:Version}), zlib1g-dev
 Conflicts: libpng12-0-dev, libpng12-dev, libpng2-dev, libpng3-dev
 Breaks: libpng16-dev (<< 1.6.20-3), libpng16-devtools (<< 1.6.21-1)
 Replaces: libpng16-dev (<< 1.6.20-3), libpng16-devtools (<< 1.6.21-1)
@@ -43,7 +46,7 @@
 Section: libdevel
 Architecture: any
 Multi-Arch: foreign
-Depends: ${shlibs:Depends}, ${misc:Depends}, libpng16-16 (= ${binary:Version})
+Depends: ${shlibs:Depends}, ${misc:Depends}, libpng16-16t64 (= 
${binary:Version})
 Breaks: libpng16-tools (<< 1.6.21-1)
 Replaces: libpng16-tools (<< 1.6.21-1)
 Description: PNG library - tools (version 1.6)
diff -Nru libpng1.6-1.6.42/debian/libpng16-16.doc-base 
libpng1.6-1.6.42/debian/libpng16-16.doc-base
--- libpng1.6-1.6.42/debian/libpng16-16.doc-base2019-01-15 
08:59:23.0 +
+++ libpng1.6-1.6.42/debian/libpng16-16.doc-base1970-01-01 
00:00:00.0 +
@@ -1,25 +0,0 @@
-Document: libpng16
-Title: A description on how to use and modify libpng (version 1.5.X)
-Author: Glenn Randers-Pehrson
-Abstract: This file describes how to use and modify the PNG reference library
- (known as libpng) for your own use.  There are five sections to this
- file: introduction, structures, reading, writing, and modification and
- configuration notes for various special platforms.  In addition to this
- file, example.c is a good starting point for using the library, as
- it is heavily commented and should include everything most people
- will need.  We assume that libpng is already installed; see the
- INSTALL file for instructions on how to install libpng.
- .