Your message dated Wed, 28 Feb 2024 22:27:06 +0000
with message-id <[email protected]>
and subject line Bug#1062944: fixed in modsecurity 3.0.12-1.1
has caused the Debian Bug report #1062944,
regarding modsecurity: NMU diff for 64-bit time_t transition
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1062944: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1062944
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: modsecurity
Version: 3.0.12-1
Severity: serious
Tags: patch pending sid trixie
Justification: library ABI skew on upgrade
User: [email protected]
Usertags: time-t
NOTICE: these changes must not be uploaded to unstable yet!
Dear maintainer,
As part of the 64-bit time_t transition required to support 32-bit
architectures in 2038 and beyond
(https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified
modsecurity as a source package shipping runtime libraries whose ABI
either is affected by the change in size of time_t, or could not be
analyzed via abi-compliance-checker (and therefore to be on the safe
side we assume is affected).
To ensure that inconsistent combinations of libraries with their
reverse-dependencies are never installed together, it is necessary to
have a library transition, which is most easily done by renaming the
runtime library package.
Since turning on 64-bit time_t is being handled centrally through a change
to the default dpkg-buildflags (https://bugs.debian.org/1037136), it is
important that libraries affected by this ABI change all be uploaded close
together in time. Therefore I have prepared a 0-day NMU for modsecurity
which will initially be uploaded to experimental if possible, then to
unstable after packages have cleared binary NEW.
Please find the patch for this NMU attached.
If you have any concerns about this patch, please reach out ASAP. Although
this package will be uploaded to experimental immediately, there will be a
period of several days before we begin uploads to unstable; so if information
becomes available that your package should not be included in the transition,
there is time for us to amend the planned uploads.
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.5.0-15-generic (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect
diff -Nru modsecurity-3.0.12/debian/changelog
modsecurity-3.0.12/debian/changelog
--- modsecurity-3.0.12/debian/changelog 2024-01-30 21:45:39.000000000 +0000
+++ modsecurity-3.0.12/debian/changelog 2024-02-04 05:36:44.000000000 +0000
@@ -1,3 +1,10 @@
+modsecurity (3.0.12-1.1) experimental; urgency=medium
+
+ * Non-maintainer upload.
+ * Rename libraries for 64-bit time_t transition.
+
+ -- Graham Inggs <[email protected]> Sun, 04 Feb 2024 05:36:44 +0000
+
modsecurity (3.0.12-1) unstable; urgency=medium
* Team upload
diff -Nru modsecurity-3.0.12/debian/control modsecurity-3.0.12/debian/control
--- modsecurity-3.0.12/debian/control 2023-04-29 22:05:28.000000000 +0000
+++ modsecurity-3.0.12/debian/control 2024-02-04 05:36:44.000000000 +0000
@@ -12,7 +12,7 @@
Section: libdevel
Architecture: any
Multi-Arch: same
-Depends: libmodsecurity3 (= ${binary:Version}), ${misc:Depends}
+Depends: libmodsecurity3t64 (= ${binary:Version}), ${misc:Depends}
Description: ModSecurity v3 library component (development files)
Libmodsecurity is one component of the ModSecurity v3 project. The library
codebase serves as an interface to ModSecurity Connectors taking in web
@@ -23,7 +23,10 @@
.
This package includes the development support files.
-Package: libmodsecurity3
+Package: libmodsecurity3t64
+Provides: ${t64:Provides}
+Replaces: libmodsecurity3
+Breaks: libmodsecurity3 (<< ${source:Version})
Architecture: any
Multi-Arch: same
Depends: ${shlibs:Depends}, ${misc:Depends}
diff -Nru modsecurity-3.0.12/debian/libmodsecurity3.dirs
modsecurity-3.0.12/debian/libmodsecurity3.dirs
--- modsecurity-3.0.12/debian/libmodsecurity3.dirs 2023-04-29
22:05:28.000000000 +0000
+++ modsecurity-3.0.12/debian/libmodsecurity3.dirs 1970-01-01
00:00:00.000000000 +0000
@@ -1 +0,0 @@
-usr/lib
diff -Nru modsecurity-3.0.12/debian/libmodsecurity3.install
modsecurity-3.0.12/debian/libmodsecurity3.install
--- modsecurity-3.0.12/debian/libmodsecurity3.install 2023-04-29
22:05:28.000000000 +0000
+++ modsecurity-3.0.12/debian/libmodsecurity3.install 1970-01-01
00:00:00.000000000 +0000
@@ -1,2 +0,0 @@
-usr/lib/*/lib*.so.*
-usr/lib/*/libexec/modsec-rules-check
diff -Nru modsecurity-3.0.12/debian/libmodsecurity3t64.dirs
modsecurity-3.0.12/debian/libmodsecurity3t64.dirs
--- modsecurity-3.0.12/debian/libmodsecurity3t64.dirs 1970-01-01
00:00:00.000000000 +0000
+++ modsecurity-3.0.12/debian/libmodsecurity3t64.dirs 2023-04-29
22:05:28.000000000 +0000
@@ -0,0 +1 @@
+usr/lib
diff -Nru modsecurity-3.0.12/debian/libmodsecurity3t64.install
modsecurity-3.0.12/debian/libmodsecurity3t64.install
--- modsecurity-3.0.12/debian/libmodsecurity3t64.install 1970-01-01
00:00:00.000000000 +0000
+++ modsecurity-3.0.12/debian/libmodsecurity3t64.install 2023-04-29
22:05:28.000000000 +0000
@@ -0,0 +1,2 @@
+usr/lib/*/lib*.so.*
+usr/lib/*/libexec/modsec-rules-check
diff -Nru modsecurity-3.0.12/debian/libmodsecurity3t64.lintian-overrides
modsecurity-3.0.12/debian/libmodsecurity3t64.lintian-overrides
--- modsecurity-3.0.12/debian/libmodsecurity3t64.lintian-overrides
1970-01-01 00:00:00.000000000 +0000
+++ modsecurity-3.0.12/debian/libmodsecurity3t64.lintian-overrides
2024-02-04 05:36:44.000000000 +0000
@@ -0,0 +1 @@
+libmodsecurity3t64: package-name-doesnt-match-sonames libmodsecurity3
--- End Message ---
--- Begin Message ---
Source: modsecurity
Source-Version: 3.0.12-1.1
Done: Benjamin Drung <[email protected]>
We believe that the bug you reported is fixed in the latest version of
modsecurity, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Benjamin Drung <[email protected]> (supplier of updated modsecurity package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 28 Feb 2024 20:12:49 +0000
Source: modsecurity
Architecture: source
Version: 3.0.12-1.1
Distribution: unstable
Urgency: medium
Maintainer: Alberto Gonzalez Iniesta <[email protected]>
Changed-By: Benjamin Drung <[email protected]>
Closes: 1062944
Changes:
modsecurity (3.0.12-1.1) unstable; urgency=medium
.
* Non-maintainer upload.
* Rename libraries for 64-bit time_t transition. Closes: #1062944
Checksums-Sha1:
da6e6e1b5deb70b5a8261e28b1d6a3039fee8994 2095 modsecurity_3.0.12-1.1.dsc
2255a3d329d1956851db9d8b25fe110736536974 7696
modsecurity_3.0.12-1.1.debian.tar.xz
eb68e7674ab89e714ad879a4c61f1e83a39529a3 7555
modsecurity_3.0.12-1.1_source.buildinfo
Checksums-Sha256:
5942cff40d0c27c5c3f97ccab7109007d8faa291f306472a6707b1c240600d2b 2095
modsecurity_3.0.12-1.1.dsc
0e28058426cf3bee3d5840a696cef50693a7c164acb113437ed18d34f1531d29 7696
modsecurity_3.0.12-1.1.debian.tar.xz
ad156f65ac10a06eb94c579d23bebcea4f3e840d0e0123e136094a7fde300da1 7555
modsecurity_3.0.12-1.1_source.buildinfo
Files:
b21e10441bc2a01dd8375094b9cd5a1b 2095 libs optional modsecurity_3.0.12-1.1.dsc
d5ca6ef1ffe36e26f21e967c32280c0b 7696 libs optional
modsecurity_3.0.12-1.1.debian.tar.xz
297e4105c55df55d5561aecb4432c2dd 7555 libs optional
modsecurity_3.0.12-1.1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=Bzfv
-----END PGP SIGNATURE-----
pgpk2ogKKEnsu.pgp
Description: PGP signature
--- End Message ---
