Package: krb5
Version: 1.20.1-3
Followup-For: Bug #1043184
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu mantic ubuntu-patch
Control: tags -1 patch

Hi Sam,

Since Ubuntu currently has glibc 2.38 (whereas Debian only has it in
experimental), this is a release-critical bug for us and is already blocking
the release of krb5 1.20.1-3 into mantic.

I've therefore prepared and uploaded the attached patch to mantic, which
implements your option 1.  I note you only mentioned adding Breaks: against
older libk5crypto3; a scan of the binary packages showed many other
reverse-dependencies of libkrb5support0 using strlcpy and strlcat, so rather
than trusting that a Breaks: of libk5crypto3 would be enough to force the
upgrade together, I added explicit Breaks: against all of these other
packages.

In any case, we can drop our patch in Ubuntu whenever you fix this bug on
the Debian side, whichever approach you take.

Thanks,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                   https://www.debian.org/
slanga...@ubuntu.com                                     vor...@debian.org
diff -Nru krb5-1.20.1/debian/control krb5-1.20.1/debian/control
--- krb5-1.20.1/debian/control  2023-08-14 13:01:40.000000000 -0700
+++ krb5-1.20.1/debian/control  2023-08-24 11:07:33.000000000 -0700
@@ -392,7 +392,11 @@
 Section: libs
 Breaks: libgssapi-krb5-2 (<< 1.20),
  libkadm5srv-mit9 (<< 1.13~alpha1-1), libkadm5clnt-mit9 (<< 1.13~alpha1-1),
- libk5crypto3 (<< 1.20),  libkdb5-8 (<< 1.16)
+ libk5crypto3 (<< 1.20.1-3ubuntu1~),  libkdb5-8 (<< 1.16),
+ krb5-pkinit (<< 1.20.1-3ubuntu1~), libkrb5-3 (<< 1.20.1-3ubuntu1~),
+ libkadm5srv-mit12 (<< 1.20.1-3ubuntu1~), libkdb5-10 (<< 1.20.1-3ubuntu1~),
+ krb5-admin-server (<< 1.20.1-3ubuntu1~), krb5-kdc (<< 1.20.1-3ubuntu1~),
+ krb5-user (<< 1.20.1-3ubuntu1~)
 Architecture: any
 Depends: ${misc:Depends}, ${shlibs:Depends}
 Multi-Arch: same
diff -Nru krb5-1.20.1/debian/libkrb5support0.lintian-overrides 
krb5-1.20.1/debian/libkrb5support0.lintian-overrides
--- krb5-1.20.1/debian/libkrb5support0.lintian-overrides        1969-12-31 
16:00:00.000000000 -0800
+++ krb5-1.20.1/debian/libkrb5support0.lintian-overrides        2023-08-24 
10:58:07.000000000 -0700
@@ -0,0 +1 @@
+libkrb5support0: symbols-declares-dependency-on-other-package libkrb5support0 
(= ${binary:Version}) (libkrb5support.so.0) [symbols]
diff -Nru krb5-1.20.1/debian/libkrb5support0.symbols 
krb5-1.20.1/debian/libkrb5support0.symbols
--- krb5-1.20.1/debian/libkrb5support0.symbols  2023-08-14 13:01:40.000000000 
-0700
+++ krb5-1.20.1/debian/libkrb5support0.symbols  2023-08-24 10:44:25.000000000 
-0700
@@ -1,4 +1,4 @@
-libkrb5support.so.0 libkrb5support0 #MINVER#
+libkrb5support.so.0 libkrb5support0 (= ${binary:Version})
  HIDDEN@HIDDEN 1.7dfsg~beta2
  k5_base64_decode@krb5support_0_MIT 1.12~alpha1+dfsg
  k5_base64_encode@krb5support_0_MIT 1.12~alpha1+dfsg
@@ -93,8 +93,8 @@
  krb5int_open_plugin_dirs@krb5support_0_MIT 1.7dfsg~beta2
  krb5int_pthread_loaded@krb5support_0_MIT 1.7dfsg~beta2
  krb5int_setspecific@krb5support_0_MIT 1.7dfsg~beta2
- krb5int_strlcat@krb5support_0_MIT 1.7dfsg~beta2
- krb5int_strlcpy@krb5support_0_MIT 1.7dfsg~beta2
+ (optional)krb5int_strlcat@krb5support_0_MIT 1.7dfsg~beta2
+ (optional)krb5int_strlcpy@krb5support_0_MIT 1.7dfsg~beta2
  krb5int_ucs4_to_utf8@krb5support_0_MIT 1.7dfsg~beta2
  krb5int_utf8_lentab@krb5support_0_MIT 1.7dfsg~beta2
  krb5int_utf8_mintab@krb5support_0_MIT 1.7dfsg~beta2

Reply via email to