Source: globus-openssl-module Version: 5.2-2 Severity: serious Tags: patch pending Justification: library ABI skew on upgrade User: debian-...@lists.debian.org Usertags: time-t
Dear maintainer, As part of the 64-bit time_t transition required to support 32-bit architectures in 2038 and beyond (https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified globus-openssl-module as a source package shipping runtime libraries whose ABI either is affected by the change in size of time_t, or could not be analyzed via abi-compliance-checker (and therefore to be on the safe side we assume is affected). To ensure that inconsistent combinations of libraries with their reverse-dependencies are never installed together, it is necessary to have a library transition, which is most easily done by renaming the runtime library package. Since turning on 64-bit time_t is being handled centrally through a change to the default dpkg-buildflags (https://bugs.debian.org/1037136), it is important that libraries affected by this ABI change all be uploaded close together in time. Therefore I have prepared a 0-day NMU for globus-openssl-module which will initially be uploaded to experimental if possible, then to unstable after packages have cleared binary NEW. Please find the patch for this NMU attached. If you have any concerns about this patch, please reach out ASAP. Although this package will be uploaded to experimental immediately, there will be a period of several days before we begin uploads to unstable; so if information becomes available that your package should not be included in the transition, there is time for us to amend the planned uploads. -- System Information: Debian Release: trixie/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 6.5.0-14-generic (SMP w/8 CPU threads; PREEMPT) Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system)
diff -Nru globus-openssl-module-5.2/debian/changelog globus-openssl-module-5.2/debian/changelog --- globus-openssl-module-5.2/debian/changelog 2022-07-05 20:32:19.000000000 +0000 +++ globus-openssl-module-5.2/debian/changelog 2024-01-31 14:51:24.000000000 +0000 @@ -1,3 +1,10 @@ +globus-openssl-module (5.2-2.1) experimental; urgency=medium + + * Non-maintainer upload. + * Rename libraries for 64-bit time_t transition. + + -- Lukas Märdian <sl...@debian.org> Wed, 31 Jan 2024 14:51:24 +0000 + globus-openssl-module (5.2-2) unstable; urgency=medium * Make doxygen Build-Depends-Indep diff -Nru globus-openssl-module-5.2/debian/control globus-openssl-module-5.2/debian/control --- globus-openssl-module-5.2/debian/control 2022-07-05 20:32:19.000000000 +0000 +++ globus-openssl-module-5.2/debian/control 2024-01-31 14:51:24.000000000 +0000 @@ -16,7 +16,10 @@ Vcs-Git: https://salsa.debian.org/ellert/globus-openssl-module.git Homepage: https://github.com/gridcf/gct/ -Package: libglobus-openssl-module0 +Package: libglobus-openssl-module0t64 +Provides: ${t64:Provides} +Replaces: libglobus-openssl-module0 +Breaks: libglobus-openssl-module0 (<< ${source:Version}) Section: libs Architecture: any Multi-Arch: same @@ -32,7 +35,7 @@ Community Forum (GridCF) that provides community-based support for core software packages in grid computing. . - The libglobus-openssl-module0 package contains: + The libglobus-openssl-module0t64 package contains: Globus OpenSSL Module Wrapper Package: libglobus-openssl-module-dev @@ -40,7 +43,7 @@ Architecture: any Multi-Arch: same Depends: - libglobus-openssl-module0 (= ${binary:Version}), + libglobus-openssl-module0t64 (= ${binary:Version}), ${misc:Depends}, libglobus-common-dev (>= 15), libglobus-gsi-proxy-ssl-dev (>= 4), diff -Nru globus-openssl-module-5.2/debian/libglobus-openssl-module0.docs globus-openssl-module-5.2/debian/libglobus-openssl-module0.docs --- globus-openssl-module-5.2/debian/libglobus-openssl-module0.docs 2019-07-11 13:15:02.000000000 +0000 +++ globus-openssl-module-5.2/debian/libglobus-openssl-module0.docs 1970-01-01 00:00:00.000000000 +0000 @@ -1 +0,0 @@ -debian/README diff -Nru globus-openssl-module-5.2/debian/libglobus-openssl-module0.install globus-openssl-module-5.2/debian/libglobus-openssl-module0.install --- globus-openssl-module-5.2/debian/libglobus-openssl-module0.install 2020-12-12 15:26:26.000000000 +0000 +++ globus-openssl-module-5.2/debian/libglobus-openssl-module0.install 1970-01-01 00:00:00.000000000 +0000 @@ -1 +0,0 @@ -/usr/lib/*/libglobus_openssl.so.* diff -Nru globus-openssl-module-5.2/debian/libglobus-openssl-module0.lintian-overrides globus-openssl-module-5.2/debian/libglobus-openssl-module0.lintian-overrides --- globus-openssl-module-5.2/debian/libglobus-openssl-module0.lintian-overrides 2018-03-02 17:15:16.000000000 +0000 +++ globus-openssl-module-5.2/debian/libglobus-openssl-module0.lintian-overrides 1970-01-01 00:00:00.000000000 +0000 @@ -1,3 +0,0 @@ -# The package name is given by the upstream package name -# Changing it would confuse the users -package-name-doesnt-match-sonames libglobus-openssl0 diff -Nru globus-openssl-module-5.2/debian/libglobus-openssl-module0.shlibs globus-openssl-module-5.2/debian/libglobus-openssl-module0.shlibs --- globus-openssl-module-5.2/debian/libglobus-openssl-module0.shlibs 2018-03-02 17:15:16.000000000 +0000 +++ globus-openssl-module-5.2/debian/libglobus-openssl-module0.shlibs 1970-01-01 00:00:00.000000000 +0000 @@ -1 +0,0 @@ -libglobus_openssl 0 libglobus-openssl-module0 (>= 3) diff -Nru globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.docs globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.docs --- globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.docs 1970-01-01 00:00:00.000000000 +0000 +++ globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.docs 2019-07-11 13:15:02.000000000 +0000 @@ -0,0 +1 @@ +debian/README diff -Nru globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.install globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.install --- globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.install 1970-01-01 00:00:00.000000000 +0000 +++ globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.install 2020-12-12 15:26:26.000000000 +0000 @@ -0,0 +1 @@ +/usr/lib/*/libglobus_openssl.so.* diff -Nru globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.lintian-overrides globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.lintian-overrides --- globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.lintian-overrides 1970-01-01 00:00:00.000000000 +0000 +++ globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.lintian-overrides 2024-01-31 14:51:24.000000000 +0000 @@ -0,0 +1,4 @@ +# The package name is given by the upstream package name +# Changing it would confuse the users +package-name-doesnt-match-sonames libglobus-openssl0 +libglobus-openssl-module0t64: package-name-doesnt-match-sonames libglobus-openssl-module0 diff -Nru globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.shlibs globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.shlibs --- globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.shlibs 1970-01-01 00:00:00.000000000 +0000 +++ globus-openssl-module-5.2/debian/libglobus-openssl-module0t64.shlibs 2024-01-31 14:51:24.000000000 +0000 @@ -0,0 +1 @@ +libglobus_openssl 0 libglobus-openssl-module0t64 (>= 3)
