Package: atheme-services
Version: 7.2.12-1
Severity: serious
User: debian-...@lists.debian.org
Usertags: time-t

Dear maintainers,

Analysis of the archive for the 64-bit time_t transition[0][1] identifies
atheme-services as an affected package, on the basis that the headers could
not be compiled and analyzed out of the box using abi-compliance-checker[2],
so we have to assume it's affected.

However, atheme-services' shlibs file declares a dependency on a library
package name that contains no ABI information:

$ cat DEBIAN/shlibs 
libathemecore 1 atheme-services (>= 7.2.12)
libmowgli-2 0 atheme-services (>= 7.2.12)
$ 

It is therefore not obvious that we should rename the package to
'atheme-services-t64' as part of this transition.

Looking at the archive, the only package that depends on these libraries is
atheme-services-contrib, built from the same source package.

Since there is no self-evident thing to do with the library package name
here, and it's not certain that the library ABIs are affected by 64-bit
time_t, and the only reverse dependency is from the same source package (so
this is an internal transition), we will not be handling this package as
part of the mass NMUs.  However, I am filing a serious bug because partial
upgrades from bookworm to trixie on 32-bit architectures (upgrading
atheme-services without also upgrading atheme-services-contrib) MAY result
in ABI skew and broken behavior.  So as maintainers, you should decide how
you want to handle this.  (Maybe sufficient to, after the dpkg changes land,
upload with bumping the versioned dep on atheme-services and adding a
versioned breaks on atheme-services-contrib.)

Thanks,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                   https://www.debian.org/
slanga...@ubuntu.com                                     vor...@debian.org

[0] https://wiki.debian.org/ReleaseGoals/64bit-time
[1] https://lists.debian.org/debian-devel/2024/01/msg00041.html
[2] 
https://adrien.dcln.fr/misc/armhf-time_t/2024-01-17/logs/atheme-services/base/log.txt

Attachment: signature.asc
Description: PGP signature

Reply via email to