Source: cupt
Version: 2.10.4+nmu1
Severity: serious
Tags: patch pending
Justification: library ABI skew on upgrade
User: debian-...@lists.debian.org
Usertags: time-t
Dear maintainer,
As part of the 64-bit time_t transition required to support 32-bit
architectures in 2038 and beyond
(https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified
cupt as a source package shipping runtime libraries whose ABI
either is affected by the change in size of time_t, or could not be
analyzed via abi-compliance-checker (and therefore to be on the safe
side we assume is affected).
To ensure that inconsistent combinations of libraries with their
reverse-dependencies are never installed together, it is necessary to
have a library transition, which is most easily done by renaming the
runtime library package.
Since turning on 64-bit time_t is being handled centrally through a change
to the default dpkg-buildflags (https://bugs.debian.org/1037136), it is
important that libraries affected by this ABI change all be uploaded close
together in time. Therefore I have prepared a 0-day NMU for cupt
which will initially be uploaded to experimental if possible, then to
unstable after packages have cleared binary NEW.
Please find the patch for this NMU attached.
If you have any concerns about this patch, please reach out ASAP. Although
this package will be uploaded to experimental immediately, there will be a
period of several days before we begin uploads to unstable; so if information
becomes available that your package should not be included in the transition,
there is time for us to amend the planned uploads.
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.5.0-15-generic (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_WARN, TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
diff -Nru cupt-2.10.4+nmu1/debian/changelog cupt-2.10.4+nmu2/debian/changelog
--- cupt-2.10.4+nmu1/debian/changelog 2020-06-07 20:56:21.000000000 +0000
+++ cupt-2.10.4+nmu2/debian/changelog 2024-01-30 18:09:11.000000000 +0000
@@ -1,3 +1,10 @@
+cupt (2.10.4+nmu2) experimental; urgency=medium
+
+ * Non-maintainer upload.
+ * Rename libraries for 64-bit time_t transition.
+
+ -- Michael Hudson-Doyle <mwhud...@debian.org> Tue, 30 Jan 2024 18:09:11 +0000
+
cupt (2.10.4+nmu1) unstable; urgency=medium
* Non-maintainer upload.
diff -Nru cupt-2.10.4+nmu1/debian/control cupt-2.10.4+nmu2/debian/control
--- cupt-2.10.4+nmu1/debian/control 2020-06-07 20:52:19.000000000 +0000
+++ cupt-2.10.4+nmu2/debian/control 2024-01-30 18:09:11.000000000 +0000
@@ -36,18 +36,19 @@
Section: debug
Priority: optional
Architecture: any
-Depends: libcupt4-2 (= ${binary:Version}) | cupt (= ${binary:Version}) |
+Depends: libcupt4-2t64 (= ${binary:Version}) | cupt (= ${binary:Version}) |
libcupt4-2-downloadmethod-curl (= ${binary:Version}) |
libcupt4-2-downloadmethod-wget (= ${binary:Version}),
${misc:Depends}
Description: flexible package manager -- debugging symbols
This package contains gdb debugging symbols for the Cupt packages.
-Package: libcupt4-2
+Package: libcupt4-2t64
+Replaces: libcupt4-2
Section: libs
Architecture: any
Depends: ${misc:Depends}, ${shlibs:Depends}, libcupt-common (>=
${source:Version})
-Breaks: dpkg (<< 1.17.11~), gpgv (<< 2~)
+Breaks: libcupt4-2 (<< ${source:Version}), dpkg (<< 1.17.11~), gpgv (<< 2~)
Recommends: libcupt4-2-downloadmethod-curl | libcupt4-2-downloadmethod-wget,
bzip2, gpgv, ed
Suggests: cupt, lzma, xz-utils, debdelta (>= 0.31), dpkg-dev, dpkg-repack
Description: flexible package manager -- runtime library
@@ -76,18 +77,18 @@
Description: flexible package manager -- runtime library (support files)
This package provides architecture-independent support parts for Cupt library.
.
- See also description of libcupt4-2 package.
+ See also description of libcupt4-2t64 package.
Package: libcupt4-dev
Section: libdevel
Architecture: any
-Depends: ${misc:Depends}, libcupt4-2 (= ${binary:Version})
+Depends: ${misc:Depends}, libcupt4-2t64 (= ${binary:Version})
Conflicts: libcupt2-dev, libcupt3-dev
Suggests: libcupt4-doc
Description: flexible package manager -- development files
This package provides headers for Cupt library.
.
- See also description of libcupt4-2 package.
+ See also description of libcupt4-2t64 package.
Package: libcupt4-doc
Section: doc
@@ -96,11 +97,11 @@
Description: flexible package manager -- library documentation
This package provides documentation for Cupt library.
.
- See also description of libcupt4-2 package.
+ See also description of libcupt4-2t64 package.
Package: cupt
Architecture: any
-Depends: ${misc:Depends}, ${shlibs:Depends}, libcupt4-2 (>= ${binary:Version})
+Depends: ${misc:Depends}, ${shlibs:Depends}, libcupt4-2t64 (>=
${binary:Version})
Suggests: sensible-utils, libreadline7
Description: flexible package manager -- console interface
This package provides a console interface to Cupt library, which implements
@@ -139,7 +140,7 @@
This package provides http(s) and ftp download handlers for Cupt library
using libcurl.
.
- See also description of libcupt4-2 package.
+ See also description of libcupt4-2t64 package.
Package: libcupt4-2-downloadmethod-wget
Architecture: any
@@ -148,4 +149,4 @@
This package provides http(s) and ftp download handlers for Cupt library
using wget.
.
- See also description of libcupt4-2 package.
+ See also description of libcupt4-2t64 package.
diff -Nru cupt-2.10.4+nmu1/debian/libcupt4-2.install
cupt-2.10.4+nmu2/debian/libcupt4-2.install
--- cupt-2.10.4+nmu1/debian/libcupt4-2.install 2019-11-10 09:53:34.000000000
+0000
+++ cupt-2.10.4+nmu2/debian/libcupt4-2.install 1970-01-01 00:00:00.000000000
+0000
@@ -1,3 +0,0 @@
-usr/lib/libcupt4.so.2
-usr/lib/cupt4-2/downloadmethods/libdebdelta*
-usr/lib/cupt4-2/downloadmethods/libfile*
diff -Nru cupt-2.10.4+nmu1/debian/libcupt4-2.lintian-overrides
cupt-2.10.4+nmu2/debian/libcupt4-2.lintian-overrides
--- cupt-2.10.4+nmu1/debian/libcupt4-2.lintian-overrides 2019-11-10
09:53:34.000000000 +0000
+++ cupt-2.10.4+nmu2/debian/libcupt4-2.lintian-overrides 1970-01-01
00:00:00.000000000 +0000
@@ -1,5 +0,0 @@
-# Cupt reads package indices (including the dpkg status file) into memory every
-# time it starts. It's a first-above-dpkg level API. For speed and consistency,
-# scanning the files are done via read-only custom-buffered random access to
-# index files.
-binary: uses-dpkg-database-directly usr/lib/libcupt*so*
diff -Nru cupt-2.10.4+nmu1/debian/libcupt4-2.postinst
cupt-2.10.4+nmu2/debian/libcupt4-2.postinst
--- cupt-2.10.4+nmu1/debian/libcupt4-2.postinst 2019-11-10 09:53:34.000000000
+0000
+++ cupt-2.10.4+nmu2/debian/libcupt4-2.postinst 1970-01-01 00:00:00.000000000
+0000
@@ -1,10 +0,0 @@
-#!/bin/sh
-
-set -e
-
-if [ ! -e /var/lib/cupt ]; then
- mkdir /var/lib/cupt
-fi
-
-#DEBHELPER#
-
diff -Nru cupt-2.10.4+nmu1/debian/libcupt4-2.postrm
cupt-2.10.4+nmu2/debian/libcupt4-2.postrm
--- cupt-2.10.4+nmu1/debian/libcupt4-2.postrm 2019-11-10 09:53:34.000000000
+0000
+++ cupt-2.10.4+nmu2/debian/libcupt4-2.postrm 1970-01-01 00:00:00.000000000
+0000
@@ -1,12 +0,0 @@
-#!/bin/sh
-
-set -e
-
-case "$1" in
- purge)
- rm -rf /var/lib/cupt
- rm -f /var/log/cupt.log*
- ;;
-esac
-
-#DEBHELPER#
diff -Nru cupt-2.10.4+nmu1/debian/libcupt4-2.shlibs
cupt-2.10.4+nmu2/debian/libcupt4-2.shlibs
--- cupt-2.10.4+nmu1/debian/libcupt4-2.shlibs 2019-11-10 09:53:34.000000000
+0000
+++ cupt-2.10.4+nmu2/debian/libcupt4-2.shlibs 1970-01-01 00:00:00.000000000
+0000
@@ -1 +0,0 @@
-libcupt4 2 libcupt4-2 (>= 2.10.0~)
diff -Nru cupt-2.10.4+nmu1/debian/libcupt4-2t64.install
cupt-2.10.4+nmu2/debian/libcupt4-2t64.install
--- cupt-2.10.4+nmu1/debian/libcupt4-2t64.install 1970-01-01
00:00:00.000000000 +0000
+++ cupt-2.10.4+nmu2/debian/libcupt4-2t64.install 2019-11-10
09:53:34.000000000 +0000
@@ -0,0 +1,3 @@
+usr/lib/libcupt4.so.2
+usr/lib/cupt4-2/downloadmethods/libdebdelta*
+usr/lib/cupt4-2/downloadmethods/libfile*
diff -Nru cupt-2.10.4+nmu1/debian/libcupt4-2t64.lintian-overrides
cupt-2.10.4+nmu2/debian/libcupt4-2t64.lintian-overrides
--- cupt-2.10.4+nmu1/debian/libcupt4-2t64.lintian-overrides 1970-01-01
00:00:00.000000000 +0000
+++ cupt-2.10.4+nmu2/debian/libcupt4-2t64.lintian-overrides 2024-01-30
18:09:11.000000000 +0000
@@ -0,0 +1,6 @@
+# Cupt reads package indices (including the dpkg status file) into memory every
+# time it starts. It's a first-above-dpkg level API. For speed and consistency,
+# scanning the files are done via read-only custom-buffered random access to
+# index files.
+binary: uses-dpkg-database-directly usr/lib/libcupt*so*
+libcupt4-2t64: package-name-doesnt-match-sonames libcupt4-2
diff -Nru cupt-2.10.4+nmu1/debian/libcupt4-2t64.postinst
cupt-2.10.4+nmu2/debian/libcupt4-2t64.postinst
--- cupt-2.10.4+nmu1/debian/libcupt4-2t64.postinst 1970-01-01
00:00:00.000000000 +0000
+++ cupt-2.10.4+nmu2/debian/libcupt4-2t64.postinst 2019-11-10
09:53:34.000000000 +0000
@@ -0,0 +1,10 @@
+#!/bin/sh
+
+set -e
+
+if [ ! -e /var/lib/cupt ]; then
+ mkdir /var/lib/cupt
+fi
+
+#DEBHELPER#
+
diff -Nru cupt-2.10.4+nmu1/debian/libcupt4-2t64.postrm
cupt-2.10.4+nmu2/debian/libcupt4-2t64.postrm
--- cupt-2.10.4+nmu1/debian/libcupt4-2t64.postrm 1970-01-01
00:00:00.000000000 +0000
+++ cupt-2.10.4+nmu2/debian/libcupt4-2t64.postrm 2019-11-10
09:53:34.000000000 +0000
@@ -0,0 +1,12 @@
+#!/bin/sh
+
+set -e
+
+case "$1" in
+ purge)
+ rm -rf /var/lib/cupt
+ rm -f /var/log/cupt.log*
+ ;;
+esac
+
+#DEBHELPER#
diff -Nru cupt-2.10.4+nmu1/debian/libcupt4-2t64.shlibs
cupt-2.10.4+nmu2/debian/libcupt4-2t64.shlibs
--- cupt-2.10.4+nmu1/debian/libcupt4-2t64.shlibs 1970-01-01
00:00:00.000000000 +0000
+++ cupt-2.10.4+nmu2/debian/libcupt4-2t64.shlibs 2024-01-30
18:09:11.000000000 +0000
@@ -0,0 +1 @@
+libcupt4 2 libcupt4-2t64 (>= 2.10.0~)
