[Pkg-utopia-maintainers] Bug#1063053: Bug#1063053: Bug#1063053: volume-key: NMU diff for 64-bit time_t transition

[Michael Biebl]

Am 05.02.24 um 11:29 schrieb Michael Biebl:
> Am 04.02.24 um 19:31 schrieb Steve Langasek:
>> Source: volume-key
>> Version: 0.3.12-5
>> Severity: serious
>> Tags: patch pending sid trixie
>> Justification: library ABI skew on upgrade
>> User: debian-arm at lists.debian.org
>> Usertags: time-t
>>
>> NOTICE: these changes must not be uploaded to unstable yet!
>>
>> Dear maintainer,
>>
>> As part of the 64-bit time_t transition required to support 32-bit
>> architectures in 2038 and beyond
>> (https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified
>> volume-key as a source package shipping runtime libraries whose ABI
>> either is affected by the change in size of time_t, or could not be
>> analyzed via abi-compliance-checker (and therefore to be on the safe
>> side we assume is affected).
>>
>> To ensure that inconsistent combinations of libraries with their
>> reverse-dependencies are never installed together, it is necessary to
>> have a library transition, which is most easily done by renaming the
>> runtime library package.
>>
>> Since turning on 64-bit time_t is being handled centrally through a 
>> change
>> to the default dpkg-buildflags (https://bugs.debian.org/1037136), it is
>> important that libraries affected by this ABI change all be uploaded 
>> close
>> together in time.  Therefore I have prepared a 0-day NMU for volume-key
>> which will initially be uploaded to experimental if possible, then to
>> unstable after packages have cleared binary NEW.
>>
>> Please find the patch for this NMU attached.
>>
>> If you have any concerns about this patch, please reach out ASAP.  
>> Although
>> this package will be uploaded to experimental immediately, there will 
>> be a
>> period of several days before we begin uploads to unstable; so if 
>> information
>> becomes available that your package should not be included in the 
>> transition,
>> there is time for us to amend the planned uploads.
>>
> 
> This also looks like a false positive.
> volume-key uses time_t internally at
> 
> https://salsa.debian.org/utopia-team/volume-key/-/blob/debian/sid/lib/kmip.c?ref_type=heads#L2132-2154
> 
> This is not exposed in the ABI though or am I misunderstanding the 
> changes introduced by the time-t transition ?

Please put a hold on the upload until this has been investigated properly.

Thanks.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-utopia-maintainers/attachments/20240205/50f6fa45/attachment-0001.sig>