[Debian-iot-maintainers] Bug#1062257: libcoap3: NMU diff for 64-bit time_t transition

Wed Jan 31 20:59:00 GMT 2024

Source: libcoap3
Version: 4.3.4-1
Severity: serious
Tags: patch pending
Justification: library ABI skew on upgrade
User: debian-arm at lists.debian.org
Usertags: time-t

Dear maintainer,

As part of the 64-bit time_t transition required to support 32-bit
architectures in 2038 and beyond
(https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified
libcoap3 as a source package shipping runtime libraries whose ABI
either is affected by the change in size of time_t, or could not be
analyzed via abi-compliance-checker (and therefore to be on the safe
side we assume is affected).

To ensure that inconsistent combinations of libraries with their
reverse-dependencies are never installed together, it is necessary to
have a library transition, which is most easily done by renaming the
runtime library package.

Since turning on 64-bit time_t is being handled centrally through a change
to the default dpkg-buildflags (https://bugs.debian.org/1037136), it is
important that libraries affected by this ABI change all be uploaded close
together in time.  Therefore I have prepared a 0-day NMU for libcoap3
which will initially be uploaded to experimental if possible, then to
unstable after packages have cleared binary NEW.

Please find the patch for this NMU attached.

If you have any concerns about this patch, please reach out ASAP.  Although
this package will be uploaded to experimental immediately, there will be a
period of several days before we begin uploads to unstable; so if information
becomes available that your package should not be included in the transition,
there is time for us to amend the planned uploads.



-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.5.0-14-generic (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
-------------- next part --------------
diff -Nru libcoap3-4.3.4/debian/changelog libcoap3-4.3.4/debian/changelog

--- libcoap3-4.3.4/debian/changelog	2023-10-28 04:11:11.000000000 +0000
+++ libcoap3-4.3.4/debian/changelog	2024-01-31 20:56:26.000000000 +0000
@@ -1,3 +1,10 @@
+libcoap3 (4.3.4-1.1) experimental; urgency=medium
+
+  * Non-maintainer upload.
+  * Rename libraries for 64-bit time_t transition.
+
+ -- Steve Langasek <vorlon at debian.org>  Wed, 31 Jan 2024 20:56:26 +0000
+
 libcoap3 (4.3.4-1) unstable; urgency=medium
 
   * [bd299e2] New upstream version 4.3.4
diff -Nru libcoap3-4.3.4/debian/control libcoap3-4.3.4/debian/control
--- libcoap3-4.3.4/debian/control	2023-10-28 04:07:18.000000000 +0000
+++ libcoap3-4.3.4/debian/control	2024-01-31 20:56:26.000000000 +0000
@@ -20,7 +20,10 @@
 Vcs-Browser: https://salsa.debian.org/debian-iot-team/libcoap3
 Vcs-Git: https://salsa.debian.org/debian-iot-team/libcoap3.git
 
-Package: libcoap3
+Package: libcoap3t64
+Provides: ${t64:Provides}
+Replaces: libcoap3
+Breaks: libcoap3 (<< ${source:Version})
 Architecture: any
 Multi-Arch: same
 Depends:
@@ -45,7 +48,7 @@
 Package: libcoap3-bin
 Architecture: any
 Depends:
- libcoap3 (= ${binary:Version}),
+ libcoap3t64 (= ${binary:Version}),
  ${misc:Depends},
  ${shlibs:Depends},
 Conflicts:
@@ -88,7 +91,7 @@
 Multi-Arch: same
 Depends:
  libc6-dev,
- libcoap3 (= ${binary:Version}),
+ libcoap3t64 (= ${binary:Version}),
  ${misc:Depends},
  ${shlibs:Depends},
 Description: C-Implementation of CoAP - development files API version 3
diff -Nru libcoap3-4.3.4/debian/libcoap3.docs libcoap3-4.3.4/debian/libcoap3.docs
--- libcoap3-4.3.4/debian/libcoap3.docs	2022-11-28 09:42:22.000000000 +0000
+++ libcoap3-4.3.4/debian/libcoap3.docs	1970-01-01 00:00:00.000000000 +0000
@@ -1,3 +0,0 @@
-CONTRIBUTE
-README
-TODO
diff -Nru libcoap3-4.3.4/debian/libcoap3.install.in libcoap3-4.3.4/debian/libcoap3.install.in
--- libcoap3-4.3.4/debian/libcoap3.install.in	2022-11-28 09:42:22.000000000 +0000
+++ libcoap3-4.3.4/debian/libcoap3.install.in	1970-01-01 00:00:00.000000000 +0000
@@ -1,3 +0,0 @@
-usr/lib/@DEB_HOST_MULTIARCH@/libcoap-*.so.*
-usr/share/man/man3
-usr/share/man/man7
diff -Nru libcoap3-4.3.4/debian/libcoap3.lintian-overrides libcoap3-4.3.4/debian/libcoap3.lintian-overrides
--- libcoap3-4.3.4/debian/libcoap3.lintian-overrides	2022-11-28 09:42:22.000000000 +0000
+++ libcoap3-4.3.4/debian/libcoap3.lintian-overrides	1970-01-01 00:00:00.000000000 +0000
@@ -1,7 +0,0 @@
-# libcoap is licensed BSD-2-clause only, the GPL part comes in with the
-# copyright for the Debian packaging!
-libcoap3: possible-gpl-code-linked-with-openssl
-# This warning is correct but useless as we want to package the various possible
-# libraries within this package, it's overkill to package every library in it's
-# own binary package.
-libcoap3: package-name-doesnt-match-sonames libcoap-3-gnutls3 libcoap-3-notls3 libcoap-3-openssl3
diff -Nru libcoap3-4.3.4/debian/libcoap3.symbols libcoap3-4.3.4/debian/libcoap3.symbols
--- libcoap3-4.3.4/debian/libcoap3.symbols	2022-11-28 09:42:22.000000000 +0000
+++ libcoap3-4.3.4/debian/libcoap3.symbols	1970-01-01 00:00:00.000000000 +0000
@@ -1,11 +0,0 @@
-libcoap-3-gnutls.so.3 libcoap3 #MINVER#
-* Build-Depends-Package: libcoap3-dev
- *@VER_3 4.3.0~
-
-libcoap-3-notls.so.3 libcoap3 #MINVER#
-* Build-Depends-Package: libcoap3-dev
- *@VER_3 4.3.0~
-
-libcoap-3-openssl.so.3 libcoap3 #MINVER#
-* Build-Depends-Package: libcoap3-dev
- *@VER_3 4.3.0~
diff -Nru libcoap3-4.3.4/debian/libcoap3t64.docs libcoap3-4.3.4/debian/libcoap3t64.docs
--- libcoap3-4.3.4/debian/libcoap3t64.docs	1970-01-01 00:00:00.000000000 +0000
+++ libcoap3-4.3.4/debian/libcoap3t64.docs	2022-11-28 09:42:22.000000000 +0000
@@ -0,0 +1,3 @@
+CONTRIBUTE
+README
+TODO
diff -Nru libcoap3-4.3.4/debian/libcoap3t64.install.in libcoap3-4.3.4/debian/libcoap3t64.install.in
--- libcoap3-4.3.4/debian/libcoap3t64.install.in	1970-01-01 00:00:00.000000000 +0000
+++ libcoap3-4.3.4/debian/libcoap3t64.install.in	2022-11-28 09:42:22.000000000 +0000
@@ -0,0 +1,3 @@
+usr/lib/@DEB_HOST_MULTIARCH@/libcoap-*.so.*
+usr/share/man/man3
+usr/share/man/man7
diff -Nru libcoap3-4.3.4/debian/libcoap3t64.lintian-overrides libcoap3-4.3.4/debian/libcoap3t64.lintian-overrides
--- libcoap3-4.3.4/debian/libcoap3t64.lintian-overrides	1970-01-01 00:00:00.000000000 +0000
+++ libcoap3-4.3.4/debian/libcoap3t64.lintian-overrides	2024-01-31 20:56:26.000000000 +0000
@@ -0,0 +1,8 @@
+# libcoap is licensed BSD-2-clause only, the GPL part comes in with the
+# copyright for the Debian packaging!
+libcoap3t64: possible-gpl-code-linked-with-openssl
+# This warning is correct but useless as we want to package the various possible
+# libraries within this package, it's overkill to package every library in it's
+# own binary package.
+libcoap3t64: package-name-doesnt-match-sonames libcoap-3-gnutls3 libcoap-3-notls3 libcoap-3-openssl3
+libcoap3t64: package-name-doesnt-match-sonames libcoap3
diff -Nru libcoap3-4.3.4/debian/libcoap3t64.symbols libcoap3-4.3.4/debian/libcoap3t64.symbols
--- libcoap3-4.3.4/debian/libcoap3t64.symbols	1970-01-01 00:00:00.000000000 +0000
+++ libcoap3-4.3.4/debian/libcoap3t64.symbols	2024-01-31 20:56:26.000000000 +0000
@@ -0,0 +1,11 @@
+libcoap-3-gnutls.so.3 libcoap3t64 #MINVER#
+* Build-Depends-Package: libcoap3t64-dev
+ *@VER_3 4.3.0~
+
+libcoap-3-notls.so.3 libcoap3t64 #MINVER#
+* Build-Depends-Package: libcoap3t64-dev
+ *@VER_3 4.3.0~
+
+libcoap-3-openssl.so.3 libcoap3t64 #MINVER#
+* Build-Depends-Package: libcoap3t64-dev
+ *@VER_3 4.3.0~
