Bug#1150234: libpoppler-dev enforces build version of NSS

[Adrian Bunk]

Control: found -1 26.07.0-2

On Wed, Oct 07, 2026 at 05:34:06PM +0200, Jeremy Bícha wrote:
> Control: forwarded -1
> https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1815
> 
> On Wed, Oct 7, 2026 at 3:37 PM Adrian Bunk <bunk at debian.org> wrote:
> > Putting the build version into Requires.private makes sense for
> > static linking, but if it is done the Depends of libpoppler-dev
> > have to be generated accordingly.
> 
> Thank you. I filed the bug upstream because this is caused by
> upstream's build system.
> 
> If I used nss 3.130 in the Depends field, then poppler wouldn't be
> able to transition to Testing until nss 1.30 does which is the same
> situation we are in now. And I don't think it's very practical to
> generate -dev Depends versions based on the version the package is
> built with.
> 
> I agree that it feels like an RC bug for an unnecessary build system
> design to delay security updates from reaching Testing.

The fundamental problem also affects the version in testing, let's not 
block migration when the last autopkgtest will have finished on this bug.

> To avoid this, I think we'd need to revert the 2025 change to how
> poppler prepares its .pc files.
> 
> Thank you,
> Jeremy Bícha

cu
Adrian