[Pkg-xen-devel] Bug#995233: Files stored under /usr/lib/debug/ have a too specific xen version in their name

[Hans van Kranenburg]

Package: src:xen
Version: 4.14.3-1

Conversation in #debian-security, 25 Sep 2021

18:28 < adsb> hmmm, were the filename changes in

https://release.debian.org/proposed-updates/bullseye_diffs/xen_4.14.3-1~deb11u1_amd64.debdiff.html
expected?

---- >8 ----
Files only in first set of .debs, found in package xen-hypervisor-4.14-amd64
-rw-r--r-- root/root /usr/lib/debug/xen-4.14.3-pre.efi.map.gz
-rw-r--r-- root/root /usr/lib/debug/xen-syms-4.14.3-pre.gz
-rw-r--r-- root/root /usr/lib/debug/xen-syms-4.14.3-pre.map.gz
New files in second set of .debs, found in package xen-hypervisor-4.14-amd64
-rw-r--r-- root/root /usr/lib/debug/xen-4.14.3.efi.map.gz
-rw-r--r-- root/root /usr/lib/debug/xen-syms-4.14.3.gz
-rw-r--r-- root/root /usr/lib/debug/xen-syms-4.14.3.map.gz
---- >8 ----

^^^ files names in binary package should not change during an update of
a package in the Debian stable release

22:09 < Knorrie> adsb: no, I did not expect that, but after looking at
it for a few minutes, I understand why, and this is a
                 small packaging bug that exists for years already
apparently (the same thing has been happening during buster
    also already all the time)
22:09 < Knorrie> adsb: the '.3-pre' and '.3' parts should be stripped
out of the filename, just like the files in /boot (e.g.
                 /boot/xen-4.14-amd64.gz). so, just '4.14'
22:10 < Knorrie> we have a thing for that, which fixes up all the files
in boot, the same should be added for those files in
                 the debug location
https://salsa.debian.org/xen-team/debian-xen/-/blob/master/debian/shuffle-boot-files
22:10  * Knorrie takes note
22:10 < Knorrie> for some reason this was apparently not spotted yet,
because it's not on a todo list.
22:11 < Knorrie> so, let me rephrase, given the current packaging code
(which did not change), technically, I see why this is
                 actually expected, but it's not meant to be so
22:18  * h01ger learned today there's a new DSA acronym: Distributed
Switch Architecture :)
22:54 < adsb> Knorrie: cool, thanks for looking
22:58 < Knorrie> adsb: thanks for sharing the observation

FTR,
Knorrie