Control: reassign -1 src:luasocket/20200726-1 Sigh, cut'n'paste fail. Reassigning.
On Sat, Feb 17, 2024 at 11:57:16PM -0800, Steve Langasek wrote: > Source: lua-luv > Version: 1.44.2-0-1 > Severity: serious > User: debian-...@lists.debian.org > Usertags: time-t > > Dear maintainers, > > Analysis of the archive for the 64-bit time_t transition[0][1] identifies > luasocket as an affected package, on the basis that the headers could not > be compiled and analyzed out of the box using abi-compliance-checker[2], so > we have to assume it's affected. > > However, lua-socket's shlibs file declares a dependency on a library package > name that contains no ABI information: > > $ cat DEBIAN/shlibs > liblua5.1-mime 2 lua-socket (>= 3.1.0) > liblua5.1-socket-serial 0 lua-socket (>= 3.1.0) > liblua5.1-socket-unix 2 lua-socket (>= 3.1.0) > liblua5.1-socket 2 lua-socket (>= 3.1.0) > liblua5.2-mime 2 lua-socket (>= 3.1.0) > liblua5.2-socket-serial 0 lua-socket (>= 3.1.0) > liblua5.2-socket-unix 2 lua-socket (>= 3.1.0) > liblua5.2-socket 2 lua-socket (>= 3.1.0) > liblua5.3-mime 2 lua-socket (>= 3.1.0) > liblua5.3-socket-serial 0 lua-socket (>= 3.1.0) > liblua5.3-socket-unix 2 lua-socket (>= 3.1.0) > liblua5.3-socket 2 lua-socket (>= 3.1.0) > liblua5.4-mime 2 lua-socket (>= 3.1.0) > liblua5.4-socket-serial 0 lua-socket (>= 3.1.0) > liblua5.4-socket-unix 2 lua-socket (>= 3.1.0) > liblua5.4-socket 2 lua-socket (>= 3.1.0) > $ > > It is therefore not obvious that we should rename the package to > 'lua-sockett64' as part of this transition. > > Looking at the archive, there is a package built from the separate lua-sec > source package that depends on this library. > > Since there is no self-evident thing to do with the library package name > here, we will not be handling this package as part of the mass NMUs. > Instead I am filing a serious bug because partial upgrades from bookworm to > trixie on 32-bit architectures will result in ABI skew and may result in > broken behavior. > > Thanks, > -- > Steve Langasek Give me a lever long enough and a Free OS > Debian Developer to set it on, and I can move the world. > Ubuntu Developer https://www.debian.org/ > slanga...@ubuntu.com vor...@debian.org > > [0] https://wiki.debian.org/ReleaseGoals/64bit-time > [1] https://lists.debian.org/debian-devel/2024/01/msg00041.html > [2] > https://adrien.dcln.fr/misc/armhf-time_t/2024-02-16T21%3A19%3A00/logs/lua-socket-dev/base/log.txt -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. Ubuntu Developer https://www.debian.org/ slanga...@ubuntu.com vor...@debian.org
signature.asc
Description: PGP signature
