Your message dated Thu, 29 Feb 2024 10:01:48 +0000
with message-id <e1rfdea-00agah...@fasolo.debian.org>
and subject line Bug#1062323: fixed in lib3mf 1.8.1+ds-4.1
has caused the Debian Bug report #1062323,
regarding lib3mf: NMU diff for 64-bit time_t transition
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1062323: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1062323
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: lib3mf
Version: 1.8.1+ds-4
Severity: serious
Tags: patch pending
Justification: library ABI skew on upgrade
User: debian-...@lists.debian.org
Usertags: time-t
Dear maintainer,
As part of the 64-bit time_t transition required to support 32-bit
architectures in 2038 and beyond
(https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified
lib3mf as a source package shipping runtime libraries whose ABI
either is affected by the change in size of time_t, or could not be
analyzed via abi-compliance-checker (and therefore to be on the safe
side we assume is affected).
To ensure that inconsistent combinations of libraries with their
reverse-dependencies are never installed together, it is necessary to
have a library transition, which is most easily done by renaming the
runtime library package.
Since turning on 64-bit time_t is being handled centrally through a change
to the default dpkg-buildflags (https://bugs.debian.org/1037136), it is
important that libraries affected by this ABI change all be uploaded close
together in time. Therefore I have prepared a 0-day NMU for lib3mf
which will initially be uploaded to experimental if possible, then to
unstable after packages have cleared binary NEW.
Please find the patch for this NMU attached.
If you have any concerns about this patch, please reach out ASAP. Although
this package will be uploaded to experimental immediately, there will be a
period of several days before we begin uploads to unstable; so if information
becomes available that your package should not be included in the transition,
there is time for us to amend the planned uploads.
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.5.0-14-generic (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
diff -Nru lib3mf-1.8.1+ds/debian/changelog lib3mf-1.8.1+ds/debian/changelog
--- lib3mf-1.8.1+ds/debian/changelog 2021-04-01 19:25:54.000000000 +0000
+++ lib3mf-1.8.1+ds/debian/changelog 2024-02-01 02:24:49.000000000 +0000
@@ -1,3 +1,10 @@
+lib3mf (1.8.1+ds-4.1) experimental; urgency=medium
+
+ * Non-maintainer upload.
+ * Rename libraries for 64-bit time_t transition.
+
+ -- Steve Langasek <vor...@debian.org> Thu, 01 Feb 2024 02:24:49 +0000
+
lib3mf (1.8.1+ds-4) unstable; urgency=medium
* Fix use-after-free (CVE-2021-21772), backporting fix from v2.1.1
diff -Nru lib3mf-1.8.1+ds/debian/control lib3mf-1.8.1+ds/debian/control
--- lib3mf-1.8.1+ds/debian/control 2021-04-01 19:25:54.000000000 +0000
+++ lib3mf-1.8.1+ds/debian/control 2024-02-01 02:24:49.000000000 +0000
@@ -7,7 +7,10 @@
Standards-Version: 4.3.0
Homepage: https://github.com/3MFConsortium/lib3mf
-Package: lib3mf1
+Package: lib3mf1t64
+Provides: ${t64:Provides}
+Replaces: lib3mf1
+Breaks: lib3mf1 (<< ${source:Version})
Architecture: any
Multi-Arch: same
Pre-Depends: ${misc:Pre-Depends}
@@ -51,7 +54,7 @@
Section: libdevel
Architecture: any
Multi-Arch: same
-Depends: lib3mf1 (= ${binary:Version}), ${misc:Depends}
+Depends: lib3mf1t64 (= ${binary:Version}), ${misc:Depends}
Description: Lib3MF is a C++ implementation of the 3D Manufacturing Format
(development)
As 3MF shall become an universal 3D Printing standard,
its quick adoption is very important. This library shall
diff -Nru lib3mf-1.8.1+ds/debian/lib3mf1.dirs
lib3mf-1.8.1+ds/debian/lib3mf1.dirs
--- lib3mf-1.8.1+ds/debian/lib3mf1.dirs 2021-03-30 20:58:25.000000000 +0000
+++ lib3mf-1.8.1+ds/debian/lib3mf1.dirs 1970-01-01 00:00:00.000000000 +0000
@@ -1 +0,0 @@
-usr/lib
diff -Nru lib3mf-1.8.1+ds/debian/lib3mf1.docs
lib3mf-1.8.1+ds/debian/lib3mf1.docs
--- lib3mf-1.8.1+ds/debian/lib3mf1.docs 2021-03-30 20:58:25.000000000 +0000
+++ lib3mf-1.8.1+ds/debian/lib3mf1.docs 1970-01-01 00:00:00.000000000 +0000
@@ -1 +0,0 @@
-debian/docs/NEWS
diff -Nru lib3mf-1.8.1+ds/debian/lib3mf1.install
lib3mf-1.8.1+ds/debian/lib3mf1.install
--- lib3mf-1.8.1+ds/debian/lib3mf1.install 2021-03-30 20:58:25.000000000
+0000
+++ lib3mf-1.8.1+ds/debian/lib3mf1.install 1970-01-01 00:00:00.000000000
+0000
@@ -1 +0,0 @@
-/usr/lib/*/lib*.so.*
diff -Nru lib3mf-1.8.1+ds/debian/lib3mf1t64.dirs
lib3mf-1.8.1+ds/debian/lib3mf1t64.dirs
--- lib3mf-1.8.1+ds/debian/lib3mf1t64.dirs 1970-01-01 00:00:00.000000000
+0000
+++ lib3mf-1.8.1+ds/debian/lib3mf1t64.dirs 2021-03-30 20:58:25.000000000
+0000
@@ -0,0 +1 @@
+usr/lib
diff -Nru lib3mf-1.8.1+ds/debian/lib3mf1t64.docs
lib3mf-1.8.1+ds/debian/lib3mf1t64.docs
--- lib3mf-1.8.1+ds/debian/lib3mf1t64.docs 1970-01-01 00:00:00.000000000
+0000
+++ lib3mf-1.8.1+ds/debian/lib3mf1t64.docs 2021-03-30 20:58:25.000000000
+0000
@@ -0,0 +1 @@
+debian/docs/NEWS
diff -Nru lib3mf-1.8.1+ds/debian/lib3mf1t64.install
lib3mf-1.8.1+ds/debian/lib3mf1t64.install
--- lib3mf-1.8.1+ds/debian/lib3mf1t64.install 1970-01-01 00:00:00.000000000
+0000
+++ lib3mf-1.8.1+ds/debian/lib3mf1t64.install 2021-03-30 20:58:25.000000000
+0000
@@ -0,0 +1 @@
+/usr/lib/*/lib*.so.*
diff -Nru lib3mf-1.8.1+ds/debian/lib3mf1t64.lintian-overrides
lib3mf-1.8.1+ds/debian/lib3mf1t64.lintian-overrides
--- lib3mf-1.8.1+ds/debian/lib3mf1t64.lintian-overrides 1970-01-01
00:00:00.000000000 +0000
+++ lib3mf-1.8.1+ds/debian/lib3mf1t64.lintian-overrides 2024-02-01
02:24:49.000000000 +0000
@@ -0,0 +1 @@
+lib3mf1t64: package-name-doesnt-match-sonames lib3mf1
--- End Message ---
--- Begin Message ---
Source: lib3mf
Source-Version: 1.8.1+ds-4.1
Done: Lukas Märdian <sl...@debian.org>
We believe that the bug you reported is fixed in the latest version of
lib3mf, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1062...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Lukas Märdian <sl...@debian.org> (supplier of updated lib3mf package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 29 Feb 2024 08:29:36 +0000
Source: lib3mf
Architecture: source
Version: 1.8.1+ds-4.1
Distribution: unstable
Urgency: medium
Maintainer: Torsten Paul <torsten.p...@gmx.de>
Changed-By: Lukas Märdian <sl...@debian.org>
Closes: 1062323
Changes:
lib3mf (1.8.1+ds-4.1) unstable; urgency=medium
.
* Non-maintainer upload.
* Rename libraries for 64-bit time_t transition. Closes: #1062323
Checksums-Sha1:
4511e1c84f3b5864d23e03536b06cff99b578ace 2003 lib3mf_1.8.1+ds-4.1.dsc
3703bbf725f4e1cdd7c2faab6183e743b56208f6 5608 lib3mf_1.8.1+ds-4.1.debian.tar.xz
68ad9c3f29c9b7bef2532be511ada7f4abcf0561 7521
lib3mf_1.8.1+ds-4.1_source.buildinfo
Checksums-Sha256:
5a60395427245dda87812009380625e7443fdf336e5aa18797f1889821446e1a 2003
lib3mf_1.8.1+ds-4.1.dsc
0349d21aca6fa3017e1260f819c7a553ac6a7e7c702af3e5aa832940224f303d 5608
lib3mf_1.8.1+ds-4.1.debian.tar.xz
5f07ed72a34b03dc454767d77a249851c812c9f247a0ef920dc087f7450dc168 7521
lib3mf_1.8.1+ds-4.1_source.buildinfo
Files:
d2f5440334b10324c816b3cc30bbda12 2003 libs optional lib3mf_1.8.1+ds-4.1.dsc
e837524dce9c8250c373562c83f92cd6 5608 libs optional
lib3mf_1.8.1+ds-4.1.debian.tar.xz
aae0e6227796ffac445cf72dc5bb649d 7521 libs optional
lib3mf_1.8.1+ds-4.1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=KOzh
-----END PGP SIGNATURE-----
pgpf0ew4a1ioD.pgp
Description: PGP signature
--- End Message ---
