Source: openconnect
Version: 9.12-1
Severity: serious
Tags: patch pending sid trixie
Justification: library ABI skew on upgrade
User: debian-...@lists.debian.org
Usertags: time-t
NOTICE: these changes must not be uploaded to unstable yet!
Dear maintainer,
As part of the 64-bit time_t transition required to support 32-bit
architectures in 2038 and beyond
(https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified
openconnect as a source package shipping runtime libraries whose ABI
either is affected by the change in size of time_t, or could not be
analyzed via abi-compliance-checker (and therefore to be on the safe
side we assume is affected).
To ensure that inconsistent combinations of libraries with their
reverse-dependencies are never installed together, it is necessary to
have a library transition, which is most easily done by renaming the
runtime library package.
Since turning on 64-bit time_t is being handled centrally through a change
to the default dpkg-buildflags (https://bugs.debian.org/1037136), it is
important that libraries affected by this ABI change all be uploaded close
together in time. Therefore I have prepared a 0-day NMU for openconnect
which will initially be uploaded to experimental if possible, then to
unstable after packages have cleared binary NEW.
Please find the patch for this NMU attached.
If you have any concerns about this patch, please reach out ASAP. Although
this package will be uploaded to experimental immediately, there will be a
period of several days before we begin uploads to unstable; so if information
becomes available that your package should not be included in the transition,
there is time for us to amend the planned uploads.
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.2.0-39-generic (SMP w/32 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE,
TAINT_UNSIGNED_MODULE
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
diff -Nru openconnect-9.12/debian/changelog openconnect-9.12/debian/changelog
--- openconnect-9.12/debian/changelog 2023-06-13 19:41:20.000000000 -0300
+++ openconnect-9.12/debian/changelog 2024-02-03 16:10:47.000000000 -0300
@@ -1,3 +1,10 @@
+openconnect (9.12-1.1) experimental; urgency=medium
+
+ * Non-maintainer upload.
+ * Rename libraries for 64-bit time_t transition.
+
+ -- Lucas Kanashiro <kanash...@debian.org> Sat, 03 Feb 2024 16:10:47 -0300
+
openconnect (9.12-1) unstable; urgency=medium
* Update upstream source from tag 'upstream/9.12'
diff -Nru openconnect-9.12/debian/control openconnect-9.12/debian/control
--- openconnect-9.12/debian/control 2023-06-13 19:36:18.000000000 -0300
+++ openconnect-9.12/debian/control 2024-02-03 16:10:47.000000000 -0300
@@ -54,7 +54,7 @@
Section: libdevel
Depends: libgnutls28-dev,
liblz4-dev,
- libopenconnect5 (= ${binary:Version}),
+ libopenconnect5t64 (= ${binary:Version}),
libp11-kit-dev,
libpcsclite-dev,
libpskc-dev,
@@ -72,7 +72,10 @@
.
This package provides the header and development files.
-Package: libopenconnect5
+Package: libopenconnect5t64
+Provides: ${t64:Provides}
+Replaces: libopenconnect5
+Breaks: libopenconnect5 (<< ${source:Version})
Architecture: any
Multi-Arch: same
Section: libs
diff -Nru openconnect-9.12/debian/libopenconnect5.install
openconnect-9.12/debian/libopenconnect5.install
--- openconnect-9.12/debian/libopenconnect5.install 2023-06-13
19:36:12.000000000 -0300
+++ openconnect-9.12/debian/libopenconnect5.install 1969-12-31
21:00:00.000000000 -0300
@@ -1 +0,0 @@
-usr/lib/*/libopenconnect.so.*
diff -Nru openconnect-9.12/debian/libopenconnect5.shlibs
openconnect-9.12/debian/libopenconnect5.shlibs
--- openconnect-9.12/debian/libopenconnect5.shlibs 2023-06-13
19:36:12.000000000 -0300
+++ openconnect-9.12/debian/libopenconnect5.shlibs 1969-12-31
21:00:00.000000000 -0300
@@ -1 +0,0 @@
-libopenconnect 5 libopenconnect5 (>= 8.01)
diff -Nru openconnect-9.12/debian/libopenconnect5.symbols
openconnect-9.12/debian/libopenconnect5.symbols
--- openconnect-9.12/debian/libopenconnect5.symbols 2023-06-13
19:39:56.000000000 -0300
+++ openconnect-9.12/debian/libopenconnect5.symbols 1969-12-31
21:00:00.000000000 -0300
@@ -1,113 +0,0 @@
-libopenconnect.so.5 libopenconnect5 #MINVER#
-* Build-Depends-Package: libopenconnect-dev
- OPENCONNECT_5.0@OPENCONNECT_5.0 7.00
- OPENCONNECT_5_1@OPENCONNECT_5_1 7.05
- OPENCONNECT_5_2@OPENCONNECT_5_2 7.05
- OPENCONNECT_5_3@OPENCONNECT_5_3 7.07
- OPENCONNECT_5_4@OPENCONNECT_5_4 7.08
- OPENCONNECT_5_5@OPENCONNECT_5_5 8.01
- OPENCONNECT_5_6@OPENCONNECT_5_6 8.06
- OPENCONNECT_5_7@OPENCONNECT_5_7 8.20
- OPENCONNECT_5_8@OPENCONNECT_5_8 9.00
- OPENCONNECT_5_9@OPENCONNECT_5_9 9.12
- OPENCONNECT_PRIVATE@OPENCONNECT_PRIVATE 6.00
- openconnect_check_peer_cert_hash@OPENCONNECT_5.0 7.00
- openconnect_clear_cookie@OPENCONNECT_5.0 7.00
- openconnect_disable_dtls@OPENCONNECT_5_7 8.20
- openconnect_disable_ipv6@OPENCONNECT_5_3 7.07
- openconnect_fopen_utf8@OPENCONNECT_PRIVATE 7.00
- openconnect_free_cert_info@OPENCONNECT_5.0 7.00
- openconnect_free_peer_cert_chain@OPENCONNECT_5_3 7.07
- openconnect_free_supported_protocols@OPENCONNECT_5_5 8.01
- openconnect_get_auth_expiration@OPENCONNECT_5_7 8.20
- openconnect_get_connect_url@OPENCONNECT_5_7 8.20
- openconnect_get_cookie@OPENCONNECT_5.0 7.00
- openconnect_get_cstp_cipher@OPENCONNECT_5.0 7.00
- openconnect_get_cstp_compression@OPENCONNECT_5_3 7.07
- openconnect_get_dnsname@OPENCONNECT_5_3 7.07
- openconnect_get_dtls_cipher@OPENCONNECT_5.0 7.00
- openconnect_get_dtls_compression@OPENCONNECT_5_3 7.07
- openconnect_get_hostname@OPENCONNECT_5.0 7.00
- openconnect_get_idle_timeout@OPENCONNECT_5_5 8.01
- openconnect_get_ifname@OPENCONNECT_5.0 7.00
- openconnect_get_ip_info@OPENCONNECT_5.0 7.00
- openconnect_get_peer_cert_DER@OPENCONNECT_5.0 7.00
- openconnect_get_peer_cert_chain@OPENCONNECT_5_3 7.07
- openconnect_get_peer_cert_details@OPENCONNECT_5.0 7.00
- openconnect_get_peer_cert_hash@OPENCONNECT_5.0 7.00
- openconnect_get_port@OPENCONNECT_5.0 7.00
- openconnect_get_protocol@OPENCONNECT_5_5 8.01
- openconnect_get_supported_protocols@OPENCONNECT_5_5 8.01
- openconnect_get_tls_library_version@OPENCONNECT_PRIVATE 8.06
- openconnect_get_urlpath@OPENCONNECT_5.0 7.00
- openconnect_get_version@OPENCONNECT_5.0 7.00
- openconnect_has_oath_support@OPENCONNECT_5.0 7.00
- openconnect_has_pkcs11_support@OPENCONNECT_5.0 7.00
- openconnect_has_stoken_support@OPENCONNECT_5.0 7.00
- openconnect_has_system_key_support@OPENCONNECT_5.0 7.00
- openconnect_has_tss2_blob_support@OPENCONNECT_5_5 8.01
- openconnect_has_tss_blob_support@OPENCONNECT_5.0 7.00
- openconnect_has_yubioath_support@OPENCONNECT_5.0 7.00
- openconnect_init_ssl@OPENCONNECT_5.0 7.00
- openconnect_mainloop@OPENCONNECT_5.0 7.00
- openconnect_make_cstp_connection@OPENCONNECT_5.0 7.00
- openconnect_obtain_cookie@OPENCONNECT_5.0 7.00
- openconnect_open_utf8@OPENCONNECT_PRIVATE 7.00
- openconnect_override_getaddrinfo@OPENCONNECT_5_3 7.07
- openconnect_parse_url@OPENCONNECT_5.0 7.00
- openconnect_passphrase_from_fsid@OPENCONNECT_5.0 7.00
- openconnect_read_file@OPENCONNECT_PRIVATE 8.06
- openconnect_reset_ssl@OPENCONNECT_5.0 7.00
- openconnect_set_allow_insecure_crypto@OPENCONNECT_5_7 8.20
- openconnect_set_cafile@OPENCONNECT_5.0 7.00
- openconnect_set_cancel_fd@OPENCONNECT_5.0 7.00
- openconnect_set_cert_expiry_warning@OPENCONNECT_5.0 7.00
- openconnect_set_client_cert@OPENCONNECT_5.0 7.00
- openconnect_set_compression_mode@OPENCONNECT_5_1 7.05
- openconnect_set_cookie@OPENCONNECT_5_7 8.20
- openconnect_set_csd_environ@OPENCONNECT_5.0 7.00
- openconnect_set_dpd@OPENCONNECT_5.0 7.00
- openconnect_set_external_browser_callback@OPENCONNECT_5_8 9.00
- openconnect_set_hostname@OPENCONNECT_5.0 7.00
- openconnect_set_http_auth@OPENCONNECT_5_2 7.05
- openconnect_set_http_proxy@OPENCONNECT_5.0 7.00
- openconnect_set_key_password@OPENCONNECT_5_5 8.01
- openconnect_set_localname@OPENCONNECT_5_3 7.07
- openconnect_set_loglevel@OPENCONNECT_5_1 7.05
- openconnect_set_mca_cert@OPENCONNECT_5_8 9.00
- openconnect_set_mca_key_password@OPENCONNECT_5_8 9.00
- openconnect_set_mobile_info@OPENCONNECT_5.0 7.00
- openconnect_set_option_value@OPENCONNECT_5.0 7.00
- openconnect_set_pass_tos@OPENCONNECT_5_4 7.08
- openconnect_set_pfs@OPENCONNECT_5.0 7.00
- openconnect_set_protect_socket_handler@OPENCONNECT_5.0 7.00
- openconnect_set_protocol@OPENCONNECT_5_2 7.05
- openconnect_set_proxy_auth@OPENCONNECT_5.0 7.00
- openconnect_set_reconnected_handler@OPENCONNECT_5_3 7.07
- openconnect_set_reported_os@OPENCONNECT_5.0 7.00
- openconnect_set_reqmtu@OPENCONNECT_5.0 7.00
- openconnect_set_setup_tun_handler@OPENCONNECT_5.0 7.07
- openconnect_set_sni@OPENCONNECT_5_9 9.12
- openconnect_set_stats_handler@OPENCONNECT_5.0 7.00
- openconnect_set_stoken_mode@OPENCONNECT_5.0 7.00
- openconnect_set_system_trust@OPENCONNECT_5.0 7.00
- openconnect_set_token_callbacks@OPENCONNECT_5.0 7.00
- openconnect_set_token_mode@OPENCONNECT_5.0 7.00
- openconnect_set_trojan_interval@OPENCONNECT_5_6 8.06
- openconnect_set_urlpath@OPENCONNECT_5.0 7.00
- openconnect_set_useragent@OPENCONNECT_5_8 9.00
- openconnect_set_version_string@OPENCONNECT_5_5 8.01
- openconnect_set_webview_callback@OPENCONNECT_5_7 8.20
- openconnect_set_xmlpost@OPENCONNECT_5.0 7.00
- openconnect_set_xmlsha1@OPENCONNECT_5.0 7.00
- openconnect_setup_cmd_pipe@OPENCONNECT_5.0 7.00
- openconnect_setup_csd@OPENCONNECT_5.0 7.00
- openconnect_setup_dtls@OPENCONNECT_5.0 7.00
- openconnect_setup_tun_device@OPENCONNECT_5.0 7.00
- openconnect_setup_tun_fd@OPENCONNECT_5.0 7.00
- openconnect_setup_tun_script@OPENCONNECT_5.0 7.00
- openconnect_sha1@OPENCONNECT_PRIVATE 6.00
- openconnect_version_str@OPENCONNECT_PRIVATE 6.00
- openconnect_vpninfo_free@OPENCONNECT_5.0 7.00
- openconnect_vpninfo_new@OPENCONNECT_5.0 7.00
- openconnect_webview_load_changed@OPENCONNECT_5_7 8.20
diff -Nru openconnect-9.12/debian/libopenconnect5t64.install
openconnect-9.12/debian/libopenconnect5t64.install
--- openconnect-9.12/debian/libopenconnect5t64.install 1969-12-31
21:00:00.000000000 -0300
+++ openconnect-9.12/debian/libopenconnect5t64.install 2023-06-13
19:36:12.000000000 -0300
@@ -0,0 +1 @@
+usr/lib/*/libopenconnect.so.*
diff -Nru openconnect-9.12/debian/libopenconnect5t64.lintian-overrides
openconnect-9.12/debian/libopenconnect5t64.lintian-overrides
--- openconnect-9.12/debian/libopenconnect5t64.lintian-overrides
1969-12-31 21:00:00.000000000 -0300
+++ openconnect-9.12/debian/libopenconnect5t64.lintian-overrides
2024-02-03 16:10:47.000000000 -0300
@@ -0,0 +1 @@
+libopenconnect5t64: package-name-doesnt-match-sonames libopenconnect5
diff -Nru openconnect-9.12/debian/libopenconnect5t64.shlibs
openconnect-9.12/debian/libopenconnect5t64.shlibs
--- openconnect-9.12/debian/libopenconnect5t64.shlibs 1969-12-31
21:00:00.000000000 -0300
+++ openconnect-9.12/debian/libopenconnect5t64.shlibs 2024-02-03
16:10:47.000000000 -0300
@@ -0,0 +1 @@
+libopenconnect 5 libopenconnect5t64 (>= 8.01)
diff -Nru openconnect-9.12/debian/libopenconnect5t64.symbols
openconnect-9.12/debian/libopenconnect5t64.symbols
--- openconnect-9.12/debian/libopenconnect5t64.symbols 1969-12-31
21:00:00.000000000 -0300
+++ openconnect-9.12/debian/libopenconnect5t64.symbols 2024-02-03
16:10:47.000000000 -0300
@@ -0,0 +1,113 @@
+libopenconnect.so.5 libopenconnect5t64 #MINVER#
+* Build-Depends-Package: libopenconnect-dev
+ OPENCONNECT_5.0@OPENCONNECT_5.0 7.00
+ OPENCONNECT_5_1@OPENCONNECT_5_1 7.05
+ OPENCONNECT_5_2@OPENCONNECT_5_2 7.05
+ OPENCONNECT_5_3@OPENCONNECT_5_3 7.07
+ OPENCONNECT_5_4@OPENCONNECT_5_4 7.08
+ OPENCONNECT_5_5@OPENCONNECT_5_5 8.01
+ OPENCONNECT_5_6@OPENCONNECT_5_6 8.06
+ OPENCONNECT_5_7@OPENCONNECT_5_7 8.20
+ OPENCONNECT_5_8@OPENCONNECT_5_8 9.00
+ OPENCONNECT_5_9@OPENCONNECT_5_9 9.12
+ OPENCONNECT_PRIVATE@OPENCONNECT_PRIVATE 6.00
+ openconnect_check_peer_cert_hash@OPENCONNECT_5.0 7.00
+ openconnect_clear_cookie@OPENCONNECT_5.0 7.00
+ openconnect_disable_dtls@OPENCONNECT_5_7 8.20
+ openconnect_disable_ipv6@OPENCONNECT_5_3 7.07
+ openconnect_fopen_utf8@OPENCONNECT_PRIVATE 7.00
+ openconnect_free_cert_info@OPENCONNECT_5.0 7.00
+ openconnect_free_peer_cert_chain@OPENCONNECT_5_3 7.07
+ openconnect_free_supported_protocols@OPENCONNECT_5_5 8.01
+ openconnect_get_auth_expiration@OPENCONNECT_5_7 8.20
+ openconnect_get_connect_url@OPENCONNECT_5_7 8.20
+ openconnect_get_cookie@OPENCONNECT_5.0 7.00
+ openconnect_get_cstp_cipher@OPENCONNECT_5.0 7.00
+ openconnect_get_cstp_compression@OPENCONNECT_5_3 7.07
+ openconnect_get_dnsname@OPENCONNECT_5_3 7.07
+ openconnect_get_dtls_cipher@OPENCONNECT_5.0 7.00
+ openconnect_get_dtls_compression@OPENCONNECT_5_3 7.07
+ openconnect_get_hostname@OPENCONNECT_5.0 7.00
+ openconnect_get_idle_timeout@OPENCONNECT_5_5 8.01
+ openconnect_get_ifname@OPENCONNECT_5.0 7.00
+ openconnect_get_ip_info@OPENCONNECT_5.0 7.00
+ openconnect_get_peer_cert_DER@OPENCONNECT_5.0 7.00
+ openconnect_get_peer_cert_chain@OPENCONNECT_5_3 7.07
+ openconnect_get_peer_cert_details@OPENCONNECT_5.0 7.00
+ openconnect_get_peer_cert_hash@OPENCONNECT_5.0 7.00
+ openconnect_get_port@OPENCONNECT_5.0 7.00
+ openconnect_get_protocol@OPENCONNECT_5_5 8.01
+ openconnect_get_supported_protocols@OPENCONNECT_5_5 8.01
+ openconnect_get_tls_library_version@OPENCONNECT_PRIVATE 8.06
+ openconnect_get_urlpath@OPENCONNECT_5.0 7.00
+ openconnect_get_version@OPENCONNECT_5.0 7.00
+ openconnect_has_oath_support@OPENCONNECT_5.0 7.00
+ openconnect_has_pkcs11_support@OPENCONNECT_5.0 7.00
+ openconnect_has_stoken_support@OPENCONNECT_5.0 7.00
+ openconnect_has_system_key_support@OPENCONNECT_5.0 7.00
+ openconnect_has_tss2_blob_support@OPENCONNECT_5_5 8.01
+ openconnect_has_tss_blob_support@OPENCONNECT_5.0 7.00
+ openconnect_has_yubioath_support@OPENCONNECT_5.0 7.00
+ openconnect_init_ssl@OPENCONNECT_5.0 7.00
+ openconnect_mainloop@OPENCONNECT_5.0 7.00
+ openconnect_make_cstp_connection@OPENCONNECT_5.0 7.00
+ openconnect_obtain_cookie@OPENCONNECT_5.0 7.00
+ openconnect_open_utf8@OPENCONNECT_PRIVATE 7.00
+ openconnect_override_getaddrinfo@OPENCONNECT_5_3 7.07
+ openconnect_parse_url@OPENCONNECT_5.0 7.00
+ openconnect_passphrase_from_fsid@OPENCONNECT_5.0 7.00
+ openconnect_read_file@OPENCONNECT_PRIVATE 8.06
+ openconnect_reset_ssl@OPENCONNECT_5.0 7.00
+ openconnect_set_allow_insecure_crypto@OPENCONNECT_5_7 8.20
+ openconnect_set_cafile@OPENCONNECT_5.0 7.00
+ openconnect_set_cancel_fd@OPENCONNECT_5.0 7.00
+ openconnect_set_cert_expiry_warning@OPENCONNECT_5.0 7.00
+ openconnect_set_client_cert@OPENCONNECT_5.0 7.00
+ openconnect_set_compression_mode@OPENCONNECT_5_1 7.05
+ openconnect_set_cookie@OPENCONNECT_5_7 8.20
+ openconnect_set_csd_environ@OPENCONNECT_5.0 7.00
+ openconnect_set_dpd@OPENCONNECT_5.0 7.00
+ openconnect_set_external_browser_callback@OPENCONNECT_5_8 9.00
+ openconnect_set_hostname@OPENCONNECT_5.0 7.00
+ openconnect_set_http_auth@OPENCONNECT_5_2 7.05
+ openconnect_set_http_proxy@OPENCONNECT_5.0 7.00
+ openconnect_set_key_password@OPENCONNECT_5_5 8.01
+ openconnect_set_localname@OPENCONNECT_5_3 7.07
+ openconnect_set_loglevel@OPENCONNECT_5_1 7.05
+ openconnect_set_mca_cert@OPENCONNECT_5_8 9.00
+ openconnect_set_mca_key_password@OPENCONNECT_5_8 9.00
+ openconnect_set_mobile_info@OPENCONNECT_5.0 7.00
+ openconnect_set_option_value@OPENCONNECT_5.0 7.00
+ openconnect_set_pass_tos@OPENCONNECT_5_4 7.08
+ openconnect_set_pfs@OPENCONNECT_5.0 7.00
+ openconnect_set_protect_socket_handler@OPENCONNECT_5.0 7.00
+ openconnect_set_protocol@OPENCONNECT_5_2 7.05
+ openconnect_set_proxy_auth@OPENCONNECT_5.0 7.00
+ openconnect_set_reconnected_handler@OPENCONNECT_5_3 7.07
+ openconnect_set_reported_os@OPENCONNECT_5.0 7.00
+ openconnect_set_reqmtu@OPENCONNECT_5.0 7.00
+ openconnect_set_setup_tun_handler@OPENCONNECT_5.0 7.07
+ openconnect_set_sni@OPENCONNECT_5_9 9.12
+ openconnect_set_stats_handler@OPENCONNECT_5.0 7.00
+ openconnect_set_stoken_mode@OPENCONNECT_5.0 7.00
+ openconnect_set_system_trust@OPENCONNECT_5.0 7.00
+ openconnect_set_token_callbacks@OPENCONNECT_5.0 7.00
+ openconnect_set_token_mode@OPENCONNECT_5.0 7.00
+ openconnect_set_trojan_interval@OPENCONNECT_5_6 8.06
+ openconnect_set_urlpath@OPENCONNECT_5.0 7.00
+ openconnect_set_useragent@OPENCONNECT_5_8 9.00
+ openconnect_set_version_string@OPENCONNECT_5_5 8.01
+ openconnect_set_webview_callback@OPENCONNECT_5_7 8.20
+ openconnect_set_xmlpost@OPENCONNECT_5.0 7.00
+ openconnect_set_xmlsha1@OPENCONNECT_5.0 7.00
+ openconnect_setup_cmd_pipe@OPENCONNECT_5.0 7.00
+ openconnect_setup_csd@OPENCONNECT_5.0 7.00
+ openconnect_setup_dtls@OPENCONNECT_5.0 7.00
+ openconnect_setup_tun_device@OPENCONNECT_5.0 7.00
+ openconnect_setup_tun_fd@OPENCONNECT_5.0 7.00
+ openconnect_setup_tun_script@OPENCONNECT_5.0 7.00
+ openconnect_sha1@OPENCONNECT_PRIVATE 6.00
+ openconnect_version_str@OPENCONNECT_PRIVATE 6.00
+ openconnect_vpninfo_free@OPENCONNECT_5.0 7.00
+ openconnect_vpninfo_new@OPENCONNECT_5.0 7.00
+ openconnect_webview_load_changed@OPENCONNECT_5_7 8.20
