Bug#984487: nmu: libzstd1 rdeps relying on 1.3.8
Control: tags -1 + moreinfo
On 2021-03-04 07:06:05, Stephen Kitt wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian.org@packages.debian.org
> Usertags: binnmu
>
> Dear release team,
>
> libzstd1 used to provide an over-enthusiastic symbols file, which has
> resulted in dependencies which are too relaxed. The library API isn’t
> determined by its exported symbols, unfortunately, but by one of its
> headers. See https://bugs.debian.org/969597 and
> https://github.com/facebook/zstd/pull/2501 for details.
>
> As a result, a (small) number of packages have picked up a dependency
> on “libzstd1 (>= 1.3.8)” when it should be “(>= 1.4.0)” — they were
> built with one of the 1.4 packages, but the symbols file declared some
> of the 1.4 functions as available in 1.3.8 (which they were,
> technically, but with a different API in some cases).
Please explain. If they were available with a different API prior to
1.4, that sounds like an ABI break to me. In that case, the binNMUs
would just hide the problem.
Cheers
>
> To fix this, would it be possible to binNMU the following? The version
> of libzstd1 no longer provides a symbols file and relies on shlibs to
> provide the correct dependency.
>
> nmu badger_2.2007.2-2 . ANY . unstable . -m "update libzstd1 dependency"
> nmu burrow_1.2.1-2 . ANY . unstable . -m "update libzstd1 dependency"
> nmu cadvisor_0.38.7+ds1-2 . ANY . unstable . -m "update libzstd1 dependency"
> nmu garagemq_0.0~git20200204.15e6a9d+ds-3 . ANY . unstable . -m "update libzstd1 dependency"
> nmu lammps_20210122~gita77bb+ds1-2 . ANY . unstable . -m "update libzstd1 dependency"
> nmu libarchive_3.4.3-2 . ANY . unstable . -m "update libzstd1 dependency"
> nmu libdrpm_0.5.0-2 . ANY . unstable . -m "update libzstd1 dependency"
> nmu mmllib_12-113e3+ds-3 . ANY . unstable . -m "update libzstd1 dependency"
> nmu mysql-8.0_8.0.23-3 . ANY . unstable . -m "update libzstd1 dependency"
> nmu rsymphony_3.2.3-4 . ANY . unstable . -m "update libzstd1 dependency"
>
> Regards,
>
> Stephen
>
>
> -- System Information:
> Debian Release: 10.8
> APT prefers stable-updates
> APT policy: (500, 'stable-updates'), (500, 'stable-debug'), (500, 'stable'), (100, 'unstable-debug'), (100, 'testing-debug'), (100, 'unstable'), (100, 'testing'), (1, 'experimental-debug'), (1, 'experimental')
> Architecture: amd64 (x86_64)
> Foreign Architectures: i386, arm64
>
> Kernel: Linux 4.19.0-12-amd64 (SMP w/8 CPU cores)
> Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
> Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled
--
Sebastian Ramacher
Reply to: