#1147298 falcosecurity-libs: ABI break without soname change

#1147298#5
Date:
2026-09-10 13:40:45 UTC
From:
To:
https://ci.debian.net/packages/w/wireshark/testing/amd64/75320980/

...
 92s autopkgtest [01:30:51]: test tshark: [-----------------------
 93s corrupted size vs. prev_size
 93s Aborted
 93s autopkgtest [01:30:52]: test tshark: -----------------------]
...
156s autopkgtest [01:31:55]: test gui: [-----------------------
157s Floating point exception
158s autopkgtest [01:31:57]: test gui: -----------------------]
...
158s autopkgtest [01:31:57]: @@@@@@@@@@@@@@@@@@@@ summary
158s tshark               FAIL non-zero exit status 134
158s gui                  FAIL non-zero exit status 136


The root cause is that 0.x -> 0.y version changes my contain
ABI-breaking changes, requiring a library transition
(see also #1142865).

The incorrect soversion of the libraries will be fixed upstream in 0.26,
but with my patch the proper soversion could also already be set in 0.23.

#1147298#18
Date:
2026-09-24 13:31:18 UTC
From:
To:
Dear maintainer,

I've prepared an NMU for falcosecurity-libs (versioned as 0.23.2-4.1)
and uploaded it to DELAYED/7. Please feel free to tell me if I should
cancel it.

cu
Adrian

#1147298#25
Date:
2026-10-05 21:31:32 UTC
From:
To:
The Debian NEW review of falcosecurity-libs 0.23.2-6~exp1 has been completed.

Decision: ACCEPTED
Reviewer: Andrew McMillan

Review comment:

Hi,

A couple of issues...

1. The debian/copyright header line is missing a trailling '/' which causes several things to fail to parse it (it works as a URL, but the exact URL with trailing '/' is what is written into the specification).


2. Seven of the eleven quilt patches lack Forwarded:/Origin: headers.


Thanks!

Full review details: https://dfsg-new-queue.debian.org/reviews/falcosecurity-libs

#1147298#30
Date:
2026-10-05 22:00:14 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
falcosecurity-libs, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1147298@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Pierre-Elliott Bécue <peb@debian.org> (supplier of updated falcosecurity-libs package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Mon, 05 Oct 2026 10:39:17 +0200
Source: falcosecurity-libs
Binary: falcosecurity-scap-dkms libfalcosecurity0-dev libfalcosecurity0.23 libfalcosecurity0.23-dbgsym
Architecture: source all amd64
Version: 0.23.2-6~exp1
Distribution: experimental
Urgency: medium
Maintainer: Debian Security Tools <team+pkg-security@tracker.debian.org>
Changed-By: Pierre-Elliott Bécue <peb@debian.org>
Description:
 falcosecurity-scap-dkms - Kernel driver for Falco and Sysdig
 libfalcosecurity0-dev - Core libraries for Falco and Sysdig - header files
 libfalcosecurity0.23 - Core libraries for Falco and Sysdig
Closes: 1147298
Changes:
 falcosecurity-libs (0.23.2-6~exp1) experimental; urgency=medium
 .
   * Team upload
 .
   [ Adrian Bunk ]
   * Correct the soversion. (Closes: #1147298)
 .
   [ Pierre-Elliott Bécue ]
   * Import two patches from upstream for s390x builds
   * d/control:
     - libfalcosecurity0.23 Breaks/Replaces libfalcosecurity0t64
       (both ship lib*.so.0.23.2) instead of the pre-t64 libfalcosecurity0
     - Bump Standards-Version to 4.7.4
     - Drop the build and -dev dependencies no longer used upstream
       (curl, OpenSSL, gRPC, protobuf, abseil, c-ares, jq, b64) and the
       duplicate libjsoncpp-dev
     - Give libfalcosecurity0-dev its own synopsis and drop its redundant
       Section field
   * d/patches:
     - Drop libsinsp-added-missing-libraries.patch: libsinsp no longer
       uses protobuf, gRPC++ nor abseil, and the extra -l flags leaked
       into libsinsp.pc
     - Stop linking unit-test-libsinsp against protobuf and gRPC++
   * d/rules: drop the WITH_CHISEL and CHISEL_TOOL_LIBRARY_NAME flags,
     unused upstream
   * d/libfalcosecurity0.23.shlibs: add the missing shlibs
   * d/copyright: refresh; driver/ is GPL-2 or MIT, document the
     kernel-derived files and Istio's base64.h, drop obsolete stanzas
   * d/watch: update to v5
Checksums-Sha1:
 83ea3b6f179518aaa4504bc42d16051a60a9fed7 2601 falcosecurity-libs_0.23.2-6~exp1.dsc
 7b4b7ef1ff41e312167f8eac2b6e1a5aad091ddb 11636 falcosecurity-libs_0.23.2-6~exp1.debian.tar.xz
 bedf5f8e2fffcd13c33a7696f07ff88a2c90ecb9 13450 falcosecurity-libs_0.23.2-6~exp1_amd64.buildinfo
 1ff61013ca69167041b3483ccb80f48f7d0518e3 154908 falcosecurity-scap-dkms_0.23.2-6~exp1_all.deb
 e856dd235e354aea92ff94a1fad496408e8ca08e 229600 libfalcosecurity0-dev_0.23.2-6~exp1_amd64.deb
 191ef0ec2a69cd67b7d88fcb58249954f957100e 17417760 libfalcosecurity0.23-dbgsym_0.23.2-6~exp1_amd64.deb
 152d7b5b79c8c8300987a3f704ec1c8b92febed4 889188 libfalcosecurity0.23_0.23.2-6~exp1_amd64.deb
Checksums-Sha256:
 a192d7e8be086f4d13bad667d2b72238321875ba2072ce5d7d03cd1f2cd8eb99 2601 falcosecurity-libs_0.23.2-6~exp1.dsc
 d5141938761c2b478036ab59d1e3252b82a8acfb7dc4eef835c504bdd122b8f9 11636 falcosecurity-libs_0.23.2-6~exp1.debian.tar.xz
 0a493c010a488e802dd47098c4da17a04b0748ccd1a96bbbbcca0f303b1e1ded 13450 falcosecurity-libs_0.23.2-6~exp1_amd64.buildinfo
 701e7fc0e68a5047f3ea166163ecec4eb99468f5b2e4329ab41a0e378ca1f679 154908 falcosecurity-scap-dkms_0.23.2-6~exp1_all.deb
 1945375c27ee85b1c0770ec9af9b46e862f186d8d2a338e36225ed8fb0a10b09 229600 libfalcosecurity0-dev_0.23.2-6~exp1_amd64.deb
 b2b0194193aa561c22bd10bf4dd4100d711617a29d03c08a16499fb1e1164dc1 17417760 libfalcosecurity0.23-dbgsym_0.23.2-6~exp1_amd64.deb
 bdaf2645bf0d82c0299b8e33246210e31d229fda9bacf1d79f5eba459c6805de 889188 libfalcosecurity0.23_0.23.2-6~exp1_amd64.deb
Files:
 d510c56844cbb9c18d28588331d2aa15 2601 libdevel optional falcosecurity-libs_0.23.2-6~exp1.dsc
 77961894a25e9ca37f2121d742e41344 11636 libdevel optional falcosecurity-libs_0.23.2-6~exp1.debian.tar.xz
 2aef9405c770b99d2d161c11e40b1fd8 13450 libdevel optional falcosecurity-libs_0.23.2-6~exp1_amd64.buildinfo
 44b09f6a25e4c45b4063326c7c675bc6 154908 kernel optional falcosecurity-scap-dkms_0.23.2-6~exp1_all.deb
 9e9573d74bdc6f56e6667fecf3be081d 229600 libdevel optional libfalcosecurity0-dev_0.23.2-6~exp1_amd64.deb
 1d0c3c3c5eba791b298dead2ac9da8a1 17417760 debug optional libfalcosecurity0.23-dbgsym_0.23.2-6~exp1_amd64.deb
 1229330cb0afa9796fd14eefa6a0bb06 889188 libs optional libfalcosecurity0.23_0.23.2-6~exp1_amd64.deb
-----BEGIN PGP SIGNATURE-----
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=R5PP
-----END PGP SIGNATURE-----

#1147298#35
Date:
2026-10-06 12:29:08 UTC
From:
To:
Hi,

Not sure if you all been following, but there was some activity on
falcosecurity-libs about this ABI change (#1147298) and there is now a
transition bug in place (#1150154). I'm CCing the bugs so people are
aware of this mailing list discussion.

Cheers,
Charles