#990183 libopenscap8: libopenscap.so.8 is missing from libopenscap8 and is expected by scap-workbench

Package:
src:openscap
Source:
openscap
Submitter:
Jonas Andradas
Date:
2022-01-12 14:12:04 UTC
Severity:
serious
#990183#5
Date:
2021-06-22 08:40:22 UTC
From:
To:
Dear Maintainer,

scap-workbench (version 1.1.5-1) depends on libopenscap8. However, when scap-
workbench is run, it fails as it cannot load libopenscap.so.8, as shown below:

scap-workbench: error while loading shared libraries: libopenscap.so.8: cannot
open shared object file: No such file or directory

Running `apt-files search libopenscap.so.8`, it appears listed as part of the
package libopenscap8, as can be seen below:

$ apt-file search libopenscap.so.8
libopenscap8: /usr/lib/x86_64-linux-gnu/libopenscap.so.8
libopenscap8: /usr/lib/x86_64-linux-gnu/libopenscap.so.8.14.0

However, the file is not found on the system, and `dpkg -L libopenscap8`
differs from the output of `apt-file search`, and does not show the file as
being installed or part of the package:

$ dpkg -L libopenscap8 | grep libopenscap
/usr/lib/x86_64-linux-gnu/libopenscap.so.25.3.0
/usr/lib/x86_64-linux-gnu/libopenscap_sce.so.25.3.0
/usr/share/doc/libopenscap8
/usr/share/doc/libopenscap8/changelog.Debian.gz
/usr/share/doc/libopenscap8/copyright
/usr/share/lintian/overrides/libopenscap8
/usr/lib/x86_64-linux-gnu/libopenscap.so.25
/usr/lib/x86_64-linux-gnu/libopenscap_sce.so.25


Either the libopenscap.so.8 file is missing from the package, or a postinstall
script that should create the necessary links (e.g. if the included
libopenscap.so.25.3.0 should have a soft link to it), or the issue lies within
the scap-workbench package, which expects a library that has a different name.
#990183#10
Date:
2021-06-22 09:23:51 UTC
From:
To:
Control: severity -1 serious

1.3.4-1 would have needed to rename the package to libopenscap25 and
start a library transition. The library package also contains a bunch of
binaries and other files that do not look like the should be part of a
library package. In any case, raising the severity to serious is the
current packaging of the library is broken.

Cheers
#990183#17
Date:
2021-06-30 08:40:42 UTC
From:
To:
Hi,

 Can we have a chance to put splitted packages (openscap-scanner as tools
 binary as other distros do and openscap-common for /usr/share files) for
 bullseye release? If so, I'll try to do so.
#990183#22
Date:
2021-07-01 22:43:02 UTC
From:
To:
Hi

Yes, but note that this needs to happen soon as it has to pass NEW.

Cheers
#990183#27
Date:
2021-07-02 07:55:34 UTC
From:
To:
 Thanks, I'll try it.
#990183#32
Date:
2021-07-03 12:36:53 UTC
From:
To:
 Mostly done, still have an error with autopkgtest for python3-openscap
https://salsa.debian.org/henrich/openscap/-/pipelines/265919
 (It doesn't have git repo, so I pushed it under my user at salsa).

 It includes fixes a *lot* (sorry at this freeze time, but...), if it should
 be shrunk, we can rebase it.

diff -Nru openscap-1.3.4/debian/changelog openscap-1.3.4/debian/changelog
--- openscap-1.3.4/debian/changelog	2021-02-02 00:22:30.000000000 +0900
+++ openscap-1.3.4/debian/changelog	2021-06-30 16:33:53.000000000 +0900
@@ -1,3 +1,37 @@
+openscap (1.3.4-1.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+
+  * Package structure changes
+    - Apply soname change (libopenscap8 -> 25)
+    - Split libopenscap25 to openscap-scanner, openscap-utils and
+      openscap-common
+    - Drop -dbg package and unnecessary lintian-overrides
+  * debian/control
+    - Specify https for upstream URL
+    - Use debhelper-compat (= 13) to not forget to install necessary files
+      with dh_missing
+    - Add missing dependencies: libacl1-dev, libblkid-dev, libglib2.0-dev,
+      libyaml-dev, librpm-dev, libpopt-dev, libprocps-dev, libopendbx1-dev,
+      libxmlsec1-dev, doxygen, graphviz, asciidoc,
+  * Drop unnecessary debian/compat
+  * debian/rules
+    - Enable documantation build
+    - Enable hardening
+  * Add openscap-common.docs to install HTML docs
+  * debian/openscap-scanner.install
+    - Install bash-completion
+  * openscap-utils.install
+    - Install autotailor and scap-as-rpm
+  * Add debian/openscap-{scanner,utils}.manpages
+
+  * Trim trailing whitespace.
+  * Update watch file format version to 4.
+  * Set upstream metadata fields: Bug-Database, Bug-Submit.
+  * Drop unnecessary dependency on dh-autoreconf.
+
+ -- Hideki Yamane <henrich@debian.org>  Wed, 30 Jun 2021 16:33:53 +0900
+
 openscap (1.3.4-1) unstable; urgency=medium

   * New upstream version 1.3.4
diff -Nru openscap-1.3.4/debian/compat openscap-1.3.4/debian/compat
--- openscap-1.3.4/debian/compat	2021-02-02 00:22:30.000000000 +0900
+++ openscap-1.3.4/debian/compat	1970-01-01 09:00:00.000000000 +0900
@@ -1 +0,0 @@
-11
diff -Nru openscap-1.3.4/debian/control openscap-1.3.4/debian/control
--- openscap-1.3.4/debian/control	2021-02-02 00:22:30.000000000 +0900
+++ openscap-1.3.4/debian/control	2021-06-30 16:33:53.000000000 +0900
@@ -2,7 +2,7 @@
 Priority: optional
 Maintainer: Pierre Chifflier <pollux@debian.org>
 Uploaders: Philippe Thierry <philou@debian.org>
-Build-Depends: debhelper (>= 13),
+Build-Depends: debhelper-compat (= 13),
     cmake,
     libpcre3-dev,
     libxml2-dev,
@@ -18,19 +18,30 @@
     libattr1-dev,
     libldap2-dev,
     libbz2-dev,
+    libacl1-dev,
+    libblkid-dev,
+    libglib2.0-dev,
+    libyaml-dev,
+    librpm-dev,
+    libpopt-dev,
+    libprocps-dev,
+    libopendbx1-dev,
+    libxmlsec1-dev,
+    doxygen, graphviz,
+    asciidoc,
     pkg-config,
     dh-python,
     chrpath,
     libdbus-1-dev
+Section: admin
 X-Python3-Version: >= 3.9
 Standards-Version: 4.5.1
-Section: libs
-Homepage: http://www.open-scap.org/
+Homepage: https://www.open-scap.org/

 Package: libopenscap-dev
 Section: libdevel
 Architecture: linux-any
-Depends: libopenscap8 (= ${binary:Version}), ${misc:Depends}, ${python3:Depends}, libjs-jquery
+Depends: libopenscap25 (= ${binary:Version}), ${misc:Depends}, ${python3:Depends}, libjs-jquery
 Description: Set of libraries enabling integration of the SCAP line of standards
  OpenSCAP is a set of open source libraries providing an easier path
  for integration of the SCAP line of standards. SCAP is a line of
@@ -48,13 +59,13 @@
  .
  This package contains the development files for OpenSCAP.
#990183#37
Date:
2021-07-03 19:04:13 UTC
From:
To:
 Updated. Passed all salsa-ci test as below, and eliminate most of
 lintian warning/info.
https://salsa.debian.org/henrich/openscap/-/pipelines/265972


diff -Nru openscap-1.3.4/debian/changelog openscap-1.3.4/debian/changelog
--- openscap-1.3.4/debian/changelog	2021-02-02 00:22:30.000000000 +0900
+++ openscap-1.3.4/debian/changelog	2021-06-30 16:33:53.000000000 +0900
@@ -1,3 +1,37 @@
+openscap (1.3.4-1.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+
+  * Package structure changes
+    - Apply soname change (libopenscap8 -> 25)
+    - Split libopenscap25 to openscap-scanner, openscap-utils and
+      openscap-common
+    - Drop -dbg package and unnecessary lintian-overrides
+  * debian/control
+    - Specify https for upstream URL
+    - Use debhelper-compat (= 13) to not forget to install necessary files
+      with dh_missing
+    - Add missing dependencies: libacl1-dev, libblkid-dev, libglib2.0-dev,
+      libyaml-dev, librpm-dev, libpopt-dev, libprocps-dev, libopendbx1-dev,
+      libxmlsec1-dev, doxygen, graphviz, asciidoc,
+  * Drop unnecessary debian/compat
+  * debian/rules
+    - Enable documentation build
+    - Enable hardening
+  * Add openscap-common.docs to install HTML docs
+  * debian/openscap-scanner.install
+    - Install bash-completion
+  * openscap-utils.install
+    - Install autotailor and scap-as-rpm
+  * Add debian/openscap-{scanner,utils}.manpages
+
+  * Trim trailing whitespace.
+  * Update watch file format version to 4.
+  * Set upstream metadata fields: Bug-Database, Bug-Submit.
+  * Drop unnecessary dependency on dh-autoreconf.
+
+ -- Hideki Yamane <henrich@debian.org>  Wed, 30 Jun 2021 16:33:53 +0900
+
 openscap (1.3.4-1) unstable; urgency=medium

   * New upstream version 1.3.4
diff -Nru openscap-1.3.4/debian/compat openscap-1.3.4/debian/compat
--- openscap-1.3.4/debian/compat	2021-02-02 00:22:30.000000000 +0900
+++ openscap-1.3.4/debian/compat	1970-01-01 09:00:00.000000000 +0900
@@ -1 +0,0 @@
-11
diff -Nru openscap-1.3.4/debian/control openscap-1.3.4/debian/control
--- openscap-1.3.4/debian/control	2021-02-02 00:22:30.000000000 +0900
+++ openscap-1.3.4/debian/control	2021-06-30 16:33:53.000000000 +0900
@@ -2,7 +2,7 @@
 Priority: optional
 Maintainer: Pierre Chifflier <pollux@debian.org>
 Uploaders: Philippe Thierry <philou@debian.org>
-Build-Depends: debhelper (>= 13),
+Build-Depends: debhelper-compat (= 13),
     cmake,
     libpcre3-dev,
     libxml2-dev,
@@ -18,19 +18,30 @@
     libattr1-dev,
     libldap2-dev,
     libbz2-dev,
+    libacl1-dev,
+    libblkid-dev,
+    libglib2.0-dev,
+    libyaml-dev,
+    librpm-dev,
+    libpopt-dev,
+    libprocps-dev,
+    libopendbx1-dev,
+    libxmlsec1-dev,
+    doxygen, graphviz,
+    asciidoc,
     pkg-config,
     dh-python,
     chrpath,
     libdbus-1-dev
+Section: admin
 X-Python3-Version: >= 3.9
 Standards-Version: 4.5.1
-Section: libs
-Homepage: http://www.open-scap.org/
+Homepage: https://www.open-scap.org/

 Package: libopenscap-dev
 Section: libdevel
 Architecture: linux-any
-Depends: libopenscap8 (= ${binary:Version}), ${misc:Depends}, ${python3:Depends}, libjs-jquery
+Depends: libopenscap25 (= ${binary:Version}), ${misc:Depends}, ${python3:Depends}, libjs-jquery
 Description: Set of libraries enabling integration of the SCAP line of standards
  OpenSCAP is a set of open source libraries providing an easier path
  for integration of the SCAP line of standards. SCAP is a line of
@@ -48,13 +59,13 @@
  .
  This package contains the development files for OpenSCAP.
#990183#42
Date:
2021-07-04 19:10:30 UTC
From:
To:
Hi

Doing a transition now and adding new binary packages is already
stretching the rules a lot. So please keep all the other changes to a
minimum. Especially changing debhelper compat level is undesirable
during the freeze (see
https://release.debian.org/bullseye/freeze_policy.html)

More comments below.

This will require a versioned Breaks + Replaces on the old libopenscap8
package.

Same as above.

Cheers
#990183#47
Date:
2021-08-06 08:16:33 UTC
From:
To:
Hi,

 I've restructured openscap pacakge to fix Bug#990183 and make it
 better, upload to https://salsa.debian.org/henrich/openscap

 I'll upload it to experimental with delay-10, if you want to cancel
 it, don't hestitate.
#990183#52
Date:
2021-12-02 19:00:35 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
openscap, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 990183@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Hideki Yamane <henrich@debian.org> (supplier of updated openscap package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 06 Aug 2021 16:02:20 +0900
Source: openscap
Binary: libopenscap-dev libopenscap-perl libopenscap-perl-dbgsym libopenscap25 libopenscap25-dbgsym openscap-common openscap-scanner openscap-scanner-dbgsym openscap-utils python3-openscap python3-openscap-dbgsym
Architecture: source amd64 all
Version: 1.3.5-0.1
Distribution: experimental
Urgency: medium
Maintainer: Pierre Chifflier <pollux@debian.org>
Changed-By: Hideki Yamane <henrich@debian.org>
Description:
 libopenscap-dev - Set of libraries enabling integration of the SCAP line of standar
 libopenscap-perl - Set of libraries enabling integration of the SCAP line of standar
 libopenscap25 - Set of libraries enabling integration of the SCAP line of standar
 openscap-common - OpenSCAP schema files
 openscap-scanner - OpenScap Scanner Tool (oscap)
 openscap-utils - OpenSCAP utilities
 python3-openscap - Set of libraries enabling integration of the SCAP line of standar
Closes: 990183
Changes:
 openscap (1.3.5-0.1) experimental; urgency=medium
 .
   * Non-maintainer upload.
   * New upstream version 1.3.5
 .
   * Package structure changes
     - Apply soname change (libopenscap8 -> 25) (Closes: #990183)
     - Split libopenscap25 to openscap-scanner, openscap-utils and
       openscap-common
     - Drop -dbg package and unnecessary lintian-overrides
     - Drop unnecessary dependency on dh-autoreconf.
   * debian/control
     - Specify https for upstream URL
     - Use debhelper-compat (= 13) to not forget to install necessary files
       with dh_missing
     - Add missing dependencies: libacl1-dev, libblkid-dev, libglib2.0-dev,
       libyaml-dev, librpm-dev, libpopt-dev, libprocps-dev, libopendbx1-dev,
       libxmlsec1-dev, doxygen, graphviz, asciidoc,
   * Drop unnecessary debian/compat
   * debian/rules
     - Enable documentation build
     - Enable hardening
   * Add openscap-common.docs to install HTML docs
   * debian/openscap-scanner.install
     - Install bash-completion
   * openscap-utils.install
     - Install autotailor and scap-as-rpm
   * Add debian/openscap-{scanner,utils}.manpages
   * debian/watch
     - Update watch file format version to 4.
   * debian/patches
     - Drop unused patches
     - Refresh patches
   * Trim trailing whitespace.
   * Set upstream metadata fields: Bug-Database, Bug-Submit.
Checksums-Sha1:
 fe62b856d25ea09c7a158bb510763e73a55e5c29 2679 openscap_1.3.5-0.1.dsc
 a2d22f22cd1332fc1f6eed9593262e595444f9f3 13990718 openscap_1.3.5.orig.tar.gz
 e237bd9a60c6e2a96a768568f00ed176ef6fac8f 70556 openscap_1.3.5-0.1.debian.tar.xz
 3c412cbbdf17e28aa916e6c64e76e4b4750a00d5 165788 libopenscap-dev_1.3.5-0.1_amd64.deb
 96fed05a34ccf419c7fb0f7b5c466a77d8b1ab1e 1877124 libopenscap-perl-dbgsym_1.3.5-0.1_amd64.deb
 8855d59dd98bd7cb10de8c4ea27d81f9d79cc63a 313272 libopenscap-perl_1.3.5-0.1_amd64.deb
 dc51ba3abddaabd82f696610db454e1edc998380 1588528 libopenscap25-dbgsym_1.3.5-0.1_amd64.deb
 35c1336216bbf0f1828836c7cbfbdb64b540eacc 452536 libopenscap25_1.3.5-0.1_amd64.deb
 14c72818103304cdf9c83d638e490f81cbf9064e 2734800 openscap-common_1.3.5-0.1_all.deb
 031205d2a3feca7a01b763c90d56c3218d34f324 80736 openscap-scanner-dbgsym_1.3.5-0.1_amd64.deb
 ebb37cdac8a1a91c704c064a3979c3f800954db4 111660 openscap-scanner_1.3.5-0.1_amd64.deb
 aa28ea196b535c33fdff96a381a5e7ddad924d02 24280 openscap-utils_1.3.5-0.1_amd64.deb
 5adee45d3e6eb86ab2a890305cf425f58b0568ab 14619 openscap_1.3.5-0.1_amd64.buildinfo
 ea14aed8fea0a7cec1e4c9c672c7bc79bc80c456 1022528 python3-openscap-dbgsym_1.3.5-0.1_amd64.deb
 869c3884c6382101b769aa66d74f2450e830d1c4 225520 python3-openscap_1.3.5-0.1_amd64.deb
Checksums-Sha256:
 639c12bacc5a19c0236f9210bc82438982f85fe42f0485304ce2a6c73abb3952 2679 openscap_1.3.5-0.1.dsc
 4702590dae5c346b7c10f808e55bce9c54812099304221c440141abbd0b37dd6 13990718 openscap_1.3.5.orig.tar.gz
 a34edc628cdc4c2ad69faeacf937f484fc8bb5603f3a641833b320a160478315 70556 openscap_1.3.5-0.1.debian.tar.xz
 e2f414ee96fae56587025b566ea394c8b497e2141f1d949996c7a3e5fd68a0b6 165788 libopenscap-dev_1.3.5-0.1_amd64.deb
 d27e57c6ec5571dba8a42f6e09f39d7a38747c69cc833ffe5f889baa62423f49 1877124 libopenscap-perl-dbgsym_1.3.5-0.1_amd64.deb
 8d1791cf73678a3cad235da716dbf0cab030465d9c94b8605911139f8e0cde0d 313272 libopenscap-perl_1.3.5-0.1_amd64.deb
 1af4371fd45a215eea8fbfa53ca2be9b1a27ea42b3a2b11b01d355d0716be4c3 1588528 libopenscap25-dbgsym_1.3.5-0.1_amd64.deb
 a17bf7a409cb48c7f3b232a36cb60ac7649c267bc453958598f8d548dab3ed13 452536 libopenscap25_1.3.5-0.1_amd64.deb
 37ff73fccbc859fa5f7da651d9fbb22b7f2dbf56a8899f8a5c1774c008f5f7a4 2734800 openscap-common_1.3.5-0.1_all.deb
 3b7e7efb68cf95ab37455a692c55ac71040644bf95d2ffef43c1c44b8c7a8063 80736 openscap-scanner-dbgsym_1.3.5-0.1_amd64.deb
 d5570782918c4aeb69d27773053a786e7db41c6713255e189e2b1ac57d1f8c61 111660 openscap-scanner_1.3.5-0.1_amd64.deb
 addcd45e32cc3d801e353a4f81d40097c4899c6c4e189874943ef3bbeaa4d6c4 24280 openscap-utils_1.3.5-0.1_amd64.deb
 d667d6ec4eada69bdb422376a6295b309b7012021dfff43f3900f518c35e7068 14619 openscap_1.3.5-0.1_amd64.buildinfo
 7e41284e3f29654117831fa9511a46a60db517d9ad5852ba74c8260f9cc48750 1022528 python3-openscap-dbgsym_1.3.5-0.1_amd64.deb
 49e100130ce822dcd72ff5a5139e1d02cfa6d4789d2c3a411f2470ae242348db 225520 python3-openscap_1.3.5-0.1_amd64.deb
Files:
 2f7be7141ff0a30285e16043e3222c7d 2679 admin optional openscap_1.3.5-0.1.dsc
 635601cb961d77c54eac917c227d8568 13990718 admin optional openscap_1.3.5.orig.tar.gz
 91798c1d53f6a16a6e547aaf8e07e645 70556 admin optional openscap_1.3.5-0.1.debian.tar.xz
 dc93a854953254712ace5fe395e804d4 165788 libdevel optional libopenscap-dev_1.3.5-0.1_amd64.deb
 b20f566656e1f17484f64bbfa0471bc5 1877124 debug optional libopenscap-perl-dbgsym_1.3.5-0.1_amd64.deb
 d024c1b7612eab66b6868e59b92ff2e4 313272 perl optional libopenscap-perl_1.3.5-0.1_amd64.deb
 929cd72ac86a2676e156d69c7735bff3 1588528 debug optional libopenscap25-dbgsym_1.3.5-0.1_amd64.deb
 4fb9b89306f66fac08995b55c08713be 452536 libs optional libopenscap25_1.3.5-0.1_amd64.deb
 adf6bb7c43d81256c26e30b3c669ca07 2734800 admin optional openscap-common_1.3.5-0.1_all.deb
 730abb67519502a08eb5ec3aae1d6e07 80736 debug optional openscap-scanner-dbgsym_1.3.5-0.1_amd64.deb
 afd8ffd834bc55374f7b5b82d3385005 111660 admin optional openscap-scanner_1.3.5-0.1_amd64.deb
 3d525620a4a35985cf26012ac6827736 24280 admin optional openscap-utils_1.3.5-0.1_amd64.deb
 42b0486bf03aa9575750648b286fea6c 14619 admin optional openscap_1.3.5-0.1_amd64.buildinfo
 3028d2173980ff40e393e7c979ba0129 1022528 debug optional python3-openscap-dbgsym_1.3.5-0.1_amd64.deb
 01e7abfe72eb6c3570283869059fdfe3 225520 python optional python3-openscap_1.3.5-0.1_amd64.deb
-----BEGIN PGP SIGNATURE-----
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=x3sO
-----END PGP SIGNATURE-----