Debian 9: libxen (libxenlight) has wrong SONAME for debian packages

[cshoredaniel]

Qubes OS version:

VERSION="4.0 (R4.0)"

Affected component(s):

Debian 9 templates and vm's with non-qubes packages which depend on libxenlight (from libxen)

---

Steps to reproduce the behavior:

1. Install a package which depends on libxenlight (e.g. guestfish) and which doesn't exist in the qubes repository, but only in debian.
2. Run the program (e.g. guestfish -h)

Expected behavior:

1. Program should run (in this case displaying help message).

Actual behavior:

Get an error message such as:

guestfish: error while loading shared libraries: libxenlight-4.8.so: cannot open shared object file: No such file or directory

General notes:

1. In debian packages for the same library with different SOVERSION are supported by appending -X.Y to the library name: e.g. libxenlight-4.8.so.4.8.1 etc.
2. What's actually the case for Qubes repo: dpkg -S libxen*|grep light

libxen-dev: /usr/lib/x86_64-linux-gnu/libxenlight.a
libxen-4.8: /usr/lib/x86_64-linux-gnu/libxenlight.so.4.8.1.0
libxen-4.8: /usr/lib/x86_64-linux-gnu/libxenlight.so.4.8.1
libxen-dev: /usr/lib/x86_64-linux-gnu/libxenlight.so

---

Related issues:

Fedora 28 SOVERSION is newer than Qubes repos for Fedora 28 for libxenlight (bug to be created), so qemu can't be installed in Fedora 28 template