[Bug 1674057] Re: [FFe] upgrade libzip to version 1.5.0
** Description changed:
Feature Freeze Justification
This release fixes to two CVE's and most notably has removed its custom AES
crypto implementation with using openssl libraries. It is for the security
reasons I am requesting this FFe this late in the cycle.
Other Changes:
- A bunch of bug fixes
- A number of new features like bzip2 (this optional and could be disabled
for 18.04), improved AES encryption support, some of the new features are other
platforms only
- Breaks API (only 1 symbol was removed though), soname bump, so will require
a mini transition, all the 24 reverse-depends that I count are in universe.
Some are seeded in flavours (see below)
- Build system switched to Cmake in latest release
- Ark will build with libzip support where it didnt before
Testing:
It has a fairly comprehensive test suite, all tests are now passing.
I have run a test rebuild for all the rdepends in ppa:darkxst/libzip.
All built successfully, except for 2 packages, cbmc and plume-creater
- that had unrelated fallout due to gcc7 and other packaging changes.
+ that had unrelated fallout due to gcc7 and other packaging changes
+ (fixed on PPA).
Other Notes:
- - There are a bunch of presumably private symbols leaked into the debian
symbols file. Not ideal, but probably not the only package in the archive like
that.
- - Have forwarded upstream a couple of patches and will follow symbols later
+ - Various fixes (rpath, man page syntax, leaky private symbols and pkg-config
fixes) have been committed upstream and will be released soon in a 1.5.1
release, cherry-picked patches for now
- I will also push for the update into Debian
Build Logs:
-
https://launchpadlibrarian.net/363222435/buildlog_ubuntu-bionic-amd64.libzip_1.5.0-0ubuntu1~bionic3_BUILDING.txt.gz
+
https://launchpadlibrarian.net/363623662/buildlog_ubuntu-bionic-amd64.libzip_1.5.0-0ubuntu1~bionic6_BUILDING.txt.gz
Reverse-depends of libzip4 that are seeded:
ark (from ark) is seeded in:
kubuntu: daily-live
lubuntu-next: daily-live
ideviceinstaller is seeded in:
ubuntu-mate: daily-live
libepub0 is seeded in:
kubuntu: daily-live
ubuntustudio: dvd
libpstoedit0c2a is seeded in:
kubuntu: supported
okular-extra-backends is seeded in:
kubuntu: daily-live
Upstream Changelog
==
1.5.0 [2018-03-11]
==
* Use standard cryptographic library instead of custom AES implementation.
This also simplifies the license.
* Use `clang-format` to format the source code.
* More Windows improvements.
1.4.0 [2017-12-29]
==
* Improve build with cmake
* Retire autoconf/automake build system
* Add `zip_source_buffer_fragment()`.
* Add support to clone unchanged beginning of archive (instead of rewriting
it).
Supported for buffer sources and on Apple File System.
* Add support for Microsoft Universal Windows Platform.
1.3.2 [2017-11-20]
==
* Fix bug introduced in last: zip_t was erroneously freed if zip_close()
failed.
1.3.1 [2017-11-19]
==
* Install zipconf.h into ${PREFIX}/include
* Add zip_libzip_version()
* Fix AES tests on Linux
1.3.0 [2017-09-02]
==
* Support bzip2 compressed zip archives
* Improve file progress callback code
* Fix zip_fdopen()
* CVE-2017-12858: Fix double free()
* CVE-2017-14107: Improve EOCD64 parsing
1.2.0 [2017-02-19]
==
* Support for AES encryption (Winzip version), both encryption
and decryption
* Support legacy zip files with >64k entries
* Fix seeking in zip_source_file if start > 0
* Add zip_fseek() for seeking in uncompressed data
* Add zip_ftell() for telling position in uncompressed data
* Add zip_register_progress_callback() for UI updates during zip_close()
1.1.3 [2016-05-28]
==
* Fix build on Windows when using autoconf
** Patch added: "updated debdiff against debian experimental"
https://bugs.launchpad.net/ubuntu/+source/libzip/+bug/1674057/+attachment/5105030/+files/libzip_1.5.0-r3.debdiff
** Patch removed: "debdiff against version 1.3.2 in Debian experimental"
https://bugs.launchpad.net/ubuntu/+source/libzip/+bug/1674057/+attachment/5102221/+files/libzip_1.5.0-r2.debdiff
--
You received this bug notification because you are a member of Kubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1674057
Title:
[FFe] upgrade libzip to version 1.5.0
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libzip/+bug/1674057/+subscriptions
--
kubuntu-bugs mailing list
kubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 1760347] Re: [FFe] Krita 4.0.0 for Bionic
FFe approved. ** Changed in: krita (Ubuntu Bionic) Status: Confirmed => Triaged -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1760347 Title: [FFe] Krita 4.0.0 for Bionic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krita/+bug/1760347/+subscriptions -- kubuntu-bugs mailing list kubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 1760347] Re: [FFe] Krita 4.0.0 for Bionic
** Description changed: The Kubuntu Team request a Feature Freeze Exception for Krita 4 Krita 4.0.0 was released on 22/03/2018 4.0.0 release notes are here: https://krita.org/en/krita-4-0-release- notes/ 4.x series is a new release the Krita team are very keen to get into Ubuntu LTS, and to this end have set an aim to get a bugfix release 4.0.1 out before we hit final freeze. https://docs.google.com/document/d/1xpYchfGFviTqdlFqvve5JTR5rSyno1YfGDHxw3QLhS4/edit The 4.x series is also one we will be able to support with fixes in Bionic 18.04, whereas the end of life 3.3.3 we currently ship is unlikely to receive any more. Our testing build is in ppa:kubuntu-ppa/staging-misc https://launchpad.net/~kubuntu-ppa/+archive/ubuntu/staging- - misc/+sourcepub/8895505/+listing-archive-extra + misc/+sourcepub/8905609/+listing-archive-extra based on debian https://salsa.debian.org/qt-kde-team/kde-extras/krita -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1760347 Title: [FFe] Krita 4.0.0 for Bionic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krita/+bug/1760347/+subscriptions -- kubuntu-bugs mailing list kubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 1468192] Re: Muon does not show the change log for any package instead displays this text "The list of changes is not yet available. Please use Launchpad instead."
** Changed in: muon (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to muon in Ubuntu. https://bugs.launchpad.net/bugs/1468192 Title: Muon does not show the change log for any package instead displays this text "The list of changes is not yet available. Please use Launchpad instead." To manage notifications about this bug go to: https://bugs.launchpad.net/muon/+bug/1468192/+subscriptions -- kubuntu-bugs mailing list kubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 1716120] Re: Unable to sort package list in Muon by "Installed Size", "Installed Version", "Available Version" (as in Synaptic)
Bug exists in bionic beta2. -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to muon in Ubuntu. https://bugs.launchpad.net/bugs/1716120 Title: Unable to sort package list in Muon by "Installed Size", "Installed Version", "Available Version" (as in Synaptic) To manage notifications about this bug go to: https://bugs.launchpad.net/muon/+bug/1716120/+subscriptions -- kubuntu-bugs mailing list kubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 1468192] Re: Muon does not show the change log for any package instead displays this text "The list of changes is not yet available. Please use Launchpad instead."
Seems to be fixed in 18.04 LTS beta2. -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to muon in Ubuntu. https://bugs.launchpad.net/bugs/1468192 Title: Muon does not show the change log for any package instead displays this text "The list of changes is not yet available. Please use Launchpad instead." To manage notifications about this bug go to: https://bugs.launchpad.net/muon/+bug/1468192/+subscriptions -- kubuntu-bugs mailing list kubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 1751760] Re: [needs-packaging] ksmtp
** Changed in: Ubuntu Bionic Status: New => Fix Released -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1751760 Title: [needs-packaging] ksmtp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+bug/1751760/+subscriptions -- kubuntu-bugs mailing list kubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 1674057] Re: [FFe] upgrade libzip to version 1.5.0
I have been liasing with upstream to sort of the few remaining issues, they have been super responsive, and for the the most part those are fixed upstream, I will update the packaging with upstream fixes once I get back into range of a power point! in the next day or three. -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1674057 Title: [FFe] upgrade libzip to version 1.5.0 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libzip/+bug/1674057/+subscriptions -- kubuntu-bugs mailing list kubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 1760598] Re: I/O Error after clicking "reboot now" - Ubuntu font missing from casper shutdown
As explained in Bug #1761478 that would still leave timing issues. With --ping not blocking anymore casper-stop can shoot right past the prompt code on account of --ping coming back !0 (if plymouth isn't quick enough to start anyway). Meaning the user doesn't get told to remove the installation medium. e.g. this is what I get in a VM now http://people.ubuntu.com/~apachelogger/screencasts/vokoscreen-2018-04-06_13-40-13.mkv -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1760598 Title: I/O Error after clicking "reboot now" - Ubuntu font missing from casper shutdown To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-mate/+bug/1760598/+subscriptions -- kubuntu-bugs mailing list kubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 1761732] [NEW] while deinstalling some kubuntu packages from ubuntu I got the error:package kaccounts-providers (not installed) failed to install/upgrade: trying to overwrite '/etc/signon-ui/webk
Public bug reported: removing kubuntu packages from ubuntu 17.10 ProblemType: Package DistroRelease: Ubuntu 17.10 Package: kaccounts-providers (not installed) ProcVersionSignature: Ubuntu 4.13.0-37.42-generic 4.13.13 Uname: Linux 4.13.0-37-generic x86_64 ApportVersion: 2.20.7-0ubuntu3.7 Architecture: amd64 Date: Thu Mar 29 08:43:07 2018 ErrorMessage: trying to overwrite '/etc/signon-ui/webkit-options.d/accounts.google.com.conf', which is also in package account-plugin-google 0.12+16.04.20160126-0ubuntu1 InstallationDate: Installed on 2017-07-07 (272 days ago) InstallationMedia: Ubuntu 16.04.2 LTS "Xenial Xerus" - Release amd64 (20170215.2) Python3Details: /usr/bin/python3.6, Python 3.6.3, python3-minimal, 3.6.3-0ubuntu2 PythonDetails: /usr/bin/python2.7, Python 2.7.14, python-minimal, 2.7.14-2ubuntu1 RelatedPackageVersions: dpkg 1.18.24ubuntu1 apt 1.5.1 SourcePackage: kaccounts-providers Title: package kaccounts-providers (not installed) failed to install/upgrade: trying to overwrite '/etc/signon-ui/webkit-options.d/accounts.google.com.conf', which is also in package account-plugin-google 0.12+16.04.20160126-0ubuntu1 UpgradeStatus: Upgraded to artful on 2018-03-08 (28 days ago) ** Affects: kaccounts-providers (Ubuntu) Importance: Undecided Status: New ** Tags: amd64 apport-package artful -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to kaccounts-providers in Ubuntu. https://bugs.launchpad.net/bugs/1761732 Title: while deinstalling some kubuntu packages from ubuntu I got the error:package kaccounts-providers (not installed) failed to install/upgrade: trying to overwrite '/etc/signon-ui/webkit- options.d/accounts.google.com.conf', which is also in package account- plugin-google 0.12+16.04.20160126-0ubuntu1 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kaccounts-providers/+bug/1761732/+subscriptions -- kubuntu-bugs mailing list kubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
