[Touch-packages] [Bug 1753450] Re: [MIR] mpg123
mpg123 1.25.8-1 in bionic: universe/sound -> main libmpg123-0 1.25.8-1 in bionic amd64: universe/libs/optional/100% -> main libmpg123-0 1.25.8-1 in bionic arm64: universe/libs/optional/100% -> main libmpg123-0 1.25.8-1 in bionic armhf: universe/libs/optional/100% -> main libmpg123-0 1.25.8-1 in bionic i386: universe/libs/optional/100% -> main libmpg123-0 1.25.8-1 in bionic ppc64el: universe/libs/optional/100% -> main libmpg123-0 1.25.8-1 in bionic s390x: universe/libs/optional/100% -> main libmpg123-dev 1.25.8-1 in bionic amd64: universe/libdevel/optional/100% -> main libmpg123-dev 1.25.8-1 in bionic arm64: universe/libdevel/optional/100% -> main libmpg123-dev 1.25.8-1 in bionic armhf: universe/libdevel/optional/100% -> main libmpg123-dev 1.25.8-1 in bionic i386: universe/libdevel/optional/100% -> main libmpg123-dev 1.25.8-1 in bionic ppc64el: universe/libdevel/optional/100% -> main libmpg123-dev 1.25.8-1 in bionic s390x: universe/libdevel/optional/100% -> main libout123-0 1.25.8-1 in bionic amd64: universe/libs/optional/100% -> main libout123-0 1.25.8-1 in bionic arm64: universe/libs/optional/100% -> main libout123-0 1.25.8-1 in bionic armhf: universe/libs/optional/100% -> main libout123-0 1.25.8-1 in bionic i386: universe/libs/optional/100% -> main libout123-0 1.25.8-1 in bionic ppc64el: universe/libs/optional/100% -> main libout123-0 1.25.8-1 in bionic s390x: universe/libs/optional/100% -> main mpg123 1.25.8-1 in bionic amd64: universe/sound/optional/100% -> main mpg123 1.25.8-1 in bionic arm64: universe/sound/optional/100% -> main mpg123 1.25.8-1 in bionic armhf: universe/sound/optional/100% -> main mpg123 1.25.8-1 in bionic i386: universe/sound/optional/100% -> main mpg123 1.25.8-1 in bionic ppc64el: universe/sound/optional/100% -> main mpg123 1.25.8-1 in bionic s390x: universe/sound/optional/100% -> main Override [y|N]? y 25 publications overridden. ** Changed in: mpg123 (Ubuntu) Assignee: (unassigned) => Adam Conrad (adconrad) ** Changed in: mpg123 (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to mpg123 in Ubuntu. https://bugs.launchpad.net/bugs/1753450 Title: [MIR] mpg123 Status in mpg123 package in Ubuntu: Fix Released Bug description: Availability Built for all supported architectures. In sync with Debian. Rationale = For the 1.14 series, GStreamer upstream moved MP3 encoding and decoding into gst-plugins-good. These are installed by default, and so now we can have MP3 support in the default install. The desktop team would like this feature. For that, it uses some libraries and we'll need to put them in main. Security There are some CVEs in the history of the project. https://security-tracker.debian.org/tracker/source-package/mpg123 https://people.canonical.com/~ubuntu-security/cve/pkg/mpg123.html The Ubuntu CVE page lists a 'needed' one which AFAICS is fixed in 1.25.8-1. Quality assurance = Desktop team is subscribed. Bugs https://bugs.launchpad.net/ubuntu/+source/mpg123 https://bugs.debian.org/cgi-bin/pkgreport.cgi?repeatmerged=yes=mpg123 Dependencies We need libmpg123-0 in main, and this depends on libc6 only. Standards compliance 4.1.2. debian/rules is slightly complicated because it generates some wrapper scripts for some old binary names. Those binaries don't go in a package that we need in main. Maintenance === Desktop team will maintain. In Debian this is maintained by the multimedia team, which is active. We don't envisage the package diverging from Debian. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mpg123/+bug/1753450/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1753450] Re: [MIR] mpg123
libmpg123-0 's MIR is approved then. ** Changed in: mpg123 (Ubuntu) Status: Incomplete => Fix Committed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to mpg123 in Ubuntu. https://bugs.launchpad.net/bugs/1753450 Title: [MIR] mpg123 Status in mpg123 package in Ubuntu: Fix Committed Bug description: Availability Built for all supported architectures. In sync with Debian. Rationale = For the 1.14 series, GStreamer upstream moved MP3 encoding and decoding into gst-plugins-good. These are installed by default, and so now we can have MP3 support in the default install. The desktop team would like this feature. For that, it uses some libraries and we'll need to put them in main. Security There are some CVEs in the history of the project. https://security-tracker.debian.org/tracker/source-package/mpg123 https://people.canonical.com/~ubuntu-security/cve/pkg/mpg123.html The Ubuntu CVE page lists a 'needed' one which AFAICS is fixed in 1.25.8-1. Quality assurance = Desktop team is subscribed. Bugs https://bugs.launchpad.net/ubuntu/+source/mpg123 https://bugs.debian.org/cgi-bin/pkgreport.cgi?repeatmerged=yes=mpg123 Dependencies We need libmpg123-0 in main, and this depends on libc6 only. Standards compliance 4.1.2. debian/rules is slightly complicated because it generates some wrapper scripts for some old binary names. Those binaries don't go in a package that we need in main. Maintenance === Desktop team will maintain. In Debian this is maintained by the multimedia team, which is active. We don't envisage the package diverging from Debian. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mpg123/+bug/1753450/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1753450] Re: [MIR] mpg123
+1 to go ahead. The Security Team will not do a code review at this time. ** Changed in: mpg123 (Ubuntu) Assignee: Ubuntu Security Team (ubuntu-security) => (unassigned) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to mpg123 in Ubuntu. https://bugs.launchpad.net/bugs/1753450 Title: [MIR] mpg123 Status in mpg123 package in Ubuntu: Incomplete Bug description: Availability Built for all supported architectures. In sync with Debian. Rationale = For the 1.14 series, GStreamer upstream moved MP3 encoding and decoding into gst-plugins-good. These are installed by default, and so now we can have MP3 support in the default install. The desktop team would like this feature. For that, it uses some libraries and we'll need to put them in main. Security There are some CVEs in the history of the project. https://security-tracker.debian.org/tracker/source-package/mpg123 https://people.canonical.com/~ubuntu-security/cve/pkg/mpg123.html The Ubuntu CVE page lists a 'needed' one which AFAICS is fixed in 1.25.8-1. Quality assurance = Desktop team is subscribed. Bugs https://bugs.launchpad.net/ubuntu/+source/mpg123 https://bugs.debian.org/cgi-bin/pkgreport.cgi?repeatmerged=yes=mpg123 Dependencies We need libmpg123-0 in main, and this depends on libc6 only. Standards compliance 4.1.2. debian/rules is slightly complicated because it generates some wrapper scripts for some old binary names. Those binaries don't go in a package that we need in main. Maintenance === Desktop team will maintain. In Debian this is maintained by the multimedia team, which is active. We don't envisage the package diverging from Debian. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mpg123/+bug/1753450/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1753450] Re: [MIR] mpg123
All CVEs are currently fixed in bionic. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to mpg123 in Ubuntu. https://bugs.launchpad.net/bugs/1753450 Title: [MIR] mpg123 Status in mpg123 package in Ubuntu: Incomplete Bug description: Availability Built for all supported architectures. In sync with Debian. Rationale = For the 1.14 series, GStreamer upstream moved MP3 encoding and decoding into gst-plugins-good. These are installed by default, and so now we can have MP3 support in the default install. The desktop team would like this feature. For that, it uses some libraries and we'll need to put them in main. Security There are some CVEs in the history of the project. https://security-tracker.debian.org/tracker/source-package/mpg123 https://people.canonical.com/~ubuntu-security/cve/pkg/mpg123.html The Ubuntu CVE page lists a 'needed' one which AFAICS is fixed in 1.25.8-1. Quality assurance = Desktop team is subscribed. Bugs https://bugs.launchpad.net/ubuntu/+source/mpg123 https://bugs.debian.org/cgi-bin/pkgreport.cgi?repeatmerged=yes=mpg123 Dependencies We need libmpg123-0 in main, and this depends on libc6 only. Standards compliance 4.1.2. debian/rules is slightly complicated because it generates some wrapper scripts for some old binary names. Those binaries don't go in a package that we need in main. Maintenance === Desktop team will maintain. In Debian this is maintained by the multimedia team, which is active. We don't envisage the package diverging from Debian. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mpg123/+bug/1753450/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1753450] Re: [MIR] mpg123
** Changed in: mpg123 (Ubuntu) Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to mpg123 in Ubuntu. https://bugs.launchpad.net/bugs/1753450 Title: [MIR] mpg123 Status in mpg123 package in Ubuntu: Incomplete Bug description: Availability Built for all supported architectures. In sync with Debian. Rationale = For the 1.14 series, GStreamer upstream moved MP3 encoding and decoding into gst-plugins-good. These are installed by default, and so now we can have MP3 support in the default install. The desktop team would like this feature. For that, it uses some libraries and we'll need to put them in main. Security There are some CVEs in the history of the project. https://security-tracker.debian.org/tracker/source-package/mpg123 https://people.canonical.com/~ubuntu-security/cve/pkg/mpg123.html The Ubuntu CVE page lists a 'needed' one which AFAICS is fixed in 1.25.8-1. Quality assurance = Desktop team is subscribed. Bugs https://bugs.launchpad.net/ubuntu/+source/mpg123 https://bugs.debian.org/cgi-bin/pkgreport.cgi?repeatmerged=yes=mpg123 Dependencies We need libmpg123-0 in main, and this depends on libc6 only. Standards compliance 4.1.2. debian/rules is slightly complicated because it generates some wrapper scripts for some old binary names. Those binaries don't go in a package that we need in main. Maintenance === Desktop team will maintain. In Debian this is maintained by the multimedia team, which is active. We don't envisage the package diverging from Debian. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mpg123/+bug/1753450/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1753450] Re: [MIR] mpg123
MIR ack for libmpg123-0 if the Security Team acknowledges they are aware of this requirement. ** Changed in: mpg123 (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to mpg123 in Ubuntu. https://bugs.launchpad.net/bugs/1753450 Title: [MIR] mpg123 Status in mpg123 package in Ubuntu: Incomplete Bug description: Availability Built for all supported architectures. In sync with Debian. Rationale = For the 1.14 series, GStreamer upstream moved MP3 encoding and decoding into gst-plugins-good. These are installed by default, and so now we can have MP3 support in the default install. The desktop team would like this feature. For that, it uses some libraries and we'll need to put them in main. Security There are some CVEs in the history of the project. https://security-tracker.debian.org/tracker/source-package/mpg123 https://people.canonical.com/~ubuntu-security/cve/pkg/mpg123.html The Ubuntu CVE page lists a 'needed' one which AFAICS is fixed in 1.25.8-1. Quality assurance = Desktop team is subscribed. Bugs https://bugs.launchpad.net/ubuntu/+source/mpg123 https://bugs.debian.org/cgi-bin/pkgreport.cgi?repeatmerged=yes=mpg123 Dependencies We need libmpg123-0 in main, and this depends on libc6 only. Standards compliance 4.1.2. debian/rules is slightly complicated because it generates some wrapper scripts for some old binary names. Those binaries don't go in a package that we need in main. Maintenance === Desktop team will maintain. In Debian this is maintained by the multimedia team, which is active. We don't envisage the package diverging from Debian. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mpg123/+bug/1753450/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
