[Bug 2066990] Re: openssl fails with out of memory messages while trying to load the FIPS provider in a non-FIPS container on a FIPS host

2024-10-09 Thread Adrien Nader
** Changed in: openssl (Ubuntu)
   Importance: Undecided => High

** Changed in: ca-certificates (Ubuntu)
   Status: Confirmed => Invalid

** Changed in: openssl (Ubuntu)
 Assignee: (unassigned) => Adrien Nader (adrien)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2066990

Title:
  openssl fails with out of memory messages while trying to load the
  FIPS provider in a non-FIPS container on a FIPS host

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/2066990/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2066990] Re: high memory consumption in Ubuntu Noble

2024-10-09 Thread Adrien Nader
NB: we can only SRU that to Noble if it first goes in a development
version of Ubuntu which will only be possible when development for 25.04
begins.

** Summary changed:

- high memory consumption in Ubuntu Noble
+ openssl fails with out of memory messages while trying to load the FIPS 
provider in a non-FIPS container on a FIPS host

** Tags added: foundations-todo

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2066990

Title:
  openssl fails with out of memory messages while trying to load the
  FIPS provider in a non-FIPS container on a FIPS host

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/2066990/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2066990] Re: high memory consumption in Ubuntu Noble

2024-10-09 Thread Adrien Nader
Steps to reproduce on any machine on Noble or later:

cp -r /usr/lib/ssl/certs/ .
OPENSSL_FORCE_FIPS_MODE=1 openssl rehash certs

** Changed in: openssl (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2066990

Title:
  openssl fails with out of memory messages while trying to load the
  FIPS provider in a non-FIPS container on a FIPS host

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/2066990/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2066990] Re: high memory consumption in Ubuntu Noble

2024-10-09 Thread Adrien Nader
** Also affects: openssl (Ubuntu)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2066990

Title:
  high memory consumption in Ubuntu Noble

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/2066990/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2079834] Re: libssh2-1 lacks support for rsa-sha2-{512,256}

2024-10-07 Thread Adrien Nader
I'm wary of version upgrades for packages I'm not sure we've done SRUs
before.

Have you considered using ssh-audit? It can tell you which host-key
algorithms are offered and I think it implements just enough of the SSH
protocol so that it can tell you such information.

I see it's also available as a snap (published by the author AIUI) in
case the one on 22.04 doesn't fit you and you have snapd on the
machines.

Finally, there's also a web UI for it (basically ssh-audit as a
service): https://www.ssh-audit.com/

Does it solve your issues?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2079834

Title:
  libssh2-1 lacks support for rsa-sha2-{512,256}

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libssh2/+bug/2079834/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2062119] Re: libtracefs autopkgtests fail on ppc64el

2024-10-07 Thread Adrien Nader
I've opened https://bugzilla.kernel.org/show_bug.cgi?id=219358 upstream.

** Bug watch added: Linux Kernel Bug Tracker #219358
   https://bugzilla.kernel.org/show_bug.cgi?id=219358

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2062119

Title:
  libtracefs autopkgtests fail on ppc64el

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-power-systems/+bug/2062119/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2083696] [NEW] FFe: Sync gcalcli 4.5.0-1 (universe) from Debian unstable (main)

2024-10-04 Thread Adrien Nader
Public bug reported:

Please sync gcalcli 4.5.0-1 (universe) from Debian unstable (main)

Explanation of the Ubuntu delta and why it can be dropped:
  * Switch to google-auth-oauthlib from oauth2client (patches included in 4.4)
(LP: #2078793):
- 22dbc71c5dc17dace62e87b3f31b8cdb3eb37996.patch
- f880c2c4fd1144ab15b3ace4a61e293dfe295053.patch
- d01e7157de75cc8f954f4b8c566b073acd454e9a.patch
- 1260a41410e1a8e11438ac41156f8dfe00c8791e.patch
- 646314e6eaae630b90cc2bde51c8952295a452d7.patch
  * Provide a hint when token file deserialization fails (happens on update):
- 0001-feat-print-an-error-message-when-.gcalcli_oauth-dese.patch

The first set of patch are cherry-picks from upstream while the last patch has
been submitted upstream and merged. They are therefore all included in the
4.5.0 release.

Explanation of FeatureFreeze exception:

The big change in gcalcli 4.4.0 and 4.5.0 is changes to authentication. The
process has been made more reliable but this has also required changing how
credentials are stored. In version 4.4.0, no migration was done: the user
would instead get an error message, have to look at it, delete the file and do
the authentication again.

In contrast, 4.5.0 attempts to do the migration automatically, puts files in
.config instead of directly in ~/ and has better error messages and hints.
Upgrading from 4.3.0 directly to 4.5.0 also means all the changes happen in a
single upgrade rather than go through the intermediate changes with 4.4.0.

All of the above make for a better user experience and possibly fewer support
requests.

Changelog entries since current oracular version 4.3.0-2ubuntu1:

gcalcli (4.5.0-1) unstable; urgency=medium
  * New upstream version 4.5.0.
- Fix lots of bugs by switching from deprecated oauth2client to
  google_auth_oauthlib. (Closes: #1029661, #1082043)
  * d/control: Use pybuild-plugin-pyproject, and derive depends from that.
  * d/rules: Write upstream version, cleaning up afterwards.
  * Update Standards-Version to 4.7.0.

** Affects: gcalcli (Ubuntu)
 Importance: Wishlist
 Status: Triaged

** Changed in: gcalcli (Ubuntu)
   Importance: Undecided => Wishlist

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2083696

Title:
  FFe: Sync gcalcli 4.5.0-1 (universe) from Debian unstable (main)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gcalcli/+bug/2083696/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2083261] [NEW] gsasl: armhf test failures in oracular

2024-09-30 Thread Adrien Nader
Public bug reported:

I've recently noticed that two subtests of gsasl have started failing a
few months ago on armhf. This also happens in Debian.

Unfortunately this coincided with infrastructure issues for Ubuntu and
it's not clear which package has been causing the issue. Debian side,
logs are not available far away enough to tell with certainty. One not-
unlikely suspect is glibc but it's difficult to tell for sure.

I haven't found anything obvious from test logs and I haven't found
anything conclusive with strace either (logs are very different between
arches unfortunately). It may be helpful to compare logs between noble
and oracular rather than on oracular but with different versions.

Test logs: https://autopkgtest.ubuntu.com/results/autopkgtest-
oracular/oracular/armhf/g/gsasl/20240912_194229_c676e@/log.gz

Excerpt:

2297s libgsasl PASS
2297s gsaslPASS (superficial)
2297s gsasl-scram-pbkdf2   PASS
2297s gsasl-dovecot-gssapi FAIL non-zero exit status 1
2297s gsasl-mailutils-cram PASS
2297s gsasl-mailutils-gs2krb5-gssapi FAIL non-zero exit status 1
2297s gsasl-mailutils-tls  PASS

** Affects: gsasl (Ubuntu)
 Importance: High
 Status: Confirmed


** Tags: foundations-todo

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2083261

Title:
  gsasl: armhf test failures in oracular

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gsasl/+bug/2083261/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2083243] Re: [FFe] gsasl: FTBFS on s390x in oracular

2024-09-30 Thread Adrien Nader
I haven't opened a report yet. I need direct access to an s390x machine
and not only to the builders, which I didn't have at hand yet.

I shall try to do that this week.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2083243

Title:
  [FFe] gsasl: FTBFS on s390x in oracular

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gsasl/+bug/2083243/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2083245] [NEW] [FFe] libgcrypt: FTBFS on s390x due to failed tests

2024-09-30 Thread Adrien Nader
Public bug reported:

On s390x, libgcrypt20 FTBFS because the testsuite that runs at build-
time fails.

This was spotted during a test rebuild (
https://people.canonical.com/~ginggs/ftbfs-report/test-
rebuild-20240912-oracular-oracular.html ).

The log for the issue on s390x is at
https://launchpadlibrarian.net/751878684/buildlog_ubuntu-
oracular-s390x.libgcrypt20_1.11.0-6_BUILDING.txt.gz

The error is below:

computed: a0 12 f9 83 af cb 5e 36 37 4e 5f db a8 e7 5e 5d 08 d3 a6 fe 7a a7 f0 
9d ed e0 12 3b 90 4e 55 f6 
expected: c1 c3 69 25 b6 40 9a 04 f1 b5 04 fc bc a9 d8 2b 40 17 27 7c b5 ed 2b 
20 65 fc 1d 38 14 d5 aa f5 
basic: algo 329, digest mismatch
computed: a0 12 f9 83 af cb 5e 36 37 4e 5f db a8 e7 5e 5d 08 d3 a6 fe 7a a7 f0 
9d ed e0 12 3b 90 4e 55 f6 
expected: c1 c3 69 25 b6 40 9a 04 f1 b5 04 fc bc a9 d8 2b 40 17 27 7c b5 ed 2b 
20 65 fc 1d 38 14 d5 aa f5 
basic: check_one_md_multi: algo 329, digest mismatch
computed: 85 dc 9c ca a6 6f ab fb 94 17 cd 64 2d 53 ff b7 f2 30 ed 70 87 5c 69 
e1 79 ab 72 1d 78 95 c7 e5 
expected: c5 22 1d 50 e4 f8 22 d9 6a 2e 88 81 a9 61 42 0f 29 4b 7b 24 fe 3d 20 
94 ba ed 2c 65 24 cc 16 6b 
basic: algo 329, digest mismatch
computed: 85 dc 9c ca a6 6f ab fb 94 17 cd 64 2d 53 ff b7 f2 30 ed 70 87 5c 69 
e1 79 ab 72 1d 78 95 c7 e5 
expected: c5 22 1d 50 e4 f8 22 d9 6a 2e 88 81 a9 61 42 0f 29 4b 7b 24 fe 3d 20 
94 ba ed 2c 65 24 cc 16 6b 
basic: check_one_md_multi: algo 329, digest mismatch
computed: 33 dc 74 56 44 a8 0e 6b de 40 80 75 86 b4 86 4c 6c af d7 81 4e 7e bc 
a7 55 7a 48 ab c8 09 ba ba 1d a2 bc 5f ca 0b f7 9f ba b7 01 4a f2 1f 80 7b 7a 
a6 cd 0a c0 52 6c 1c 60 a0 6b f7 a8 3a 07 4c 
expected: d0 08 82 8e 2b 80 ac 9d 22 18 ff ee 1d 07 0c 48 b8 e4 c8 7b ff 32 c9 
69 9d 5b 68 96 ee e0 ed d1 64 02 0e 2b e0 56 08 58 d9 c0 0c 03 7e 34 a9 69 37 
c5 61 a7 4c 41 2b b4 c7 46 46 95 27 28 1c 8c 
basic: algo 330, digest mismatch
computed: 33 dc 74 56 44 a8 0e 6b de 40 80 75 86 b4 86 4c 6c af d7 81 4e 7e bc 
a7 55 7a 48 ab c8 09 ba ba 1d a2 bc 5f ca 0b f7 9f ba b7 01 4a f2 1f 80 7b 7a 
a6 cd 0a c0 52 6c 1c 60 a0 6b f7 a8 3a 07 4c 
expected: d0 08 82 8e 2b 80 ac 9d 22 18 ff ee 1d 07 0c 48 b8 e4 c8 7b ff 32 c9 
69 9d 5b 68 96 ee e0 ed d1 64 02 0e 2b e0 56 08 58 d9 c0 0c 03 7e 34 a9 69 37 
c5 61 a7 4c 41 2b b4 c7 46 46 95 27 28 1c 8c 
basic: check_one_md_multi: algo 330, digest mismatch
computed: a3 14 9a 0a 85 d1 f3 41 94 04 ba 8f cf a8 1a 27 b0 02 ae cc 93 4b 8b 
3c d3 bf 79 de 22 63 33 51 38 8b f5 ba a6 74 52 d5 b3 56 f4 38 df 6f dc 4e 44 
5c c7 cb a7 5e 5b 3d 86 bd 1f 97 ac 4f 8c 1a 
expected: 07 dc 27 b1 1e 51 fb ac 75 bc 7b 3c 1d 98 3e 8b 4b 85 fb 1d ef af 21 
89 12 ac 86 43 02 73 09 17 27 f4 2b 17 ed 1d f6 3e 8e c1 18 f0 4b 23 63 3c 1d 
fb 15 74 c8 fb 55 cb 45 da 8e 25 af b0 92 bb 
basic: algo 330, digest mismatch
computed: a3 14 9a 0a 85 d1 f3 41 94 04 ba 8f cf a8 1a 27 b0 02 ae cc 93 4b 8b 
3c d3 bf 79 de 22 63 33 51 38 8b f5 ba a6 74 52 d5 b3 56 f4 38 df 6f dc 4e 44 
5c c7 cb a7 5e 5b 3d 86 bd 1f 97 ac 4f 8c 1a 
expected: 07 dc 27 b1 1e 51 fb ac 75 bc 7b 3c 1d 98 3e 8b 4b 85 fb 1d ef af 21 
89 12 ac 86 43 02 73 09 17 27 f4 2b 17 ed 1d f6 3e 8e c1 18 f0 4b 23 63 3c 1d 
fb 15 74 c8 fb 55 cb 45 da 8e 25 af b0 92 bb 
basic: check_one_md_multi: algo 330, digest mismatch
FAIL: basic

Also note the following success:

  now running 'basic' test with all hardware features disabled.
PASS: basic-disable-all-hwf

This comes from trying to use a CPU acceleration feature for SHA3 for
cSHAKE which is based on SHA3 but slightly different. There is a patch
upstream to stop trying to use the SHA3 acceleration for that.

The patch is limited to s390x, simple, already upstream and merged:
https://git.gnupg.org/cgi-
bin/gitweb.cgi?p=libgcrypt.git;a=commit;h=2486d9b5ae015c1786cb84466a751da4bc0d7122

** Affects: libgcrypt20 (Ubuntu)
 Importance: High
 Assignee: Adrien Nader (adrien)
 Status: In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2083245

Title:
  [FFe] libgcrypt: FTBFS on s390x due to failed tests

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libgcrypt20/+bug/2083245/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2083243] [NEW] [FFe] gsasl: FTBFS on s390x in oracular

2024-09-30 Thread Adrien Nader
Public bug reported:

During a test rebuild, Graham found out that gsasl FTBFS on s390x on
Oracular.

The rebuild report is at https://people.canonical.com/~ginggs/ftbfs-
report/test-rebuild-20240912-oracular-oracular.html (it may update).

The issue is that one of the build steps never finishes (at least not
within 150 minutes).

The relevant failure is shown (edited) below:

libtool: link: gcc [...] -o test-parser test_parser-test-parser.o 
./.libs/libgsasl-digest_md5.a ../gl/.libs/liblgl.a
E: Build killed with signal TERM after 150 minutes of inactivity

An example of a failed build is at
https://launchpad.net/ubuntu/+archive/test-
rebuild-20240912-oracular/+build/28965803

I've tried disabling LTO and reducing parallelism but of these two, only
disabling LTO helped. I don't think it is a big concern for this package
which doesn't do a lot of heavy computations itself. This will be the
only delta from Debian so we'll certainly revisit the issue.

** Affects: gsasl (Ubuntu)
 Importance: Undecided
     Assignee: Adrien Nader (adrien)
 Status: In Progress

** Changed in: gsasl (Ubuntu)
 Assignee: (unassigned) => Adrien Nader (adrien)

** Changed in: gsasl (Ubuntu)
Milestone: None => ubuntu-24.10

** Changed in: gsasl (Ubuntu)
   Status: New => In Progress

** Summary changed:

- gsasl: FTBFS on s390x in oracular
+ [FFe] gsasl: FTBFS on s390x in oracular

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2083243

Title:
  [FFe] gsasl: FTBFS on s390x in oracular

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gsasl/+bug/2083243/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2078793] Re: gcalcli: uses python3-oauth2client

2024-09-30 Thread Adrien Nader
Thanks for letting me know about it. I've taken a look at 4.5.0 and it
seems too big for an upload this late in the Ubuntu cycle unfortunately;
even the few patches for the files location are probably too much even
though they're definitely welcome.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2078793

Title:
  gcalcli: uses python3-oauth2client

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gcalcli/+bug/2078793/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2074069] Re: python-oauth2client is deprecated

2024-09-26 Thread Adrien Nader
Changing the target for 25.04 because it's late in the cycle and there
are still a few packages to handle (certbot and pydrive2 iirc).

** Changed in: python-oauth2client (Ubuntu)
Milestone: ubuntu-24.10 => None

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2074069

Title:
  python-oauth2client is deprecated

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-oauth2client/+bug/2074069/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2081090] Re: gutenprint FTBFS due to 64-bit restriction

2024-09-20 Thread Adrien Nader
That's a good point. It seems the only thing to do in that case is to
drop the dependency on architecture-is-64-bit .

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2081090

Title:
  gutenprint FTBFS due to 64-bit restriction

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gutenprint/+bug/2081090/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2071779] Re: htpdate: autopkgtest failure on ppc64el

2024-09-20 Thread Adrien Nader
** Changed in: openssl (Ubuntu)
   Status: New => Invalid

** Changed in: htpdate (Ubuntu)
Milestone: None => ubuntu-24.10

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2071779

Title:
  htpdate: autopkgtest failure on ppc64el

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/htpdate/+bug/2071779/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2081090] Re: gutenprint FTBFS due to 64-bit restriction

2024-09-20 Thread Adrien Nader
I tried building it too on armhf and encountered no issue.

Looking at my analysis results, libgutenprint-dev did not build and was
therefore not analyzed and libgutenprintui2-dev did not have an ABI
incompatibility.

This means that the library should go through the t64 transition.

If you consider this a big issue, someone may be able to fix the build
and therefore get analysis results as it's maybe only a matter of
ensuring "stp_vars_t" is defined before being used.

I must mention that I won't be able to try doing that before Thursday
and I'm not sure I still have any of the systems used for the analysis.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2081090

Title:
  gutenprint FTBFS due to 64-bit restriction

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gutenprint/+bug/2081090/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2073991] Re: Add FIPS defines to Noble OpenSSL header files

2024-09-11 Thread Adrien Nader
Alright, 0046-signature-Clamp-PSS-salt-len-to-MD-len.patch has been
merged upstream for openssl 3.1:
https://github.com/openssl/openssl/commit/6c73ca4a2f4ea71f4a880670624e7b2fdb6f32da

No concern for OSSL_PKEY_RSA_PSS_SALT_LEN_AUTO_DIGEST_MAX and
RSA_PSS_SALTLEN_AUTO_DIGEST_MAX in openssl >= 3.1 and therefore
Oracular.

This would need more careful examination for an SRU to Noble.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2073991

Title:
  Add FIPS defines to Noble OpenSSL header files

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2073991/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2073991] Re: Add FIPS defines to Noble OpenSSL header files

2024-09-11 Thread Adrien Nader
I've been preparing a build that includes these changes.

These are fine:

UBUNTU_OSSL_PROV_FIPS_PARAM_UNAPPROVED_USAGE
UBUNTU_OSSL_SELF_TEST_DESC_PCT_DH

These don't seem fine:

OSSL_PKEY_RSA_PSS_SALT_LEN_AUTO_DIGEST_MAX
RSA_PSS_SALTLEN_AUTO_DIGEST_MAX

Defining them would change the behavior of the library it seems.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2073991

Title:
  Add FIPS defines to Noble OpenSSL header files

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2073991/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2079970] Re: Debug symbols are unavailable for 3.0.2-0ubuntu1.18 (security update)

2024-09-11 Thread Adrien Nader
Tobias, I think the files are available now.


Package: libssl3-dbgsym
Package-Type: ddeb
Architecture: amd64
Version: 3.0.2-0ubuntu1.18

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2079970

Title:
  Debug symbols are unavailable for 3.0.2-0ubuntu1.18 (security update)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2079970/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2078793] Re: gcalcli: uses python3-oauth2client

2024-09-06 Thread Adrien Nader
The MR at
https://code.launchpad.net/~adrien/ubuntu/+source/gcalcli/+git/gcalcli/+merge/472464
is now ready for review.

** Description changed:

  gcalcli is another application that had been using oauth2client and I
  had unfortunately missed it.
  
  Luckily, upstream patched that mid-August. It reportedly fixed issues
  for the application. I haven't been able to use it on the canonical
  account unfortunately and I don't have another account to test this
  with. I'm currently waiting for the feedback of a volunteer.
  
  This gives us two good reasons to include this in oracular:
  - authentication was broken; it still worked for some people, sometimes, if 
they had set it up years ago
  - one less package depends on python3-oauth2client
  
  There are five relevant patches that I've identified. They all happened
  in a row and could have been a single commit.
  
  - Replace deprecated oauth2client with google-auth: 
https://github.com/insanum/gcalcli/commit/22dbc71c5dc17dace62e87b3f31b8cdb3eb37996
  - Actually leave oauth2client for argparser: 
https://github.com/insanum/gcalcli/commit/f880c2c4fd1144ab15b3ace4a61e293dfe295053
  - Use google-auth: 
https://github.com/insanum/gcalcli/commit/d01e7157de75cc8f954f4b8c566b073acd454e9a
  - Prevent browser from opening automatically. 
https://github.com/insanum/gcalcli/commit/1260a41410e1a8e11438ac41156f8dfe00c8791e
  - Remove deprecated oauth arguments. 
https://github.com/insanum/gcalcli/commit/646314e6eaae630b90cc2bde51c8952295a452d7
  
  There is a PPA at
  https://launchpad.net/~adrien/+archive/ubuntu/oracular-gcalcli-drop-
  oauth2client .
  
- The WIP MR is at
+ The MR is at
  
https://code.launchpad.net/~adrien/ubuntu/+source/gcalcli/+git/gcalcli/+merge/472464

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2078793

Title:
  gcalcli: uses python3-oauth2client

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gcalcli/+bug/2078793/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2078793] Re: gcalcli: uses python3-oauth2client

2024-09-05 Thread Adrien Nader
I've opened a PR upstream for a better error message:
https://github.com/insanum/gcalcli/pull/733 . The log message appears
above the backtrace but there is a delay between the message and the
backtrace and the message is colored in red. It's quite visible.

I'm currently building a version with this patch in addition to the
others and Unit193's NEWS entry.

Lastly, based on Dave's feedback (thanks!), I'm pretty confident this
will work. Dave only had an issue in the last step which is not a
surprise considering his setup.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2078793

Title:
  gcalcli: uses python3-oauth2client

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gcalcli/+bug/2078793/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2073991] Re: Add FIPS defines to Noble OpenSSL header files

2024-09-04 Thread Adrien Nader
Updating target. Would be nice to have in Noble but no strong need at
the moment. Target is 25.04 which I can't refer to at the moment
unfortunately since the release is not create in launchpad yet.

** Changed in: openssl (Ubuntu Noble)
   Importance: Undecided => Low

** Changed in: openssl (Ubuntu Noble)
   Status: New => Confirmed

** Changed in: openssl (Ubuntu Oracular)
   Status: New => Won't Fix

** Changed in: openssl (Ubuntu)
   Status: New => Confirmed

** Changed in: openssl (Ubuntu)
   Importance: Undecided => Medium

** Changed in: openssl (Ubuntu)
 Assignee: (unassigned) => Adrien Nader (adrien)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2073991

Title:
  Add FIPS defines to Noble OpenSSL header files

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2073991/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2078793] Re: gcalcli: uses python3-oauth2client

2024-09-04 Thread Adrien Nader
Hi,

That's an interesting aspect that I had overlooked and I see how it can
be annoying.

Looking at the code, I'm not sure there can be a way to move the data
from oauth2client storage to google-auth without spending a lot of time
doing so. The two are quite different.

A related issue is that the filename for both is the same. At least, as
far as I can tell from your backtrace, this doesn't lose the original
file. Can you confirm that? It's also a shame that users who upgrade are
greeted by a non-descriptive backtrace and no diagnostic due to that.
Finally, it seems that the config_folder option is not used anymore
here.

By the way, have you been able to confirm the migration to google-auth
works for you? I wanted to use it with the google account I have through
canonical but this actually doesn't work, probably due to company policy
(it goes quite far but I get an error during the in-browser
authorisation).

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2078793

Title:
  gcalcli: uses python3-oauth2client

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gcalcli/+bug/2078793/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2078793] [NEW] gcalcli: uses python3-oauth2client

2024-09-03 Thread Adrien Nader
Public bug reported:

gcalcli is another application that had been using oauth2client and I
had unfortunately missed it.

Luckily, upstream patched that mid-August. It reportedly fixed issues
for the application. I haven't been able to use it on the canonical
account unfortunately and I don't have another account to test this
with. I'm currently waiting for the feedback of a volunteer.

This gives us two good reasons to include this in oracular:
- authentication was broken; it still worked for some people, sometimes, if 
they had set it up years ago
- one less package depends on python3-oauth2client

There are five relevant patches that I've identified. They all happened
in a row and could have been a single commit.

- Replace deprecated oauth2client with google-auth: 
https://github.com/insanum/gcalcli/commit/22dbc71c5dc17dace62e87b3f31b8cdb3eb37996
- Actually leave oauth2client for argparser: 
https://github.com/insanum/gcalcli/commit/f880c2c4fd1144ab15b3ace4a61e293dfe295053
- Use google-auth: 
https://github.com/insanum/gcalcli/commit/d01e7157de75cc8f954f4b8c566b073acd454e9a
- Prevent browser from opening automatically. 
https://github.com/insanum/gcalcli/commit/1260a41410e1a8e11438ac41156f8dfe00c8791e
- Remove deprecated oauth arguments. 
https://github.com/insanum/gcalcli/commit/646314e6eaae630b90cc2bde51c8952295a452d7

There is a PPA at
https://launchpad.net/~adrien/+archive/ubuntu/oracular-gcalcli-drop-
oauth2client .

The WIP MR is at
https://code.launchpad.net/~adrien/ubuntu/+source/gcalcli/+git/gcalcli/+merge/472464

** Affects: gcalcli (Ubuntu)
 Importance: High
     Assignee: Adrien Nader (adrien)
 Status: In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2078793

Title:
  gcalcli: uses python3-oauth2client

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gcalcli/+bug/2078793/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2076930] Re: Removal request: python-certbot-dns-google

2024-08-30 Thread Adrien Nader
There is an argument for removing it though: we don't know if it's still
working. But what's worse: a non-working package, or a removed package
one? I'm not sure they're very different in this situation.

The main reason for removing packages was that they hold back other
changes due to autopkgtest regressions. With fewer packages involved due
to updates and britney hints, that's far less problematic now and I
don't see a hurry to remove this package.

It's worth mentioning that now that I look at this with a fresh mind, I
notice that I got a bit confused by how the certbot plugins are
organized. The dns-google plugin lives in the certbot git repository but
is then uploaded to pypi which serves as the upstream for the python-
certbot source package in Debian. Version numbers between certbot and
the plugins match but they don't absolutely have to.

As a consequence, it might be possible to cherry-pick
https://github.com/certbot/certbot/commit/b0d0a832772bc7747f65c2c2c90d0f790fa40f8a
. The python-certbot version is a bit older than that patch but
mismatches don't look very likely. The patch should apply with no major
modification to the current python-certbot-dns-google package (restrict
to the effective directory, remove tests (gah!), fix some offsets and
fix a conflict in setup.py).

My main concern at the moment is that I can't fully test the changes.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2076930

Title:
  Removal request: python-certbot-dns-google

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-certbot-dns-google/+bug/2076930/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2077464] Re: lscpu: Skip aarch64 decode path for rest of the architectures

2024-08-26 Thread Adrien Nader
I can confirm the issue:

BIOS Model name:  AMD Ryzen 7 7840HS w/ Radeon 780M Graphics
Unknown CPU @ 3.8GHz

It looks very minor however. As far as I'm concerned, it doesn't look
like it would be worth SRU'ing it, and considering we're past feature-
freeze for oracular, I'm not sure it would make it to oracular either.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2077464

Title:
  lscpu: Skip aarch64 decode path for rest of the architectures

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/util-linux/+bug/2077464/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2074069] Re: python-oauth2client is deprecated

2024-07-26 Thread Adrien Nader
** Tags added: foundations-todo

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2074069

Title:
  python-oauth2client is deprecated

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-oauth2client/+bug/2074069/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2074186] Re: pyopenssl: removed API breaks python-oauth2client

2024-07-26 Thread Adrien Nader
** Description changed:

  python-oauth2client uses deprecated pyopenssl APIs and now they've been
  removed.
+ 
+ See the actual issue in python-oauth2client :
+ https://bugs.launchpad.net/bugs/2074069
+ 
+ I'm removing the "duplicate" status because I think this prevents this
+ issue from showing up in update excuses.

** This bug is no longer a duplicate of bug 2074069
   python-oauth2client is deprecated

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2074186

Title:
  pyopenssl: removed API breaks python-oauth2client

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pyopenssl/+bug/2074186/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2073991] Re: Add FIPS defines to Noble OpenSSL header files

2024-07-26 Thread Adrien Nader
Hi Eric and thanks for the report.

The SRU process necessarily takes time and openssl is a library that is 
installed everywhere and is therefore more difficult to get through the SRU 
process.
Time-wise (including due to my own availability), I don't think there will be a 
patched openssl version included for Noble before several weeks, maybe a couple 
months. Moreover, it would be valuable to obtain a validation from the lab in 
order to know which other patches might be required.

The breakdown would be the following:
1- an openssl FIPS build in PPA, which is sent for validation,
2- the corresponding patches are added to openssl for oracular,
3- the corresponding patches are added to openssl for noble

** Tags added: foundations-todo

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2073991

Title:
  Add FIPS defines to Noble OpenSSL header files

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2073991/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2073991] Re: Add FIPS defines to Noble OpenSSL header files

2024-07-26 Thread Adrien Nader
** Changed in: openssl (Ubuntu)
Milestone: None => ubuntu-24.10

** Also affects: openssl (Ubuntu Oracular)
   Importance: Undecided
   Status: New

** Also affects: openssl (Ubuntu Noble)
   Importance: Undecided
   Status: New

** Changed in: openssl (Ubuntu Noble)
Milestone: None => noble-updates

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2073991

Title:
  Add FIPS defines to Noble OpenSSL header files

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2073991/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2074186] [NEW] pyopenssl: removed API breaks python-oauth2client

2024-07-26 Thread Adrien Nader
*** This bug is a duplicate of bug 2074069 ***
https://bugs.launchpad.net/bugs/2074069

Public bug reported:

python-oauth2client uses deprecated pyopenssl APIs and now they've been
removed.

** Affects: pyopenssl (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: update-excuse

** This bug has been marked a duplicate of bug 2074069
   python-oauth2client is deprecated

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2074186

Title:
  pyopenssl: removed API breaks python-oauth2client

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pyopenssl/+bug/2074186/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2074069] Re: python-oauth2client is deprecated

2024-07-26 Thread Adrien Nader
** Tags added: update-excuse

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2074069

Title:
  python-oauth2client is deprecated

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-oauth2client/+bug/2074069/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2059101] Re: Automatic EST certificate retrieval does not work on Ubuntu 22.04

2024-07-25 Thread Adrien Nader
With everything happening with the Noble release, I didn't handle that
back in March and then I forgot about it. Sorry about that.

Is this still relevant?

And is there a reproducer that I can run? I'm asking for a reproducer
because having to rely on a reporter or an environement I don't have
access to is particularly painful for openssl due to how sensible it is.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2059101

Title:
  Automatic EST certificate retrieval does not work on Ubuntu 22.04

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2059101/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2074069] Re: python-oauth2client is deprecated

2024-07-25 Thread Adrien Nader
** Changed in: python-oauth2client (Ubuntu)
   Status: New => Confirmed

** Changed in: python-oauth2client (Ubuntu)
   Importance: Undecided => High

** Changed in: python-oauth2client (Ubuntu)
Milestone: None => ubuntu-24.10

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2074069

Title:
  python-oauth2client is deprecated

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-oauth2client/+bug/2074069/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2074069] [NEW] python-oauth2client is deprecated

2024-07-25 Thread Adrien Nader
Public bug reported:

This package has been deprecated seven years ago and is becoming
incompatible with other packages. Recently, pyopenssl dropped an API for
PKCS#12 which python-oauth2client uses; it's getting more and more
difficult to keep the package alive, hence the need to migrate to its
replacements.

I've done a number of changes over the past weeks in order to remove this 
package. Unfortunately, some thing remain, most notably:
- pydrive2 extensively uses it, see 
https://github.com/iterative/PyDrive2/pull/221 for the most recent work on this 
topic; it's possible that vendoring the library will be required (if it can 
still be made to work!)

There are also in-review changes:
- beancount: 
https://code.launchpad.net/~adrien/ubuntu/+source/beancount/+git/beancount/+merge/469654
- cinder: 
https://code.launchpad.net/~adrien/ubuntu/+source/cinder/+git/cinder/+merge/470004
- fence-agents: 
https://code.launchpad.net/~adrien/ubuntu/+source/fence-agents/+git/fence-agents/+merge/469471

** Affects: python-oauth2client (Ubuntu)
 Importance: High
 Status: Confirmed

** Description changed:

  This package has been deprecated seven years ago and is becoming
  incompatible with other packages. Recently, pyopenssl dropped an API for
  PKCS#12 which python-oauth2client uses; it's getting more and more
  difficult to keep the package alive, hence the need to migrate to its
  replacements.
  
  I've done a number of changes over the past weeks in order to remove this 
package. Unfortunately, some thing remain, most notably:
  - pydrive2 extensively uses it, see 
https://github.com/iterative/PyDrive2/pull/221 for the most recent work on this 
topic; it's possible that vendoring the library will be required (if it can 
still be made to work!)
- - certbot: (need to check something)
  
  There are also in-review changes:
  - beancount: 
https://code.launchpad.net/~adrien/ubuntu/+source/beancount/+git/beancount/+merge/469654
  - cinder: 
https://code.launchpad.net/~adrien/ubuntu/+source/cinder/+git/cinder/+merge/470004
  - fence-agents: 
https://code.launchpad.net/~adrien/ubuntu/+source/fence-agents/+git/fence-agents/+merge/469471

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2074069

Title:
  python-oauth2client is deprecated

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-oauth2client/+bug/2074069/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2073850] Re: python3-googleapi should depend on python3-google-api-core

2024-07-23 Thread Adrien Nader
I'm going to close this as GCS uploaded a new python3-googleapi version
to Debian that is new enough for our needs and depends on
python3-google-api-core (which I packaged and Julian sponsored in
Debian). I've requested a sync that Benjamin did soon after; the package
is currently in -proposed.

** Changed in: python-googleapi (Ubuntu)
   Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2073850

Title:
  python3-googleapi should depend on python3-google-api-core

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-googleapi/+bug/2073850/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2073859] [NEW] fence-agents: use google-auth rather than oauth2client

2024-07-23 Thread Adrien Nader
Public bug reported:

python3-oauth2client has been deprecated and unmaintained for several
years. It's not compatible anymore with new version of pyopenssl. It has
also been replaced with google-auth: https://google-
auth.readthedocs.io/en/latest/oauth2client-deprecation.html

fence-agents makes the switch easy since it has dynamic support for both
python3-google-auth and python3-oauthclient as visible in
https://github.com/ClusterLabs/fence-
agents/blob/main/agents/gce/fence_gce.py#L37-L40 .

The only need is to change dependencies so that google-auth (the
prefered library) is available and it will be used.

** Affects: fence-agents (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2073859

Title:
  fence-agents: use google-auth rather than oauth2client

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/fence-agents/+bug/2073859/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2073850] [NEW] python3-googleapi should depend on python3-google-api-core

2024-07-23 Thread Adrien Nader
Public bug reported:

The new version of python-googleapi introduces a dependency on
python3-google-api-core. Now that this package has been added to the
archive, a dependency on it should be added to python-googleapi.

** Affects: python-googleapi (Ubuntu)
 Importance: High
 Assignee: Adrien Nader (adrien)
 Status: In Progress

** Changed in: python-googleapi (Ubuntu)
Milestone: None => ubuntu-24.10

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2073850

Title:
  python3-googleapi should depend on python3-google-api-core

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-googleapi/+bug/2073850/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2073242] Re: Tests require python-oauth2client

2024-07-23 Thread Adrien Nader
** Also affects: cinder (Ubuntu)
   Importance: Undecided
   Status: New

** Changed in: cinder (Ubuntu)
   Status: New => In Progress

** Changed in: cinder (Ubuntu)
 Assignee: (unassigned) => Adrien Nader (adrien)

** Changed in: cinder (Ubuntu)
   Importance: Undecided => High

** Changed in: cinder (Ubuntu)
Milestone: None => ubuntu-24.10

** Changed in: cinder
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2073242

Title:
  Tests require python-oauth2client

To manage notifications about this bug go to:
https://bugs.launchpad.net/cinder/+bug/2073242/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1988398] Re: crash due to incomplete AVX check

2024-07-17 Thread Adrien Nader
Removing the foundations-todo tag as I don't see a plan to work on this
in the near future considering the current state and infos available.

** Tags removed: foundations-todo

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1988398

Title:
  crash due to incomplete AVX check

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnutls28/+bug/1988398/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1988398] Re: crash due to incomplete AVX check

2024-07-17 Thread Adrien Nader
Is there still a wish for this on Jammy?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1988398

Title:
  crash due to incomplete AVX check

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnutls28/+bug/1988398/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2073366] [NEW] beancount: remove dependency on python3-oauth2client

2024-07-17 Thread Adrien Nader
Public bug reported:

python3-oauth2client is abandonned.

** Affects: beancount (Ubuntu)
 Importance: High
 Assignee: Adrien Nader (adrien)
 Status: In Progress

** Changed in: beancount (Ubuntu)
 Assignee: (unassigned) => Adrien Nader (adrien)

** Changed in: beancount (Ubuntu)
Milestone: None => ubuntu-24.10

** Changed in: beancount (Ubuntu)
   Importance: Undecided => High

** Changed in: beancount (Ubuntu)
   Status: New => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2073366

Title:
  beancount: remove dependency on python3-oauth2client

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/beancount/+bug/2073366/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2069355] Re: python-google-api-core: please package

2024-07-15 Thread Adrien Nader
Done: https://launchpad.net/ubuntu/+source/python-google-api-core

** Changed in: Ubuntu Oracular
   Status: In Progress => Fix Released

** Changed in: Ubuntu Oracular
Milestone: None => ubuntu-24.10

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2069355

Title:
  python-google-api-core: please package

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+bug/2069355/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2072750] Re: Please migrate hwloc to 2.11.0-2

2024-07-11 Thread Adrien Nader
** Description changed:

  hwloc (2.10.0-1build1 to 2.11.0-2)
  
- Migration status for hwloc (2.10.0-1build1 to 2.11.0-2): Will attempt 
migration (Any information below is purely informational)
- Additional info:
- 7 days old
+ Migration status for hwloc (2.10.0-1build1 to 2.11.0-2): Will attempt 
migration (Any information below is purely informational)
+ Additional info:
+ 7 days old
+ 
+ 
+ It depends on "hwloc-contrib" packages to migrate and dose-distcheck reports 
that in turn this requires "libnvidia-compute-550 (>= 550.90.07)" which cannot 
migrate due to other reasons (related to the kernel).
+ 
+missing:
+ pkg:
+  package: libhwloc-contrib-plugins
+  version: 2.11.0-1
+  architecture: arm64
+  unsat-dependency: libnvidia-compute-550 (>= 550.90.07)

** Summary changed:

- Please migrate hwloc to 2.11.0-2
+ hwloc 2.11.0-2 cannot migrate without libnvidia-compute-550 (>= 550.90.07)

** Summary changed:

- hwloc 2.11.0-2 cannot migrate without libnvidia-compute-550 (>= 550.90.07)
+ hwloc 2.11.0-2 stuck in proposed as it requires libnvidia-compute-550 (>= 
550.90.07)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2072750

Title:
  hwloc 2.11.0-2 stuck in proposed as it requires libnvidia-compute-550
  (>= 550.90.07)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/hwloc/+bug/2072750/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1990216] Re: backport fix for "OpenSSL 3 cannot decrypt data encrypted with OpenSSL 1.1 with blowfish in OFB or CFB modes" to Jammy

2024-07-09 Thread Adrien Nader
Hi Fredrik, can you confirm that I understand correctly: you have one
node on 24.04 and the other nodes on 22.04?

Can you test with other nodes on 20.04 in order to confirm you are
effectively encountering this issue?

Thanks.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1990216

Title:
  backport fix for "OpenSSL 3 cannot decrypt data encrypted with OpenSSL
  1.1 with blowfish in OFB or CFB modes" to Jammy

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1990216/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2071468] Re: ELF package metadata failure: environment variable ‘DEB_HOST_ARCH’ not defined

2024-07-09 Thread Adrien Nader
** Also affects: jose (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: libtpms (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: proftpd (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: swtpm (Ubuntu)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2071468

Title:
  ELF package metadata failure: environment variable ‘DEB_HOST_ARCH’ not
  defined

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/asymptote/+bug/2071468/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1297025] Re: Either the changelog.gz is missing or there is an erroneous link in the libssl1.0.0 package

2024-07-04 Thread Adrien Nader
I had misunderstood the actual issue. I thought the changelog.gz files
was never there but it turns out it's created and installed in the
directories to package but then pkgbinarymangler's pkgstripfiles runs
and deletes them.

Resolution is the same: don't create the symlinks.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1297025

Title:
  Either the changelog.gz is missing or there is an erroneous link in
  the libssl1.0.0 package

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1297025/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2069355] Re: python-google-api-core: please package

2024-07-03 Thread Adrien Nader
** Also affects: Ubuntu Oracular
   Importance: High
 Assignee: Adrien Nader (adrien)
   Status: In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2069355

Title:
  python-google-api-core: please package

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+bug/2069355/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2070046] Re: googleapi missing runtime dependency

2024-07-03 Thread Adrien Nader
*** This bug is a duplicate of bug 2069355 ***
https://bugs.launchpad.net/bugs/2069355

** This bug has been marked a duplicate of bug 2069355
   python-google-api-core: please package

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2070046

Title:
  googleapi missing runtime dependency

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-googleapi/+bug/2070046/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1297025] Re: Either the changelog.gz is missing or there is an erroneous link in the libssl1.0.0 package

2024-07-02 Thread Adrien Nader
** Changed in: openssl (Ubuntu)
 Assignee: (unassigned) => Adrien Nader (adrien)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1297025

Title:
  Either the changelog.gz is missing or there is an erroneous link in
  the libssl1.0.0 package

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1297025/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2067672] Re: [SRU] Openssl copyright/changelog.Debian.gz file points at non-existent location

2024-07-02 Thread Adrien Nader
** Changed in: openssl (Ubuntu)
Milestone: None => ubuntu-24.10

** Also affects: openssl (Ubuntu Noble)
   Importance: Undecided
   Status: New

** Also affects: openssl (Ubuntu Oracular)
   Importance: Undecided
   Status: New

** Changed in: openssl (Ubuntu Noble)
   Importance: Undecided => Medium

** Changed in: openssl (Ubuntu Noble)
   Status: New => Triaged

** Changed in: openssl (Ubuntu Noble)
Milestone: None => ubuntu-24.04.1

** Changed in: openssl (Ubuntu Oracular)
   Importance: Undecided => Medium

** Changed in: openssl (Ubuntu Oracular)
   Status: New => In Progress

** Changed in: openssl (Ubuntu Oracular)
 Assignee: (unassigned) => Adrien Nader (adrien)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2067672

Title:
  [SRU] Openssl copyright/changelog.Debian.gz file points at non-
  existent location

To manage notifications about this bug go to:
https://bugs.launchpad.net/oem-priority/+bug/2067672/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2067672] Re: [SRU] Openssl copyright/changelog.Debian.gz file points at non-existent location

2024-07-01 Thread Adrien Nader
Hey, a quick update.

With openssl 3.2.1 uploaded to Oracular, I've prepared the subsequent
3.2.2 (doing it so soon wasn't planned initially).

I'm including a fix for this and for #1297025 :
https://git.launchpad.net/~adrien/ubuntu/+source/openssl/commit/?id=5f94de31126ae59f2481fe77a397df9fb0941bd8

This will satisfy the SRU requirement that the fix is first included in
the development release.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2067672

Title:
  [SRU] Openssl copyright/changelog.Debian.gz file points at non-
  existent location

To manage notifications about this bug go to:
https://bugs.launchpad.net/oem-priority/+bug/2067672/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1297025] Re: Either the changelog.gz is missing or there is an erroneous link in the libssl1.0.0 package

2024-07-01 Thread Adrien Nader
** Changed in: openssl (Ubuntu)
   Status: Triaged => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1297025

Title:
  Either the changelog.gz is missing or there is an erroneous link in
  the libssl1.0.0 package

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1297025/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2067384] Re: openssl: merge 3.2.1-3 from unstable

2024-06-24 Thread Adrien Nader
** Changed in: openssl (Ubuntu)
   Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2067384

Title:
  openssl: merge 3.2.1-3 from unstable

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2067384/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2069740] Re: camitk: FTBFS with VTK 9.3

2024-06-18 Thread Adrien Nader
** Bug watch added: Debian Bug tracker #1073793
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1073793

** Also affects: camitk (Debian) via
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1073793
   Importance: Unknown
   Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2069740

Title:
  camitk: FTBFS with VTK 9.3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/camitk/+bug/2069740/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2069714] Re: therion: 6.2.1-1build1 FTBFS with texlive-binaries 2024.20240313.70630+ds-2

2024-06-18 Thread Adrien Nader
** Tags added: update-excuse

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2069714

Title:
  therion: 6.2.1-1build1 FTBFS with texlive-binaries
  2024.20240313.70630+ds-2

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/therion/+bug/2069714/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2069740] [NEW] camitk: FTBFS with VTK 9.3

2024-06-18 Thread Adrien Nader
Public bug reported:

There are several issues with VTK 9.3. Upstream bug report at
https://gricad-gitlab.univ-grenoble-alpes.fr/CamiTK/CamiTK/-/issues/193
.

I'm copying my report below:


In sdk/components/vtkimage/RawDataDialog.cpp, vtkConfigure.h is not
packaged anymore and vtkType.h should be included instead

In sdk/actions/mesh/basicmesh/MeshQuality.cpp, VTK 9.2 has renamed
SetHexQualityMeasureToMaxEdgeRatios and
SetQuadQualityMeasureToMaxEdgeRatios: the trailing 's' is removed

In sdk/actions/mesh/basicmesh/MeshQuality.cpp, VTK 9.2 "vtkMeshQuality
and vtkCellQuality [...] no longer supports the AspectBeta tetrahedron
metric", and I'm not sure what to do as this could impact the library's
API.

** Affects: camitk (Ubuntu)
 Importance: Undecided
 Status: Triaged


** Tags: update-excuse

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2069740

Title:
  camitk: FTBFS with VTK 9.3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/camitk/+bug/2069740/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2069722] Re: dpkg: ELF package metadata prevents some packages from building

2024-06-18 Thread Adrien Nader
Based on autopkgtests, at least these packages are impacted: asymptote,
golang-logrus, graphite2, gsequencer, mosh, python-cmake-build-
extension, rust-libc, seqan3, slt.

Based on my own experience, camitk is also impacted.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2069722

Title:
  dpkg: ELF package metadata prevents some packages from building

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dpkg/+bug/2069722/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2069722] [NEW] dpkg: ELF package metadata prevents some packages from building

2024-06-18 Thread Adrien Nader
Public bug reported:

Some packages do not build anymore, citing a missing environment
variable.

** Affects: dpkg (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2069722

Title:
  dpkg: ELF package metadata prevents some packages from building

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dpkg/+bug/2069722/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2069714] Re: therion: 6.2.1-1build1 FTBFS (vtk9 9.3?)

2024-06-18 Thread Adrien Nader
** Bug watch added: Debian Bug tracker #1072828
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072828

** Also affects: texlive-bin (Debian) via
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072828
   Importance: Unknown
   Status: Unknown

** Summary changed:

- therion: 6.2.1-1build1 FTBFS (vtk9 9.3?)
+ therion: 6.2.1-1build1 FTBFS with texlive-binaries 2024.20240313.70630+ds-2

** Description changed:

- The therion package fails to builds. It might be related to vtk9 9.3
- since it started with this transition but the issue is a missing font
- file (logo10 at 600dpi) for latex which is not completely consistent
- with that. Since this file is required only if other font files are not
- found, we can add a depends on texlive-fonts-recommended and skip the
- issue.
+ The therion package fails to builds. mktexpk seems to not work and is
+ required sincea font file for latex (logo10 at 600dpi) is missing. Since
+ this file is required only if other font files are not found, we can add
+ a depends on texlive-fonts-recommended and skip the issue it seems.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2069714

Title:
  therion: 6.2.1-1build1 FTBFS with texlive-binaries
  2024.20240313.70630+ds-2

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/therion/+bug/2069714/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2069714] [NEW] therion: 6.2.1-1build1 FTBFS (vtk9 9.3?)

2024-06-18 Thread Adrien Nader
Public bug reported:

The therion package fails to builds. It might be related to vtk9 9.3
since it started with this transition but the issue is a missing font
file (logo10 at 600dpi) for latex which is not completely consistent
with that. Since this file is required only if other font files are not
found, we can add a depends on texlive-fonts-recommended and skip the
issue.

** Affects: therion (Ubuntu)
 Importance: High
 Assignee: Adrien Nader (adrien)
 Status: In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2069714

Title:
  therion: 6.2.1-1build1 FTBFS (vtk9 9.3?)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/therion/+bug/2069714/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2069612] Re: gdcm: FTBFS with vtk9 9.3

2024-06-17 Thread Adrien Nader
** Description changed:

  gdcm 3.0.24-1build1 FTBFS with VTK9 9.3
+ 
+ First error:
+ 
+ CMake Error at /usr/lib/x86_64-linux-gnu/cmake/vtk-9.3/vtkModule.cmake:2121 
(message):
+   The `SPDX_DESTINATION` must not be an absolute path.  Use
+   `CMAKE_INSTALL_PREFIX` to keep everything in a single installation prefix.
+ 
+ Second error (when first is fixed) is about CMAKE_INSTALL_INCLUDEDIR for
+ the new file usr/include/vtkgdcmpython.h

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2069612

Title:
  gdcm: FTBFS with vtk9 9.3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gdcm/+bug/2069612/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2069612] [NEW] gdcm: FTBFS with vtk9 9.3

2024-06-17 Thread Adrien Nader
Public bug reported:

gdcm 3.0.24-1build1 FTBFS with VTK9 9.3

** Affects: gdcm (Ubuntu)
 Importance: High
 Assignee: Adrien Nader (adrien)
 Status: In Progress


** Tags: update-excuse

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2069612

Title:
  gdcm: FTBFS with vtk9 9.3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gdcm/+bug/2069612/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2069355] Re: python-google-api-core: please package

2024-06-13 Thread Adrien Nader
NB: I wasn't able to assign the bug to the python-google-api-core
package, probably because it doesn't exist yet.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2069355

Title:
  python-google-api-core: please package

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+bug/2069355/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2069355] [NEW] python-google-api-core: please package

2024-06-13 Thread Adrien Nader
Public bug reported:

Please package python-google-api-core which is now a dependency of
python-googleapi.

** Affects: ubuntu
 Importance: High
 Assignee: Adrien Nader (adrien)
 Status: In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2069355

Title:
  python-google-api-core: please package

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+bug/2069355/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2069129] Re: [UBUNTU 24.04] Cannot find or install the 'crypto-policies' package

2024-06-12 Thread Adrien Nader
Hi,

crypto-policies is not supported on Ubuntu: it requires deep integration
with the packages and their configurations. This integration doesn't
exist and is unlikely to ever exist outside of redhat-based
distributions because of how tight it has to be. Past uses of crypto-
policies on Ubuntu and Debian have therefore been without effect.

Note that I'm working on something related that should be announced soon
with a 26.04 target.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2069129

Title:
  [UBUNTU 24.04] Cannot find or install the 'crypto-policies' package

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2069129/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2068713] Re: shoogle: please remove (unmaintained, low usage)

2024-06-07 Thread Adrien Nader
** Description changed:

  Shoogle is not compatible with new python-googleapi releases. It is also
  low-popcon ( https://qa.debian.org/popcon.php?package=shoogle ). There
  has been one upstream version uploaded to debian in 2017 and then only
  fixes by the packager.
  
  The package seems moderately active though but he hasn't released
  version -11 yet even though it's been in the VCS for 2 years.
  
  Unfortunately, shoogle is blocking a new version of python-googleapi
  that is itself needed to get rid of python-oauth2client.
  
+ Also, no reverse-depencies:
+ 
+ % reverse-depends src:shoogle
+ No reverse dependencies found
+ % reverse-depends src:shoogle -a source
+ No reverse dependencies found
+ 
  As such, please remove from oracular and we can see later if it's
  updating and coming back.
  
  PS: https://bugs.launchpad.net/ubuntu/+source/shoogle/+bug/2062999 was
  recently reported and indicates there is at least one (tentative?) user
  on Noble but it also indicates the package might not be working well on
  Noble already.
  
  Thanks.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2068713

Title:
  shoogle: please remove (unmaintained, low usage)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shoogle/+bug/2068713/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2068716] Re: pydrive: please remove (replaced by pydrive2)

2024-06-07 Thread Adrien Nader
** Description changed:

  Pydrive has been replaced by pydrive2 and it depends on python-
  oauth2client which we'd like to remove as it is deprecated,
  unmaintained, and is preventing some migrations.
  
  Please remove pydrive so that we can continue with the removal.
  
  Note that pydrive2 also uses python-oauth2client but we need to start
  somewhere and if there's only one package that depends on that library,
  it will be easier to e.g. vendor if needed.
+ 
+ % reverse-depends src:pydrive
+ Reverse-Recommends
+ ==
+ * ubuntu-budgie-desktop (for python3-pydrive)
+ * ubuntu-budgie-desktop-raspi [arm64 armhf]
+ 
+ % reverse-depends src:pydrive -a source
+ No reverse dependencies found
+ 
+ pydrive2 will be picked up (and we can also remove the Recommends)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2068716

Title:
  pydrive: please remove (replaced by pydrive2)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pydrive/+bug/2068716/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2068716] [NEW] pydrive: please remove (replaced by pydrive2)

2024-06-07 Thread Adrien Nader
Public bug reported:

Pydrive has been replaced by pydrive2 and it depends on python-
oauth2client which we'd like to remove as it is deprecated,
unmaintained, and is preventing some migrations.

Please remove pydrive so that we can continue with the removal.

Note that pydrive2 also uses python-oauth2client but we need to start
somewhere and if there's only one package that depends on that library,
it will be easier to e.g. vendor if needed.

** Affects: pydrive (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2068716

Title:
  pydrive: please remove (replaced by pydrive2)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pydrive/+bug/2068716/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2068713] [NEW] shoogle: please remove (unmaintained, low usage)

2024-06-07 Thread Adrien Nader
Public bug reported:

Shoogle is not compatible with new python-googleapi releases. It is also
low-popcon ( https://qa.debian.org/popcon.php?package=shoogle ). There
has been one upstream version uploaded to debian in 2017 and then only
fixes by the packager.

The package seems moderately active though but he hasn't released
version -11 yet even though it's been in the VCS for 2 years.

Unfortunately, shoogle is blocking a new version of python-googleapi
that is itself needed to get rid of python-oauth2client.

As such, please remove from oracular and we can see later if it's
updating and coming back.

PS: https://bugs.launchpad.net/ubuntu/+source/shoogle/+bug/2062999 was
recently reported and indicates there is at least one (tentative?) user
on Noble but it also indicates the package might not be working well on
Noble already.

Thanks.

** Affects: shoogle (Ubuntu)
 Importance: High
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2068713

Title:
  shoogle: please remove (unmaintained, low usage)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shoogle/+bug/2068713/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2062999] Re: Errors during install

2024-06-07 Thread Adrien Nader
Shoogle hasn't been updated in several years and I wouldn't be surprised
there are compatibility issues with new python versions.

I was actually coming here to ask for its removal as it's not compatible
with new python-googleapi (which had not been updated in several years
either). The incompatibility might be small but everything is relative
to the actual usage of the package.

Do you use this package actively?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2062999

Title:
  Errors during install

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shoogle/+bug/2062999/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2062999] Re: Errors during install

2024-06-07 Thread Adrien Nader
Also, removal would only apply for Oracular (the development version),
not Noble.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2062999

Title:
  Errors during install

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shoogle/+bug/2062999/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2067672] Re: [SRU] Openssl copyright/changelog.Debian.gz file points at non-existent location

2024-06-04 Thread Adrien Nader
Noble will not use 3.2.1. Only oracular will.

Unfortunately, I don't have a very good answer about how to get this fix
in Noble as quickly as possible.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2067672

Title:
  [SRU] Openssl copyright/changelog.Debian.gz file points at non-
  existent location

To manage notifications about this bug go to:
https://bugs.launchpad.net/oem-priority/+bug/2067672/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2067672] Re: [SRU] Openssl copyright/changelog.Debian.gz file points at non-existent location

2024-05-31 Thread Adrien Nader
Hi and thanks for the patch.

Process-wise, the changes should land in oracular first and I don't
think I changed anything regarding that, even in my merge proposal for
3.2.1. I think we can integrate your patch in oracular in the version
that follows the 3.2.1 merge (I'd prefer not to respin my current merge
request) and which will also include at least afix for
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1297025 (and
maybe a security patch too).

  lrwxrwxrwx 1 root root 23 Feb 21 11:45 /usr/share/doc/libssl-
dev/changelog.gz -> ../libssl3/changelog.gz

but ../libssl3/changelog.gz doesn't exist.

This is on my list of things to do in the comings days, or weeks at
most.

I guess your main worry was the copyright file however.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2067672

Title:
  [SRU] Openssl copyright/changelog.Debian.gz file points at non-
  existent location

To manage notifications about this bug go to:
https://bugs.launchpad.net/oem-priority/+bug/2067672/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1297025] Re: Either the changelog.gz is missing or there is an erroneous link in the libssl1.0.0 package

2024-05-31 Thread Adrien Nader
** Changed in: openssl (Ubuntu)
   Status: In Progress => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1297025

Title:
  Either the changelog.gz is missing or there is an erroneous link in
  the libssl1.0.0 package

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1297025/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2063094] Re: unattended-upgrades is running forever

2024-05-30 Thread Adrien Nader
Attaching 20 seconds of strace output for my case.

This actually lead me to look at /var/log/unattended-
upgrades/unattended-upgrades-shutdown.log and I Noticed the following:

2024-01-18 15:01:16,996 WARNING - SIGTERM or SIGHUP received, stopping 
unattended-upgrades only if it is running
2024-01-18 15:01:22,365 WARNING - Could not get delay inhibitor lock
2024-01-18 15:01:24,367 WARNING - Unable to monitor PrepareForShutdown() 
signal, polling instead.
2024-01-18 15:01:24,367 WARNING - To enable monitoring the PrepareForShutdown() 
signal instead of polling please install the python3-gi package

I also have that in my journal logs:

systemd[1]: Starting systemd-logind.service - User Login Management...
(d-logind)[1994541]: systemd-logind.service: Failed to set up mount 
namespacing: Permission denied
(d-logind)[1994541]: systemd-logind.service: Failed at step NAMESPACE spawning 
/lib/systemd/systemd-logind: Permission denied
systemd[1]: systemd-logind.service: Main process exited, code=exited, 
status=226/NAMESPACE
systemd[1]: systemd-logind.service: Failed with result 'exit-code'.
systemd[1]: Failed to start systemd-logind.service - User Login Management.
systemd[1]: systemd-logind.service: Scheduled restart job, restart counter is 
at 1.
systemd[1]: Stopped systemd-logind.service - User Login Management.
systemd[1]: modprobe@drm.service - Load Kernel Module drm was skipped because 
of an unmet condition check (ConditionCapability=CAP_SYS_MODULE).

and

[system] Failed to activate service 'org.freedesktop.login1': timed out 
(service_start_timeout=25000ms)
[system] Rejected: destination has a full message queue, 0 matched rules; 
type="error", sender="(unset)" ((bus)) interface="(unset)" member="(unset)" 
error name="org.freedesktop.DBus.Error.TimedOut" requested_reply="1" 
destination=":1.1" (uid=0 pid=115 comm="/usr/bin/python3 
/usr/share/unattended-upgrades/un")
(last line is repeated 9 times in total)

Unfortunately I can't really go back and see when this started.
Considering the total CPU time and the average CPU usage (which seems to
be slightly above 50% in practice, with peaks at 100%), the issue might
be present since the machine was booted.

However I now see the link with an issue I've been seeing for a long
time on the host in dmesg:

audit: type=1400 audit(1717098847.156:4846706): apparmor="DENIED"
operation="mount" info="failed flags match" error=-13 profile="lxc-
container-default-cgns" name="/" pid=840997 comm="(d-logind)" flags="rw,
rslave"

I found some related topics which indicate I'm not entirely alone but I
really can't tell if the bug initially reported here and mine are the
same. I think the universal teaching here is that there can be loops for
many different reasons, including maybe through dbus and service
activation.

** Attachment added: "unattended-upgrades.strace"
   
https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/2063094/+attachment/5784329/+files/unattended-upgrades.strace

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2063094

Title:
  unattended-upgrades is running forever

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/2063094/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2063094] Re: unattended-upgrades is running forever

2024-05-30 Thread Adrien Nader
Also, note that out of my three stuck processes, it seems got unstuck.
Can't tell why however.

I also talked about running out of space but I don't think that was the
issue: it was the reason I looked at the machine but it wasn't related
to unattended-upgrades.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2063094

Title:
  unattended-upgrades is running forever

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/2063094/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2063094] Re: unattended-upgrades is running forever

2024-05-30 Thread Adrien Nader
I have 10 backtraces with python3-dbg installed and therefore more
complete backtraces (but I wouldn't call them very readable). I'm going
to attach them here (.tar.xz archive which extracts in the current
directory).

** Attachment added: "unattended-upgrades-bt.tar.xz"
   
https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/2063094/+attachment/5784171/+files/unattended-upgrades-bt.tar.xz

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2063094

Title:
  unattended-upgrades is running forever

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/2063094/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2063094] Re: unattended-upgrades is running forever

2024-05-30 Thread Adrien Nader
I'm seeing very different traces. Sorry. :)

I have processes which appear stuck and which have been using more than
11 weeks of CPU time over the past 132 days. No idea if it was in only
one run (I think I looked at CPU time less than 132 days ago, and even
less than 11 weeks ago, so it probably hasn't been stuck for 11 weeks).
This happens in three LXC containers which run debian stable. It seems I
ran out of space on the containers, but definitely not 11 weeks ago,
maybe two weeks ago at most.

Traces I see:

  Thread 1 (Thread 0x7f9ca69f4040 (LWP 115) "unattended-upgr"):
  #0  0x7f9ca6a7ad26 in _xbegin () at 
/usr/lib/gcc/x86_64-linux-gnu/12/include/rtmintrin.h:52
  #1  __GI___lll_trylock_elision (futex=0x2b0c9a0, adapt_count=0x89) at 
../sysdeps/unix/sysv/linux/x86/elision-trylock.c:46
  #2  0x00a840d8 in _PyRuntime ()
  #3  0x0058a52a in PyArg_ParseTupleAndKeywords (args=, 
keywords=, format=, kwlist=) at 
../Python/getargs.c:1394
  #4  0x0058a245 in acquire_timed (timeout=, 
lock=0x7fffcf0f55f0) at ../Modules/_threadmodule.c:98
  #5  lock_PyThread_acquire_lock (self=0x2b0c9a0, args=, 
kwds=) at ../Modules/_threadmodule.c:179
  #6  0x00550bbe in method_vectorcall_VARARGS_KEYWORDS 
(func=0x7f9ca6976f70, args=0x7f9ca6cff398, nargsf=, 
kwnames=) at ../Objects/descrobject.c:364
  #7  0x0053ac2c in _PyObject_VectorcallTstate (kwnames=, nargsf=, args=, callable=0x7f9ca6976f70, 
tstate=0xa840d8 <_PyRuntime+166328>) at ../Include/internal/pycore_call.h:92
  #8  PyObject_Vectorcall (callable=0x7f9ca6976f70, args=, 
nargsf=, kwnames=) at ../Objects/call.c:299
  #9  0x0052b940 in _PyEval_EvalFrameDefault (tstate=, 
frame=, throwflag=) at ../Python/ceval.c:4772
  #10 0x0052360b in _PyEval_EvalFrame (throwflag=0, 
frame=0x7f9ca6cff020, tstate=0xa840d8 <_PyRuntime+166328>) at 
../Include/internal/pycore_ceval.h:73
  #11 _PyEval_Vector (args=0x0, argcount=0, kwnames=0x0, locals=, func=0x7f9ca69ba020, tstate=0xa840d8 <_PyRuntime+166328>) at 
../Python/ceval.c:6435
  #12 PyEval_EvalCode (co=0x2959f10, globals=, locals=) at ../Python/ceval.c:1154
  #13 0x00647497 in run_eval_code_obj (tstate=0xa840d8 
<_PyRuntime+166328>, co=0x2959f10, globals=0x7f9ca69dec80, 
locals=0x7f9ca69dec80) at ../Python/pythonrun.c:1714
  #14 0x00644d4f in run_mod (mod=, filename=, globals=0x7f9ca69dec80, locals=0x7f9ca69dec80, flags=, 
arena=) at ../Python/pythonrun.c:1735
  #15 0x00651010 in pyrun_file (fp=fp@entry=0x2906830, 
filename=filename@entry=0x7f9ca6918f80, start=start@entry=257, 
globals=globals@entry=0x7f9ca69dec80, locals=locals@entry=0x7f9ca69dec80, 
closeit=closeit@entry=1, flags=0x7fffcf0f5a68) at ../Python/pythonrun.c:1630
  #16 0x00650d5b in _PyRun_SimpleFileObject (fp=fp@entry=0x2906830, 
filename=filename@entry=0x7f9ca6918f80, closeit=closeit@entry=1, 
flags=flags@entry=0x7fffcf0f5a68) at ../Python/pythonrun.c:440
  #17 0x00650b84 in _PyRun_AnyFileObject (fp=0x2906830, 
filename=0x7f9ca6918f80, closeit=1, flags=0x7fffcf0f5a68) at 
../Python/pythonrun.c:79
  #18 0x0064f90f in pymain_run_file_obj (skip_source_first_line=0, 
filename=0x7f9ca6918f80, program_name=0x7f9ca69e02b0) at ../Modules/main.c:360
  #19 pymain_run_file (config=0xa6a120 <_PyRuntime+59904>) at 
../Modules/main.c:379
  #20 pymain_run_python (exitcode=0x7fffcf0f5a64) at ../Modules/main.c:601
  #21 Py_RunMain () at ../Modules/main.c:680
  #22 0x006275c7 in Py_BytesMain (argc=, argv=) at ../Modules/main.c:734
  #23 0x7f9ca6a1c1ca in ?? () from /lib/x86_64-linux-gnu/libc.so.6
  #24 0x7fffcf0f5c80 in ?? ()
  #25 0x00627530 in frame_dummy ()
  #26 0x000300400040 in ?? ()
  #27 0x7fffcf0f5c98 in ?? ()
  #28 0x7fffcf0f5c98 in ?? ()
  #29 0x108cfa692055372a in ?? ()
  #30 0x in ?? ()


Another case:

  Thread 1 (Thread 0x7f9ca69f4040 (LWP 115) "unattended-upgr"):
  #0  0x7f9ca643818d in _dbus_header_cache_check (field=5, 
header=0x9156278) at ../../../dbus/dbus-marshal-header.c:252
  #1  _dbus_header_get_field_basic (header=header@entry=0x9156278, 
field=field@entry=5, type=type@entry=117, value=value@entry=0x7fffcf0f5484) at 
../../../dbus/dbus-marshal-header.c:1374
  #2  0x7f9ca643cde1 in dbus_message_get_reply_serial 
(message=message@entry=0x9156270) at ../../../dbus/dbus-message.c:1202
  #3  0x7f9ca6432034 in check_for_reply_unlocked (client_serial=3814221, 
connection=0x2a0f1e0) at ../../../dbus/dbus-connection.c:2287
  #4  check_for_reply_and_update_dispatch_unlocked 
(connection=connection@entry=0x2a0f1e0, pending=pending@entry=0x2a40c60) at 
../../../dbus/dbus-connection.c:2355
  #5  0x7f9ca6432233 in _dbus_connection_block_pending_call 
(pending=0x2a40c60) at ../../../dbus/dbus-connection.c:2474
  #6  0x7f9ca644404a in dbus_pending_call_block (pending=) 
at ../../../dbus/dbus-pending-call.c:768
  #7  0x7f9ca6432872 in dbus_connection_send_with_reply_and_block 
(connection=0x

[Bug 244250] Re: Spurious reboot notifications caused by libssl upgrades.

2024-05-30 Thread Adrien Nader
The reason I want to remove the code is that it wasn't meant for
Desktop. It works on Desktop when using wayland but this is was
definitely not the intent back then. As I say in
https://code.launchpad.net/~adrien/ubuntu/+source/openssl/+git/openssl/+merge/466581
, I don't think the postinst can be fixed due the behavior not having
been specified: you can't fix something if the intent is unknown.

I am saddened that needrestart is not on desktop machines but on the
other hand, the code has probably never really worked fine for the past
10 or 15 years. It's not like we would be removing something that works
in favor of something that isn't ready.

By the way, I run a server install on my laptop unfortunately so I
experience the needrestart path. That being said, I've only heard
complaints about the current postinst.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/244250

Title:
  Spurious reboot notifications caused by libssl upgrades.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/244250/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2067384] Re: openssl: merge 3.2.1-3 from unstable

2024-05-30 Thread Adrien Nader
** Description changed:

  Unstable has openssl 3.2.1 which is need to fix some tests for nodejs
  and some features for cryptsetup and is a good step to 3.3 for 24.10.
+ 
+ Merge request:
+ 
https://code.launchpad.net/~adrien/ubuntu/+source/openssl/+git/openssl/+merge/466581

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2067384

Title:
  openssl: merge 3.2.1-3 from unstable

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2067384/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2058017] Re: openssl is not LTO-safe

2024-05-29 Thread Adrien Nader
** Changed in: openssl (Ubuntu)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2058017

Title:
  openssl is not LTO-safe

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2058017/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2067384] [NEW] openssl: merge 3.2.1-3 from unstable

2024-05-28 Thread Adrien Nader
Public bug reported:

Unstable has openssl 3.2.1 which is need to fix some tests for nodejs
and some features for cryptsetup and is a good step to 3.3 for 24.10.

** Affects: openssl (Ubuntu)
 Importance: High
 Assignee: Adrien Nader (adrien)
 Status: In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2067384

Title:
  openssl: merge 3.2.1-3 from unstable

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2067384/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 244250] Re: Spurious reboot notifications caused by libssl upgrades.

2024-05-28 Thread Adrien Nader
I did some archeology because I'm trying to get rid of the Ubuntu delta
compared to Debian.

I think the code change in 1.0.0e-2ubuntu3 is problematic. No blame: the
shell script was already hairy and difficult to understand and in order
to spot that, I had to identify a chunk of dead code, remove it, and
come back on the script again months later.

In short, I'm going to drop the postinst.

The current code is easier to read as it's shorter:

if [ "$1" = "configure" ]
then
if [ ! -z "$2" ] && [ ! -x /usr/lib/needrestart/apt-pinvoke ] ; then
if ! pidof /usr/lib/xorg/Xorg > /dev/null && [ -x 
/usr/share/update-notifier/notify-reboot-required ]; then
/usr/share/update-notifier/notify-reboot-required
fi
fi
fi

IOW, apt-pinvoke must be chmod -x (i.e. we're on Desktop), X must not be
running (i.e. we're on Server), then we'll call notify-reboot-required.

Of course, with wayland now, you could be on desktop with a GUI and pass
the pidof test. Still, that's not the intent and wasn't. Pidof is a poor
proxy and I'll rather remove the code than add another special case.

I could _maybe_ be convinced of removing the pidof test but keeping the
apt-pinvoke one though.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/244250

Title:
  Spurious reboot notifications caused by libssl upgrades.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/244250/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2066024] [NEW] eso-midas: please remove due to FTBFS

2024-05-17 Thread Adrien Nader
Public bug reported:

Please remove eso-midas.

eso-midas FTBFS on all architectures due to a crash when running its
testuite (which it does during package building), this is the issue
described in https://bugs.launchpad.net/ubuntu/+source/eso-
midas/+bug/2058971 . It was first noticed with time_t changes but is not
related to time_t.

This is probably due to _FORTIFY_SOURCE=3 and the issue doesn't happen
on Debian it seems (no ftbfs there). It is not a spurious error though.

The crux is the following backtrace excerpt:

#7 0x77ed39e5 in snprintf (__fmt=0x77f0dbc7 "%10d",
__n=88, __s=0x77f7168a  "") at /usr/include/x86_64-linux-
gnu/bits/stdio2.h:54

Relevant code is:

for (nr=0; nr<(n2-n1)*10; nr+=10)
(void) snprintf(&work[nr],(size_t)88,"%10d",KIWORDS[koffs++]);

The project's code is quite obscure, mostly undocumented, previous-
millenium grade and even without considering all of this, is quite
certainly wrong because the buffer offset (&work[nr]) moves forward due
to the loop but the "88" is not decreased accordingly.

I don't understand the code or its usage enough to be confident I can
produce an appropriate fix, especially since the code is structured that
way in order to format values in a specific way (which is unknown to
me).

For the past 10 years or so, upstream has only been doing maintenance:
there was actually an update in February 2023. However there are tons of
warnings about buffer overflows, especially s(n)printf-related, and the
current issue flew under the radar: that's quite telling of how many
problems there probably are.

It is (very) low-popcon: https://qa.debian.org/popcon.php?package=eso-
midas

There are no reverse-depend besides astro-frameworks (Debian Astro Team)
which Recommends it.

For completeness, I should mention there are reverse-test-triggers
however: fitsverify, missfits, stiff.

Contacting upstream involves using a mailing-list which you can do
through an HTML form on https://www.eso.org/sci/software/esomidas/midas-
mailform.html . The list is pre-moderated, there are no public archives
and I wasn't able to use the HTML and/or craft appropriate messages to
get archives (or anything at all) in my inbox; I didn't get error
messages either. At that point, I gave up (we don't have proof either
that there wouldn't be subsequent failures).

For all of the above, I think it is appropriate to remove eso-midas. I
am however unsure about preventing future syncs because a) maybe the
next update will fix the issue, b) it's a slow-changing package so there
won't be a lot of noise.

** Affects: eso-midas (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2066024

Title:
  eso-midas: please remove due to FTBFS

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/eso-midas/+bug/2066024/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2058971] Re: proposed-migration for eso-midas 23.02pl1.0-1build1

2024-05-15 Thread Adrien Nader
For reference, backtrace of the issue (I've inserted a call to gdb for
"prepa.exe" in the "inmidas" shell script. There are tons of fortify
warnings during build. Also, note that the Debian maintainer disabled
implicit function declarations, citing that the code is very old, and
indeed, it started in the 80s.


*** buffer overflow detected ***: terminated

Program received signal SIGABRT, Aborted.
0x77be7b1c in pthread_kill () from /lib/x86_64-linux-gnu/libc.so.6
(gdb) bt
#0  0x77be7b1c in pthread_kill () from /lib/x86_64-linux-gnu/libc.so.6
#1  0x77b8e26e in raise () from /lib/x86_64-linux-gnu/libc.so.6
#2  0x77b718ff in abort () from /lib/x86_64-linux-gnu/libc.so.6
#3  0x77b727b6 in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#4  0x77c7fc19 in __fortify_fail () from /lib/x86_64-linux-gnu/libc.so.6
#5  0x77c7f5d4 in __chk_fail () from /lib/x86_64-linux-gnu/libc.so.6
#6  0x77c80db5 in __snprintf_chk () from /lib/x86_64-linux-gnu/libc.so.6
#7  0x77ed39e5 in snprintf (__fmt=0x77f0dbc7 "%10d", __n=88, 
__s=0x77f7168a  "") at 
/usr/include/x86_64-linux-gnu/bits/stdio2.h:54
#8  MID_DSPKEY (name=name@entry=0x555a5778  "myvals", dflag=63 
'?') at midkeya.c:494
#9  0x55580869 in DO_KEYS (key_task=key_task@entry=82 'R', 
prompt=prompt@entry=0x7fffdc10 "T") at prepc4.c:197
#10 0x5557f28f in prepx (kswitch=, 
cxpntr=cxpntr@entry=0x5559f480  " 23FEBpl1.0  PC/Linux", ' ' , "-23.02pl1.0/midwork/MIDAS01.PID",
ixpntr=ixpntr@entry=0x7fffdf90) at prepx.c:748
#11 0xac53 in main () at prepa.c:168

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2058971

Title:
  proposed-migration for eso-midas 23.02pl1.0-1build1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/eso-midas/+bug/2058971/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2059287] Re: Test failures in noble-proposed (all-proposed)

2024-05-15 Thread Adrien Nader
Removed the request to badtest this (it was denied anyway).

** Description changed:

  Autopkgtests for request-tracker4 (and 5 it seems) fail on all arches
  and due to the recent changes around test environments and the use of
  all-proposed, it's difficult to identify which package change is
  responsible.
  
  I actually see some passes on amd64 and arm64 but due to the environment
  issues that existed when the tests ran, I can't conclude much from them.
  Moreover, they weren't running with all-proposed like they would now. I
  also didn't see triggers related to gpg which could have been useful
  hints even with unreliable environment considering the errors.
  
- Please badtest request-tracker4 and request-tracker5.
- 
  The typical errors are
  
  
https://objectstorage.prodstack5.canonical.com/swift/v1/AUTH_0f9aae918d5b4744bf7b827671c86842/autopkgtest-
  noble/noble/arm64/r/request-tracker4/20240326_183841_3725f@/log.gz
  
- 2470s t/security/CVE-2012-4735-incoming-encryption-header.t .. 
+ 2470s t/security/CVE-2012-4735-incoming-encryption-header.t ..
  2470s # GnuPG --homedir /tmp/WbcjpQjcFA
  2470s ok 1 - created a ticket
  2470s ok 2 - loaded ticket
  2470s ok 3 - Found the right attachment
  2470s ok 4 - Incoming encryption header is removed
  2470s ok 5 - Incoming signature header is removed
  2470s ok 6 - created a ticket
  2470s not ok 7
- 2470s 
+ 2470s
  2470s #   Failed test at 
t/security/CVE-2012-4735-incoming-encryption-header.t line 60.
  2470s # found warning: gpg: keybox '/tmp/WbcjpQjcFA/pubring.kbx' created
  2470s # found warning: Failure during GnuPG data: No data has been found. The 
reason is 'Invalid packet found'
  2470s # found warning: Failure during GnuPG data: No data has been found. The 
reason is 'No armored data'
  2470s # found warning: Failure during GnuPG gpg-exit: Failed to gpg-exit
  2470s # expected to find warning: (?^:(?:keyring|keybox) .* created)
  2470s # expected to find warning: (?^:Failure during GnuPG data: No data has 
been found\. The reason is 'Invalid packet found')
  2470s # expected to find warning: (?^:Failure during GnuPG data: No data has 
been found\. The reason is 'No armored data')
  2470s ok 8 - loaded ticket
  2470s ok 9 - Found the right attachment
  2470s ok 10 - Incoming encryption header is removed
  2470s ok 11 - Incoming signature header is removed
  2470s ok 12 - no warnings
  2470s 1..12
  2470s # Some tests failed or we bailed out, tmp directory 
'/tmp/autopkgtest.z5x7lQ/autopkgtest_tmp/smokeFWUfP9/t/tmp/security-CVE-2012-4735-incoming-encryption-header.t-kZdETulR'
 is not cleaned
  
- 
  or
  
  
https://objectstorage.prodstack5.canonical.com/swift/v1/AUTH_0f9aae918d5b4744bf7b827671c86842/autopkgtest-
  noble/noble/ppc64el/r/request-tracker4/20240323_184121_31e59@/log.gz
  
  727s # encryption only, bad recipient
  727s not ok 43
- 727s 
+ 727s
  727s #   Failed test at t/mail/crypt-gnupg.t line 180.
  727s # didn't find a warning
  727s # expected to find warning: (?^:No public key|public key not found)
  727s not ok 44 - no way to encrypt without keys of recipients
- 727s 
+ 727s
  727s #   Failed test 'no way to encrypt without keys of recipients'
  727s #   at t/mail/crypt-gnupg.t line 182.
  
  1569s ok 71 - RT's mail includes this instance's name
  1569s not ok 72
- 1569s 
+ 1569s
  1569s #   Failed test at t/web/crypt-gnupg.t line 382.
  1569s # didn't find a warning
  1569s # expected to find warning: (?^:nokey\@example.com: skipped: (?:No 
public key|public key not found))
  1569s # expected to find warning: (?^:Recipient 'nokey\@example.com' is 
unusable)
  1569s ok 73 - created ticket for owner-without-pubkey
  1569s ok 74 - created ticket for owner-with-pubkey
  1569s not ok 75
- 1569s 
+ 1569s
  1569s #   Failed test at t/web/crypt-gnupg.t line 404.
  1569s # didn't find a warning
  1569s # expected to find warning: (?^:nokey\@example.com: skipped: (?:No 
public key|public key not found))
  1569s # expected to find warning: (?^:Recipient 'nokey\@example.com' is 
unusable)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2059287

Title:
  Test failures in noble-proposed (all-proposed)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/request-tracker4/+bug/2059287/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2058971] Re: proposed-migration for eso-midas 23.02pl1.0-1build1

2024-05-15 Thread Adrien Nader
Build now fails on all arches with

# of pixels used = 843920 from 1,1 to 880,959 (in pixels)
FITS file newVIMOS.fits will have 4 extensions
*** buffer overflow detected ***: terminated


This is the same issue as back in March when this bug was created (I had seen 
the issue and found it again in my logs).

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2058971

Title:
  proposed-migration for eso-midas 23.02pl1.0-1build1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/eso-midas/+bug/2058971/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2063271] Re: Illegal opcode in libssl

2024-04-30 Thread Adrien Nader
AFAIU there is no issue in the package at the moment so I'll close the
report. Thanks for investigating and trying the package reinstallation.
(Also, Alex, impressive intuition!)

** Changed in: openssl (Ubuntu)
   Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2063271

Title:
  Illegal opcode in libssl

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2063271/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1297025] Re: Either the changelog.gz is missing or there is an erroneous link in the libssl1.0.0 package

2024-04-30 Thread Adrien Nader
** Changed in: openssl (Ubuntu)
Milestone: None => ubuntu-24.10

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1297025

Title:
  Either the changelog.gz is missing or there is an erroneous link in
  the libssl1.0.0 package

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1297025/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1297025] Re: Either the changelog.gz is missing or there is an erroneous link in the libssl1.0.0 package

2024-04-29 Thread Adrien Nader
I plan to work on this during the OO cycle. It's an issue inherited from
Debian AFAIU.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1297025

Title:
  Either the changelog.gz is missing or there is an erroneous link in
  the libssl1.0.0 package

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1297025/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2063898] Re: broken doc symlinks after t64 transition in noble

2024-04-29 Thread Adrien Nader
*** This bug is a duplicate of bug 1297025 ***
https://bugs.launchpad.net/bugs/1297025

** This bug has been marked a duplicate of bug 1297025
   Either the changelog.gz is missing or there is an erroneous link in the 
libssl1.0.0 package

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2063898

Title:
  broken doc symlinks after t64 transition in noble

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2063898/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2062118] Re: autopkgtests fail on s390x (segfault)

2024-04-18 Thread Adrien Nader
** Tags added: rls-oo-incoming

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2062118

Title:
  autopkgtests fail on s390x (segfault)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/2062118/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2062119] Re: autopkgtests fail on ppc64el

2024-04-18 Thread Adrien Nader
** Tags added: rls-oo-incoming

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2062119

Title:
  autopkgtests fail on ppc64el

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libtracefs/+bug/2062119/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2062018] Re: [FFe] gnutls28: merge 3.8.5-2 and backport RSAES-PKCS1-v1_5 fix

2024-04-18 Thread Adrien Nader
** Changed in: gnutls28 (Ubuntu)
   Status: Triaged => New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2062018

Title:
  [FFe] gnutls28: merge 3.8.5-2 and backport RSAES-PKCS1-v1_5 fix

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnutls28/+bug/2062018/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2062167] Re: [FFe] openssl: post-3.0.13 changes from git

2024-04-18 Thread Adrien Nader
** Changed in: openssl (Ubuntu)
   Status: Triaged => New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2062167

Title:
  [FFe] openssl: post-3.0.13 changes from git

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2062167/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2062167] Re: [FFe] openssl: post-3.0.13 changes from git

2024-04-18 Thread Adrien Nader
Note that there is a CVE fix in there too. It's low-severity because
it's only unbounded memory growth but it's quite easy to trigger and I
think that anyone who has a webserver with TLS 1.3 will want it patched.
Therefore there should be an upload of this at least.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2062167

Title:
  [FFe] openssl: post-3.0.13 changes from git

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2062167/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2062167] [NEW] [FFe] openssl: post-3.0.13 changes from git

2024-04-18 Thread Adrien Nader
Public bug reported:

I would like to have the most recent openssl version possible in Noble.
For that I am requesting to upload all the commits in the openssl-3.0
branch that follow 3.0.13 which is already in the archive.

I would like to include 3.0.14 afterwards if feasible. Having the most
recent commits of the 3.0 branch will make that easier.

I went through all commits since 3.0.13 at the end of January. I skipped
a few which touch files that are not in the 3.0.13 release tarball
(github CI stuff mostly) and edited one that touched such a file.

There are only fixes. This is not surprising considering we are past the
13th patch release for openssl 3.0, and almost 3 years after 3.0 was
released.

Changes are most usually backports which is a good thing as it means
they are also tested in the other branches, including through 3.3, for
which the .0 release was published a few days ago after weeks in
beta/RC.

There are a few behaviour tweaks, and that is why I want to get as close
as possible to what 3.0.14 will be. The bigger one is
ad6cbe4b7f57a783a66a7ae883ea0d35ef5f82b6: Revert "Improved detection of
engine-provided private "classic" keys", which also states "The
workaround has caused more problems than it solved."

As I said, I went through all commits. All look safe to me. The question
really boils down to whether we will include these fixes in Noble now or
if we won't: there is only a very very small chance that any given
change is SRU'ed afterwards.

** Affects: openssl (Ubuntu)
 Importance: High
 Status: Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2062167

Title:
  [FFe] openssl: post-3.0.13 changes from git

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2062167/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2062018] [NEW] [FFe] gnutls28: merge 3.8.5-2 and backport RSAES-PKCS1-v1_5 fix

2024-04-17 Thread Adrien Nader
Public bug reported:

Please allow the merge and upload of
https://code.launchpad.net/~adrien-n/ubuntu/+source/gnutls28/+git/gnutls28/+merge/464535
.

I made the commit message there quite complete so I'm basically copying
that here. In a few words, this is meant to include as many fixes as
possible (potentially including security ones) since they probably would
linger on afterwards. There is also a change regarding PKCS#1 v1.5 which
has been deprecated but seemingly kept the same status in gnutls; this
adds the recommended replacement and makes it possible to disable the
deprecated format in configuration. This is the kind of things we want
for LTS releases.

Moreover, there are no changes that we want to avoid. There are changes
we don't care (much) about (tests, static builds, ...), but no changes
we want to avoid.

Below is a copy of the commit message of the MR.

This is a late update to gnutls in order to include the most recent
security fixes, even if they are low-severity. It merges 3.8.5-2 from
Debian and includes a better fix for the issue that prompted the upload
of -2 (wrong default configuration if no config file is present).

There are fixes except one potential performance improvement. Some of
the fixes are about catching up with current standards.

I went through all commits, there are many varied changes. I'm skipping
updates to tests or changes that are not relevant to Ubuntu.

Basic fixes:
- ktls detection (possibly a regression in noble)
- memleak in gnutls-serv
- segfault in _gnutls13_recv_end_of_early_data
- potential segfault in _gnutls13_recv_finished
- missing argument when using the _gnutls_debug_log macro
- wrong test in lib/mpi.c

Misc changes that are still somewhat notable:
- nettle: plumb RIPEMD160, because GCR (commit says "GnuTLS", I think it's a 
typo) still uses it to display a fingerprint for openpgp keys
- x509: support PBES1-DES-SHA1, in order to parse legacy PKCS#8 files in GCR 
(the gnome library)

The one performance improvement (that I didn't benchmark): "Make
compression libraries dynamically loadable" (it's from January, not
April).

Finally, a fix to adapt gnutls to current standards: support RSA-OAEP
and make it possible to disable RSAES-PKCS1-v1_5. I think it is
important this gets into Noble due to the long support period. Moreover,
it can come in handy in the future to be able to disable algorithms when
flaws are discovered.

https://www.rfc-editor.org/rfc/rfc8017#section-7 :

> RSAES-OAEP is REQUIRED to be supported for new applications; RSAES-
PKCS1-v1_5 is included only for compatibility with existing
applications.

** Affects: gnutls28 (Ubuntu)
 Importance: High
 Status: Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2062018

Title:
  [FFe] gnutls28: merge 3.8.5-2 and backport RSAES-PKCS1-v1_5 fix

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnutls28/+bug/2062018/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2051925] Re: [MIR] promote libtracefs as a trace-cmd dependency

2024-04-17 Thread Adrien Nader
Matching MR is up:
https://code.launchpad.net/~adrien-n/ubuntu/+source/libtracefs/+git/libtracefs/+merge/464434

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2051925

Title:
  [MIR] promote libtracefs as a trace-cmd dependency

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libtracefs/+bug/2051925/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

  1   2   >