[Bug 1186553] Re: [MIR] libwebp
seb128 promoted this ** Changed in: libwebp (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1186553 Title: [MIR] libwebp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libwebp/+bug/1186553/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1186553] Re: [MIR] libwebp
** Changed in: libwebp (Ubuntu) Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1186553 Title: [MIR] libwebp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libwebp/+bug/1186553/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1186553] Re: [MIR] libwebp
imagemagick will be possible to compile against libwebp, and convert will gain functionality to convert to/from webp images. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1186553 Title: [MIR] libwebp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libwebp/+bug/1186553/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1186553] Re: [MIR] libwebp
Desktop team will look after it. The desktop-bugs team is now subscribed. Mike, could you take another look at this request? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1186553 Title: [MIR] libwebp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libwebp/+bug/1186553/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1186553] Re: [MIR] libwebp
** Changed in: libwebp (Ubuntu) Status: Expired => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1186553 Title: [MIR] libwebp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libwebp/+bug/1186553/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1186553] Re: [MIR] libwebp
[Expired for libwebp (Ubuntu) because there has been no activity for 60 days.] ** Changed in: libwebp (Ubuntu) Status: Incomplete => Expired -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1186553 Title: [MIR] libwebp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libwebp/+bug/1186553/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1186553] Re: [MIR] libwebp
I reviewed the packaging and maintainability, looks fine. Except that it's missing an Ubuntu team bug subscriber. What team is going to look after this? ** Changed in: libwebp (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1186553 Title: [MIR] libwebp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libwebp/+bug/1186553/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1186553] Re: [MIR] libwebp
I reviewed libwebp version 0.3.0-3 from saucy. This should not be considered a full security audit, but rather a quick gauge of code cleanliness. - Package provides routines for lossy and lossless image encoding / decoding - Build-deps are image processing libraries - No daemons, no networking itself, no initscripts, no dbus services, no setuid, no sudo, no cron - Two unprivileged binaries in /usr/bin, dwebp and cwebp, to encode and decode images - Clean buildlogs - No spawned subprocesses - Careful memory management - Very few file open()s, all in examples/, looked safe - Logging looked safe, most is library code without logging - No environment use - No encryption - No privileged portions of code - No /tmp/ files - No webkit, no JS This code is extremely complicated in portions; depending upon the nature of potential security issues, we may be heavily reliant upon upstream for fixes. That said, the code is careful and well-written. Security team ACK for including in main. Thanks. ** Changed in: libwebp (Ubuntu) Assignee: Seth Arnold (seth-arnold) => (unassigned) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1186553 Title: [MIR] libwebp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libwebp/+bug/1186553/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1186553] Re: [MIR] libwebp
** Changed in: libwebp (Ubuntu) Assignee: Jamie Strandboge (jdstrand) => Seth Arnold (seth-arnold) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1186553 Title: [MIR] libwebp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libwebp/+bug/1186553/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1186553] Re: [MIR] libwebp
Jamie, do you have an estimate on when you will be able to do that review? The new webkit is mostly ready for upload to saucy... -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1186553 Title: [MIR] libwebp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libwebp/+bug/1186553/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1186553] Re: [MIR] libwebp
** Branch linked: lp:~ubuntu-desktop/webkit/ubuntu -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1186553 Title: [MIR] libwebp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libwebp/+bug/1186553/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1186553] Re: [MIR] libwebp
As this is a format parser, especially a web-oriented one, we'll need a security review. Assigning the MIR to Jamie. ** Changed in: libwebp (Ubuntu) Assignee: (unassigned) => Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1186553 Title: [MIR] libwebp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libwebp/+bug/1186553/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
