$ ./change-override -c main -S golang-github-openprinting-goipp
Override component to main
golang-github-openprinting-goipp 1.0.0-1 in groovy: universe/misc -> main
golang-github-openprinting-goipp-dev 1.0.0-1 in groovy amd64:
universe/devel/optional/100% -> main
golang-github-openprinting-goipp is ready as well then - thanks.
I also verified that without further changes it is held in main, currently
detected and listed as component mismatch:
https://people.canonical.com/~ubuntu-archive/component-mismatches-proposed.html
Source only movements to main
I reviewed golang-github-openprinting-goipp 1.0.0-1 as checked into
groovy. This shouldn't be considered a full audit but rather a quick
gauge of maintainability.
golang-github-openprinting-goipp is a low-level serializer/deserializer
for IPP protocol messages.
- CVE History:
- No CVEs in our
Alexander, Till, it would be nice if we could run these components as
non-root. It'd be wonderful to have some systemd seccomp enforcement, as
well as AppArmor profiles. Please consider what steps could be taken to
reduce the privileges of these services.
Thanks
--
You received this bug
On Thu, Oct 08, 2020 at 07:31:36PM -, Alexander Pevzner wrote:
> thank you for security review of the ipp-usb package. My few comments:
Hello Alexender, thank you very much for the feedback review! It's very
helpful, and very encouraging. Thanks. :)
--
You received this bug notification
Alexander, thanks for your explanations.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1891157
Title:
[MIR] ipp-usb
To manage notifications about this bug go to:
Hi Seth,
thank you for security review of the ipp-usb package. My few comments:
> resp is used before a nil check; it'll probably just crash if it hits
this
resp is always used after check of returned error, and if this check
passed, resp cannot be nil. In one place resp is explicitly checked
Override component to main
ipp-usb 0.9.13-1ubuntu1 in groovy: universe/misc -> main
ipp-usb 0.9.13-1ubuntu1 in groovy amd64: universe/comm/optional/100% -> main
ipp-usb 0.9.13-1ubuntu1 in groovy arm64: universe/comm/optional/100% -> main
ipp-usb 0.9.13-1ubuntu1 in groovy armhf:
Thanks Seth, thereby for ipp-uxb itself everything is ready and since it
shows up in component mismatches I'll set it to Fix-Committed.
For now golang-github-openprinting-goipp stays open waiting for the
security review.
FYI: also on golang-github-openprinting-goipp since nothing holds in the
I reviewed ipp-usb 0.9.13-1ubuntu1 as checked into groovy. This shouldn't be
considered a full audit but rather a quick gauge of maintainability.
ipp-usb is an http proxy to provide ipp printing support to USB devices.
- CVE History:
No CVEs in our database, very new
- Build-Depends:
The dependency on
golang-gopkg-ini.v1 (= 1.57.0-1)
is indeed dropped.
Thanks Till!
This seems to be ready from the MIR POV, but waits for security review
and ack now.
** Changed in: golang-gopkg-ini.v1 (Ubuntu)
Assignee: Didier Roche (didrocks) => (unassigned)
--
You received this bug
Uploaded ipp-usb 0.9.12-1ubuntu1 to eliminate remaining dependencies on
Universe:
--
ipp-usb (0.9.12-1ubuntu1) groovy; urgency=medium
* Removed build dependency on golang-any, a meta package in Universe,
to allow one of golang-go or gccgo, put golang-go in its place
as this is
ipp-usb 0.9.12 without build dependency on INI.v1 is now in Groovy.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1891157
Title:
[MIR] ipp-usb
To manage notifications about this bug go to:
ippusbxd got removed from Debian now.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1891157
Title:
[MIR] ipp-usb
To manage notifications about this bug go to:
The replacement of ippusbxd by ipp-usb is also important as ippusbxd
sometimes causes problems which makes people end up not being able to
print and scan at all.
See bug 1878974
An HP printer which works with HPLIP triggers the launch of ippusbxd,
because the printer also supports IPP-over-USB
ipp-usb 0.9.11 got released upstream:
https://github.com/OpenPrinting/ipp-usb/releases/tag/0.9.11
I already asked the Debian developers for updating their packages. As
soon as they have uploade it I will sync it to Ubuntu.
--
You received this bug notification because you are a member of
The removal of the dependency on golang-gopkg-ini.v1 has been done on
the upstream GitHub:
https://github.com/OpenPrinting/ipp-usb/commit/a68d21c18e
Added .INI file parser, to replace gopkg.in/ini.v1
https://github.com/OpenPrinting/ipp-usb/commit/7d2b8e81ff
gopkg.in/ini.v1 replaced with
FWIW, I did start the golang-gopkg-ini.v1 review before the discussion
went to invalidate it, I will still post what I found in case we have
another MIR one day.
golang-gopkg-ini.v1:
[Summary]
- Some work is needed as right now :
* golang-github-smartystreets-goconvey-dev MIRing. Blocking this
Note: There is still some unanswered question Christian asked on ipp-usb
about confinement and the daemon that needs to be answered before going
further.
golang-github-openprinting-goipp:
[Summary]
- MIR Team ack from a packaging and code POV.
- Needs Security team review
[Duplication]
Nothing
[Summary]
MIR team ack for the packaging and overall quality.
But it needs a security review as well, assigning ubuntu-security.
[Duplication]
Only the code that is part of ippusbxd is similar in function and it is
planned to replace ippusbxd in main with this.
[Dependencies]
OK:
- no other
Thanks Till and Ken for sorting out subscriptions and the golang-gopkg-ini.v1
situation.
I'm going to do a "golang-github-openprinting-goipp" review then ...
** Changed in: golang-github-openprinting-goipp (Ubuntu)
Assignee: (unassigned) => Christian Ehrhardt (paelzer)
--
You received
"Desktop Packages" (~desktop-package) is now subscribed to ipp-usb and
golang-github-openprinting-goipp.
** Description changed:
IPP-over-USB
ipp-usb is the second implementation of the IPP-over-USB standard. This
allows the PWG's Internet Printing Protocol (IPP) which is
I have talked with the upstream maintainer of ipp-usb, Alexander Pevzner
now and he will emove the dependency on ini.v1.
** Changed in: golang-github-openprinting-goipp (Ubuntu)
Status: Incomplete => New
** Changed in: golang-gopkg-ini.v1 (Ubuntu)
Status: Incomplete => Invalid
--
"Ubuntu Desktop Bugs" (~desktop-bugs) is now subscribed to all the three
packages: ipp-usb, golang-github-openprinting-goipp, golang-gopkg-
ini.v1
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
I've subscribed ~desktop-bugs to golang-github-openprinting-goipp, ipp-
usb, golang-gopkg-ini.v1 and sane-airscan
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1891157
Title:
[MIR] ipp-usb
To
Removed recommendation of ippusbxd from system-config-printer in version
1.5.12-0ubuntu2.
ipp-usb should get seeded.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1891157
Title:
[MIR] ipp-usb
To
Subscribed to bugs from golang-gopkg-ini.v1 package.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1891157
Title:
[MIR] ipp-usb
To manage notifications about this bug go to:
[Summary]
- This is just the review for ipp-usb, the other two are not yet reviewed.
- MIR Team ack from a packaging POV.
- This does need a security review, so I'll assign Ubuntu-security
Prereq's for Promotion:
- get the Desktop team to ack and subscribe to the packages
- prep a change to
** Description changed:
IPP-over-USB
ipp-usb is the second implementation of the IPP-over-USB standard. This
allows the PWG's Internet Printing Protocol (IPP) which is currently the
most common communication protocol for network printers also to be used
via USB, simply
** Description changed:
IPP-over-USB
ipp-usb is the second implementation of the IPP-over-USB standard. This
allows the PWG's Internet Printing Protocol (IPP) which is currently the
most common communication protocol for network printers also to be used
via USB, simply
** Description changed:
IPP-over-USB
ipp-usb is the second implementation of the IPP-over-USB standard. This
allows the PWG's Internet Printing Protocol (IPP) which is currently the
most common communication protocol for network printers also to be used
via USB, simply
** Description changed:
IPP-over-USB
ipp-usb is the second implementation of the IPP-over-USB standard. This
allows the PWG's Internet Printing Protocol (IPP) which is currently the
most common communication protocol for network printers also to be used
via USB, simply
** Description changed:
IPP-over-USB
ipp-usb is the second implementation of the IPP-over-USB standard. This
allows the PWG's Internet Printing Protocol (IPP) which is currently the
most common communication protocol for network printers also to be used
via USB, simply
** Description changed:
IPP-over-USB
+
ipp-usb is the second implementation of the IPP-over-USB standard. This
allows the PWG's Internet Printing Protocol (IPP) which is currently the
most common communication protocol for network printers also to be used
via USB, simply
** Description changed:
IPP-over-USB
ipp-usb is the second implementation of the IPP-over-USB standard. This
allows the PWG's Internet Printing Protocol (IPP) which is currently the
most common communication protocol for network printers also to be used
via USB, simply by a network
** Description changed:
IPP-over-USB
ipp-usb is the second implementation of the IPP-over-USB standard. This
allows the PWG's Internet Printing Protocol (IPP) which is currently the
most common communication protocol for network printers also to be used
via USB, simply by a network
36 matches
Mail list logo
