[Ubuntu-x-swat] [Bug 1130281] Re: [MIR] qtbase

2013-02-20 Thread Michael Terry
qt5 is pretty nicely packaged actually. But it will pull in a few other packages (firebird, libxcb, at least). This will probably need a security review too. Qt4 has some recent CVEs for example. ** Also affects: firebird (Ubuntu) Importance: Undecided Status: New ** Also affects:

[Ubuntu-x-swat] [Bug 1130281] Re: [MIR] qtbase

2013-02-20 Thread Michael Terry
I am happy to review the packaging and maintainability issues myself. But I'd like a quick security audit too. So assigning to the security team. ** Changed in: qtbase-opensource-src (Ubuntu) Assignee: Michael Terry (mterry) = Ubuntu Security Team (ubuntu-security) -- You received this

[Ubuntu-x-swat] [Bug 1130281] Re: [MIR] qtbase

2013-02-20 Thread Jamie Strandboge
fwiw, qt5 is an evolution of qt4, so it doesn't need a new security review. That said, we do *not* want to support qt4 and qt5 in 14.04 LTS (and preferably sooner). Is there a plan to migrate supported packages to qt5 so we can drop qt4 to universe? ** Changed in: qtbase-opensource-src (Ubuntu)

Re: [Ubuntu-x-swat] [Bug 1130281] Re: [MIR] qtbase

2013-02-20 Thread Matthias Klose
Am 20.02.2013 15:05, schrieb Michael Terry: qt5 is pretty nicely packaged actually. But it will pull in a few other packages (firebird, libxcb, at least). firebird should be disabled, as done for qt4. -- You received this bug notification because you are a member of Ubuntu-X, which is

[Ubuntu-x-swat] [Bug 1130281] Re: [MIR] qtbase

2013-02-20 Thread Michael Terry
It looks like the big consumers of qt4 on the desktop image (which is what I assume you mean by supported packages; there are other KDE packages still in main but I don't believe they are supported) are: * the signon components * ubuntuone (via python-qt4) * python-qt4 (upstream supports qt5-rc,