Public bug reported: [ Ignore the Nominate for Bionic, that's not required ]
== Overview == Intel Multi-Buffer Crypto for IPsec Library is highly-optimized software implementations of the core cryptographic processing for IPsec, which provides industry-leading performance on a range of Intel(R) Processors. For information on how to build and use this library, see the Intel White Paper: "Fast Multi-buffer IPsec Implementations on Intel Architecture Processors". Jim Guilford, Sean Gulley, et. al. [ See https://www.intel.com/content/dam/www/public/us/en/documents /white-papers/fast-multi-buffer-ipsec-implementations-ia-processors- paper.pdf ] == Answers to UbuntuMainInclusionRequirements == = Requirements = 1. Availability Package is in universe: https://launchpad.net/ubuntu/+source/intel-ipsec-mb 2. Rationale Intel-ipsec-mb is useful for projects that require core IPsec cryptographic processing that is highly optimized and performant on x86-64 processors. Projects such as DPDK (https://www.dpdk.org/) will be able to improve performance with this library. 3. Security: No security issues exposed so far. However, the tools have only been in Ubuntu since early Mar 2018, so this currently a several weeks over the 90 days threshold. 4. Quality assurance: * Manual is provided * No debconf questions higher than medium * No outstanding bugs. I'm also helping Intel fix issues that I'm finding with static analysis tools such as scan-build, cppcheck and CoverityScan, see: https://scan.coverity.com/projects/intel-ipsec-mb * Exotic Hardware: x86-64 support only, since this is hand optimized for this specific architecture. * No Test Suite shipped with the package * Does not rely on obsolete or demoted packages 5. UI standards: * This is a CLI tool. Tool has normal CLI style short help and man pages * No desktop file required as it is a CLI tool. 6. Binary Dependencies: * None 7. Standards compliance: lintian clean and meets the FHS + Debian Policy standards to the best of my knowledge 8. Maintenance * Package owning team: The Ubuntu Kernel Team * Debian package maintained by Colin Ian King (myself from the Kernel Team) 9. Background Information This provides an optimized IPSEC multiblock library. Search in the National Vulnerability Database using the package as a keyword * No CVEs found http://secunia.com/advisories/search/: search for the package as a keyword * No security advisories found Ubuntu CVE Tracker http://people.ubuntu.com/~ubuntu-security/cve/main.html * No http://people.ubuntu.com/~ubuntu-security/cve/universe.html * No http://people.ubuntu.com/~ubuntu-security/cve/partner.html * No Check for security relevant binaries. If any are present, this requires a more in-depth security review. Executables which have the suid or sgid bit set. * No. Executables in /sbin, /usr/sbin. * None in these paths, it's a library Packages which install daemons (/etc/init.d/*) * No Packages which open privileged ports (ports < 1024). * No Add-ons and plugins to security-sensitive software (filters, scanners, UI skins, etc) * None ** Affects: intel-ipsec-mb (Ubuntu) Importance: Medium Status: New ** Changed in: intel-ipsec-mb (Ubuntu) Importance: Undecided => Medium ** Description changed: + [ Ignore the Nominate for Bionic, that's not required ] + == Overview == Intel Multi-Buffer Crypto for IPsec Library is highly-optimized software implementations of the core cryptographic processing for IPsec, which provides industry-leading performance on a range of Intel(R) Processors. For information on how to build and use this library, see the Intel White Paper: "Fast Multi-buffer IPsec Implementations on Intel Architecture Processors". Jim Guilford, Sean Gulley, et. al. [ See https://www.intel.com/content/dam/www/public/us/en/documents /white-papers/fast-multi-buffer-ipsec-implementations-ia-processors- paper.pdf ] == Answers to UbuntuMainInclusionRequirements == = Requirements = 1. Availability - Package is in universe: https://launchpad.net/ubuntu/+source/intel-ipsec-mb + Package is in universe: https://launchpad.net/ubuntu/+source/intel-ipsec-mb 2. Rationale - Intel-ipsec-mb is useful for projects that require core IPsec cryptographic processing - that is highly optimized and performant on x86-64 processors. Projects such as - DPDK (https://www.dpdk.org/) will be able to improve performance with this library. + Intel-ipsec-mb is useful for projects that require core IPsec cryptographic processing + that is highly optimized and performant on x86-64 processors. Projects such as + DPDK (https://www.dpdk.org/) will be able to improve performance with this library. 3. Security: - No security issues exposed so far. However, the tools have only been in Ubuntu since - early Mar 2018, so this currently a several weeks over the 90 days threshold. + No security issues exposed so far. However, the tools have only been in Ubuntu since + early Mar 2018, so this currently a several weeks over the 90 days threshold. 4. Quality assurance: - * Manual is provided - * No debconf questions higher than medium - * No outstanding bugs. I'm also helping Intel fix issues that I'm finding with - static analysis tools such as scan-build, cppcheck and CoverityScan, - see: https://scan.coverity.com/projects/intel-ipsec-mb - * Exotic Hardware: x86-64 support only, since this is hand optimized for this - specific architecture. - * No Test Suite shipped with the package - * Does not rely on obsolete or demoted packages + * Manual is provided + * No debconf questions higher than medium + * No outstanding bugs. I'm also helping Intel fix issues that I'm finding with + static analysis tools such as scan-build, cppcheck and CoverityScan, + see: https://scan.coverity.com/projects/intel-ipsec-mb + * Exotic Hardware: x86-64 support only, since this is hand optimized for this + specific architecture. + * No Test Suite shipped with the package + * Does not rely on obsolete or demoted packages 5. UI standards: - * This is a CLI tool. Tool has normal CLI style short help and man pages - * No desktop file required as it is a CLI tool. + * This is a CLI tool. Tool has normal CLI style short help and man pages + * No desktop file required as it is a CLI tool. 6. Binary Dependencies: - * None + * None 7. Standards compliance: - lintian clean and meets the FHS + Debian Policy standards to the best of my knowledge + lintian clean and meets the FHS + Debian Policy standards to the best of my knowledge 8. Maintenance - * Package owning team: The Ubuntu Kernel Team - * Debian package maintained by Colin Ian King (myself from the Kernel Team) + * Package owning team: The Ubuntu Kernel Team + * Debian package maintained by Colin Ian King (myself from the Kernel Team) 9. Background Information - This provides an optimized IPSEC multiblock library. + This provides an optimized IPSEC multiblock library. - Search in the National Vulnerability Database using the package as a keyword - * No CVEs found + Search in the National Vulnerability Database using the package as a keyword + * No CVEs found - http://secunia.com/advisories/search/: search for the package as a keyword - * No security advisories found + http://secunia.com/advisories/search/: search for the package as a keyword + * No security advisories found - Ubuntu CVE Tracker - http://people.ubuntu.com/~ubuntu-security/cve/main.html - * No - http://people.ubuntu.com/~ubuntu-security/cve/universe.html - * No - http://people.ubuntu.com/~ubuntu-security/cve/partner.html - * No + Ubuntu CVE Tracker + http://people.ubuntu.com/~ubuntu-security/cve/main.html + * No + http://people.ubuntu.com/~ubuntu-security/cve/universe.html + * No + http://people.ubuntu.com/~ubuntu-security/cve/partner.html + * No - Check for security relevant binaries. If any are present, this - requires a more in-depth security review. + Check for security relevant binaries. If any are present, this + requires a more in-depth security review. - Executables which have the suid or sgid bit set. - * No. + Executables which have the suid or sgid bit set. + * No. - Executables in /sbin, /usr/sbin. - * None in these paths, it's a library + Executables in /sbin, /usr/sbin. + * None in these paths, it's a library - Packages which install daemons (/etc/init.d/*) - * No + Packages which install daemons (/etc/init.d/*) + * No - Packages which open privileged ports (ports < 1024). - * No + Packages which open privileged ports (ports < 1024). + * No - Add-ons and plugins to security-sensitive software (filters, - scanners, UI skins, etc) - * None + Add-ons and plugins to security-sensitive software (filters, + scanners, UI skins, etc) + * None ** Changed in: intel-ipsec-mb (Ubuntu) Milestone: None => ubuntu-18.10 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1786201 Title: MIR for intel-ipsec-mb To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/intel-ipsec-mb/+bug/1786201/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
