** Description changed:
- Needs to be MIR.
- What doesn’t qualify for immediate promotion (soname bump) is the dep on
- sysprof which is in universe and needs to be checked (either get it
- promoted or downgrading the dep)
+ [Availability]
+ Already in Ubuntu universe.
+ Builds and works for all supported architectures including i386
+ https://launchpad.net/ubuntu/+source/libsoup3
+
+ [Rationale]
+ GNOME is switching to libsoup3. This has been delayed a few releases but I
suspect it will be more mandatory for GNOME 43 or GNOME 44.
+ - gnome-bluetooth3 is a new runtime dependency of package gnome-shell that
+ we already support
+
+ libsoup3 is requested in Ubuntu main no longer than August 4 to allow
+ time for reverse dependencies to be switched before 22.10 Feature Freeze
+ August 25.
+
+ [Security]
+ - https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=libsoup
+ - https://ubuntu.com/security/cve?package=libsoup2.4
+ - https://security-tracker.debian.org/tracker/source-package/libsoup2.4
+
+ - no `suid` or `sgid` binaries
+ - no executables in `/sbin` and `/usr/sbin`
+ - Package does not install services, timers or recurring jobs
+ - Package does not open privileged ports (ports < 1024)
+ - debian/rules builds with all standard hardening flags
+
+ This is a security-sensitive library that allows apps to access data
+ over the Internet.
+
+ [Quality assurance - function/usage]
+ The package works well right after install
+
+ [Quality assurance - maintenance]
+ - The package is maintained well in Debian/Ubuntu and has not too many
+ and long term critical bugs open
+ - Ubuntu https://bugs.launchpad.net/ubuntu/+source/libsoup3
+ - Ubuntu older series https://bugs.launchpad.net/ubuntu/+source/libsoup2.4
+ - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=libsoup3
+ - Debian older series
https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=libsoup2.4
+ - GNOME https://gitlab.gnome.org/GNOME/libsoup/-/issues
+ - The package does not deal with exotic hardware we cannot support
+
+ [Quality assurance - testing]
+ - Runs a test suite on build time, if it fails it makes the build fail, link
to build log:
+
https://launchpad.net/ubuntu/+source/libsoup3/3.0.6-1/+build/23589175/+files/buildlog_ubuntu-kinetic-amd64.libsoup3_3.0.6-1_BUILDING.txt.gz
+
+ - Includes autopkgtests, both a basic superficial test and an installed-
+ tests suite
+
+ [Quality assurance - packaging]
+ - debian/watch is present and works
+
+ - Does not yield massive lintian Warnings or Errors
+ - Lintian overrides are not present
+
+ - Des not rely on obsolete or about to be demoted packages.
+ - Has no python2 or GTK2 dependencies
+
+ - Does not ask debconf questions
+
+ - Packaging and build is easy:
+ https://salsa.debian.org/gnome-team/libsoup3/-/blob/debian/master/debian/rules
+
+ [UI standards]
+ Skipping
+
+ [Dependencies]
+ - No dependencies not already in main
+ - libsoup-3.0-dev has been added to the Extra-Exclude list to keep its
sysprof dependency out of main for now
+
+ [Standards compliance]
+ - This package correctly follows FHS and Debian Policy
+
+ [Maintenance/Owner]
+ - Owning Team will be Ubuntu Desktop (Co-maintained with Debian GNOME team.)
+ - Team is not yet, but will subscribe to the package before promotion
+
+ - This does not use static builds
+ - This does not use vendored code
+
+ [Background information]
+ The Ubuntu Desktop Team expects that it will be necessary to keep both
libsoup2.4 and libsoup3 in main for Ubuntu 22.10.
+
+ This is a big and complicated transition. Apps will crash if they are
+ linked against both libraries.
+
+ Upstream progress tracker:
+ https://gitlab.gnome.org/GNOME/libsoup/-/issues/218
+
+ Migration hints:
+ https://libsoup.org/libsoup-3.0/migrating-from-libsoup-2.html
+
+ https://people.canonical.com/~ubuntu-
+ archive/transitions/html/libsoup3.html
+
+ Estimated 29 affected source packages in main (some are libraries so true
affected count is higher):
+
https://people.canonical.com/~ubuntu-archive/transitions/html/libsoup3-main.html
** Changed in: libsoup3 (Ubuntu)
Assignee: Jeremy Bicha (jbicha) => (unassigned)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1972153
Title:
[MIR] libsoup3
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libsoup3/+bug/1972153/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
