** Description changed: + [ Impact ] + + * Ubuntu 26.04 LTS is currently running version 0.8.0 of the rust-coreutils. + This has a number of CVEs and other functionality affecting bugs that are + resolved by the latest version on Ubuntu 26.10 (0.10.0). A backport of the + entire version should be considered warranted as a significant number of + users are expected to upgrade from Ubuntu 24.04 LTS once LTS to LTS upgrades + are enabled, and these users thusly face the risk of experiencing + considerable regressions from the previous coreutils. + + [ Test Plan ] + + * Upstream's test suite is expected to catch the vast majority of regressions + before they appear before users (github.com/uutils/coreutils) + + * Autopkgtests against rust-coreutils' reverse dependencies will be used + to identify any possible FTBFS and test regressions. + + * Ubuntu 26.10 has been used for runtime compatibility testing. During this + period, reported bugs have either related to utils that are provided by GNU + coreutils on Ubuntu 26.04 LTS (such as cp) or issues that were already known. + Thusly this compatibility testing period can arguably infer that the + regression risk associated with the backport is low. + + [ Where problems could occur ] + + * Arguably the most significant risk of problems lies in users utilizing the + coreutils in a "bespoke" scenario - i.e. in scripts expecting specific + behavior not necessarily tested by the upstream suite. A previous example + detected in Ubuntu 26.10 was the reliance on the coreutils using glibc for + its syscalls, as not doing so broke LD_PRELOAD based tools such as fakeroot + [1]. Another observed point of failure has been a mismatch between expected + stderr messages [2]. + + * If users have made any workarounds based on issues in 0.8.0, they might + experience disruptions if these issues are fixed in 0.10.0. + + + [1]: https://bugs.launchpad.net/ubuntu/+source/rust-coreutils/+bug/2160614 + [2]: https://bugs.launchpad.net/bugs/2157011 + + [ Other Info ] + + * Phased updates is being slowed down to catch regressions + (see https://code.launchpad.net/~juliank/ubuntu-archive-tools/+git/ubuntu-archive-tools/+merge/510925) + + [ Original Description ] + Before LTS upgrades from 24.04 to 26.04 are enabled, we should backport 0.10.0 due to the number of important fixes contained.
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2166202 Title: [SRU] Backport 0.10.0 to Resolute To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rust-coreutils/+bug/2166202/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
