This bug was fixed in the package libcamera - 0.0.4-3ubuntu1
---------------
libcamera (0.0.4-3ubuntu1) lunar; urgency=medium
* Resynchronize on Debian (LP: #2012745), remaining changes:
- debian/control:
+ don't use liblttng-ust-dev on i386
- debian/tests/control:
+ use the upstream tests as autopkgtests
- Fix static order init problems when building under LTO (LP: #2009824)
libcamera (0.0.4-3) experimental; urgency=medium
[ George Kiagiadakis ]
* Add rule to re-sign the IPA modules after dh_strip
[ Andrej Shadura ]
* Use the DEB_HOST_GNU_TYPE for the build directory
-- Dylan Aïssi <[email protected]> Fri, 24 Mar 2023 16:48:02 +0100
** Changed in: libcamera (Ubuntu)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to libcamera in Ubuntu.
https://bugs.launchpad.net/bugs/2012745
Title:
IPA modules are not resigned after dh_strip
Status in libcamera package in Ubuntu:
Fix Released
Status in libcamera package in Debian:
Fix Released
Bug description:
[ Reason ]
Open source IPA (Image Processing Algorithms) modules are signed at build
time allowing them to be trusted. However, IPA binaries are modified by
dh_strip invalidating the signatures. Thus IPA modules provided in the package
are not trusted anymore and need to be re-signed after the dh_strip step. This
fix is applied in 0.0.4-3.
[ Impact ]
Not resigning IPA modules will make them untrusted, they will be isolated
inside a Sandbox environment with restricted access to the system (like any
closed-source module). Provided IPA modules won't work as expected.
[ Risks ]
The risk is low since we only regenerate signatures after dh_strip, i.e.
/usr/lib/*/libcamera/ipa_.so.sign files.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libcamera/+bug/2012745/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
