$ ./change-override -c main -S libdex
Override component to main
libdex 0.7.1-1 in oracular: universe/misc -> main
gir1.2-dex-1 0.7.1-1 in oracular amd64: universe/introspection/optional/100% ->
main
gir1.2-dex-1 0.7.1-1 in oracular arm64: universe/introspection/optional/100% ->
main
gir1.2-dex-1 0.7.1-1 in oracular armhf: universe/introspection/optional/100% ->
main
gir1.2-dex-1 0.7.1-1 in oracular i386: universe/introspection/optional/100% ->
main
gir1.2-dex-1 0.7.1-1 in oracular ppc64el: universe/introspection/optional/100%
-> main
gir1.2-dex-1 0.7.1-1 in oracular riscv64: universe/introspection/optional/100%
-> main
gir1.2-dex-1 0.7.1-1 in oracular s390x: universe/introspection/optional/100% ->
main
libdex-1-1 0.7.1-1 in oracular amd64: universe/libs/optional/100% -> main
libdex-1-1 0.7.1-1 in oracular arm64: universe/libs/optional/100% -> main
libdex-1-1 0.7.1-1 in oracular armhf: universe/libs/optional/100% -> main
libdex-1-1 0.7.1-1 in oracular i386: universe/libs/optional/100% -> main
libdex-1-1 0.7.1-1 in oracular ppc64el: universe/libs/optional/100% -> main
libdex-1-1 0.7.1-1 in oracular riscv64: universe/libs/optional/100% -> main
libdex-1-1 0.7.1-1 in oracular s390x: universe/libs/optional/100% -> main
libdex-dev 0.7.1-1 in oracular amd64: universe/libdevel/optional/100% -> main
libdex-dev 0.7.1-1 in oracular arm64: universe/libdevel/optional/100% -> main
libdex-dev 0.7.1-1 in oracular armhf: universe/libdevel/optional/100% -> main
libdex-dev 0.7.1-1 in oracular i386: universe/libdevel/optional/100% -> main
libdex-dev 0.7.1-1 in oracular ppc64el: universe/libdevel/optional/100% -> main
libdex-dev 0.7.1-1 in oracular riscv64: universe/libdevel/optional/100% -> main
libdex-dev 0.7.1-1 in oracular s390x: universe/libdevel/optional/100% -> main
libdex-doc 0.7.1-1 in oracular amd64: universe/doc/optional/100% -> main
libdex-doc 0.7.1-1 in oracular arm64: universe/doc/optional/100% -> main
libdex-doc 0.7.1-1 in oracular armhf: universe/doc/optional/100% -> main
libdex-doc 0.7.1-1 in oracular i386: universe/doc/optional/100% -> main
libdex-doc 0.7.1-1 in oracular ppc64el: universe/doc/optional/100% -> main
libdex-doc 0.7.1-1 in oracular riscv64: universe/doc/optional/100% -> main
libdex-doc 0.7.1-1 in oracular s390x: universe/doc/optional/100% -> main
Override [y|N]? y
29 publications overridden.
** Changed in: libdex (Ubuntu)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to libdex in Ubuntu.
https://bugs.launchpad.net/bugs/2066262
Title:
[MIR] libdex
Status in libdex package in Ubuntu:
Fix Released
Bug description:
[Availability]
The package libdex is already in Ubuntu universe.
The package libdex build for the architectures it is designed to work on.
It currently builds and works for all Ubuntu architectures.
Link to package https://launchpad.net/ubuntu/+source/libdex
[Rationale]
- The package libdex is required in Ubuntu main because it is a runtime
dependency of sysprof (MIR LP: #2066269)
- There is no other/better way to solve this that is already in main or
should go universe->main instead of this.
- The package libdex is required in Ubuntu main no later than August 15 due
to a Ubuntu Desktop goal of including sysprof in the default 24.10 install
[Security]
- No CVEs/security issues in this software in the past
+ Note that CVE-2016-3758 is about a vulnerability in Android's libdex which
is a completely different project with no shared history or functionality.
GNOME libdex was not created until 2022.
+ https://security-tracker.debian.org/tracker/source-package/libdex
+ https://ubuntu.com/security/cves?package=libdex
- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Package does not install services, timers or recurring jobs
- Package does not open privileged ports (ports < 1024).
- Package does not expose any external endpoints
- Package does not contain extensions to security-sensitive software
(filters, scanners, plugins, UI skins, ...)
- TODO: I noticed that libdex uses liburing which uses the Linux kernel
io_uring interface. Wikipedia points out that io_uring is a frequent source of
bugs in the Linux kernel. I don't know if this matters for apps using liburing,
but I think the Security Team should have a look. libdex does have a build-time
option to disable liburing in cases where it is unavailable (for instance it's
disabled on i386 since Ubuntu currently doesn't build liburing on i386).
[Quality assurance - function/usage]
- The package works well right after install
[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu/Upstream and does not have
too many, long-term & critical, open bugs
- Ubuntu https://bugs.launchpad.net/ubuntu/+source/libdex/
- Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=libdex
- Upstream https://gitlab.gnome.org/GNOME/libdex/-/issues
- The package does not deal with exotic hardware we cannot support
[Quality assurance - testing]
- The package runs a test suite on build time, if it fails it makes the build
fail, link to build log
https://launchpad.net/ubuntu/+source/libdex/0.6.1-1
- The package does not run an autopkgtest. See next lines.
- This package is minimal and will be tested in a more wide reaching solution.
+ libdex is only used by sysprof and gnome-builder. In addition to the
existing build tests for libdex, we will also do manual testing for Sysprof and
GNOME Builder.
https://wiki.ubuntu.com/DesktopTeam/TestPlans/Sysprof
https://wiki.ubuntu.com/DesktopTeam/TestPlans/GnomeBuilder
[Quality assurance - packaging]
- debian/watch is present and works
- debian/control defines a correct Maintainer field
- This package does not yield massive lintian Warnings, Errors
- Please link to a recent build log of the package
https://launchpad.net/ubuntu/+source/libdex/0.6.1-1
- Please attach the full output you have got from `lintian --pedantic` as an
extra post to this bug.
- Lintian overrides are not present
- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies
- The package will be installed by default, but does not ask debconf questions
- Packaging and build is easy, link to debian/rules
https://salsa.debian.org/gnome-team/libdex/-/blob/debian/latest/debian/rules
[UI standards]
- Application is not end-user facing (does not need translation)
[Dependencies]
- No further depends or recommends dependencies that are not yet in main
[Standards compliance]
- This package correctly follows FHS and Debian Policy
[Maintenance/Owner]
- The owning team will be Ubuntu Desktop (~desktop-packages) and I have their
acknowledgement for that commitment
- The owning team is subscribed to the package
- This does not use static builds
- This does not use vendored code
- This package is not rust based
- The package has been built in the archive more recently than the
last test rebuild
[Background information]
- The Package description explains the package well
- Upstream Name is libdex
- Link to upstream project https://gitlab.gnome.org/GNOME/libdex
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libdex/+bug/2066262/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
