[Bug 1597453] Re: [MIR] content-hub
Override component to main content-hub 0.2+16.10.20160914-0ubuntu1 in yakkety: universe/libs -> main content-hub 0.2+16.10.20160914-0ubuntu1 in yakkety amd64: universe/libs/optional/100% -> main content-hub 0.2+16.10.20160914-0ubuntu1 in yakkety arm64: universe/libs/optional/100% -> main content-hub 0.2+16.10.20160914-0ubuntu1 in yakkety armhf: universe/libs/optional/100% -> main content-hub 0.2+16.10.20160914-0ubuntu1 in yakkety i386: universe/libs/optional/100% -> main content-hub 0.2+16.10.20160914-0ubuntu1 in yakkety powerpc: universe/libs/optional/100% -> main content-hub 0.2+16.10.20160914-0ubuntu1 in yakkety ppc64el: universe/libs/optional/100% -> main content-hub-testability 0.2+16.10.20160914-0ubuntu1 in yakkety amd64: universe/libdevel/optional/100% -> main content-hub-testability 0.2+16.10.20160914-0ubuntu1 in yakkety arm64: universe/libdevel/optional/100% -> main content-hub-testability 0.2+16.10.20160914-0ubuntu1 in yakkety armhf: universe/libdevel/optional/100% -> main content-hub-testability 0.2+16.10.20160914-0ubuntu1 in yakkety i386: universe/libdevel/optional/100% -> main content-hub-testability 0.2+16.10.20160914-0ubuntu1 in yakkety powerpc: universe/libdevel/optional/100% -> main content-hub-testability 0.2+16.10.20160914-0ubuntu1 in yakkety ppc64el: universe/libdevel/optional/100% -> main libcontent-hub-dev 0.2+16.10.20160914-0ubuntu1 in yakkety amd64: universe/libdevel/optional/100% -> main libcontent-hub-dev 0.2+16.10.20160914-0ubuntu1 in yakkety arm64: universe/libdevel/optional/100% -> main libcontent-hub-dev 0.2+16.10.20160914-0ubuntu1 in yakkety armhf: universe/libdevel/optional/100% -> main libcontent-hub-dev 0.2+16.10.20160914-0ubuntu1 in yakkety i386: universe/libdevel/optional/100% -> main libcontent-hub-dev 0.2+16.10.20160914-0ubuntu1 in yakkety powerpc: universe/libdevel/optional/100% -> main libcontent-hub-dev 0.2+16.10.20160914-0ubuntu1 in yakkety ppc64el: universe/libdevel/optional/100% -> main libcontent-hub-doc 0.2+16.10.20160914-0ubuntu1 in yakkety amd64: universe/doc/optional/100% -> main libcontent-hub-doc 0.2+16.10.20160914-0ubuntu1 in yakkety arm64: universe/doc/optional/100% -> main libcontent-hub-doc 0.2+16.10.20160914-0ubuntu1 in yakkety armhf: universe/doc/optional/100% -> main libcontent-hub-doc 0.2+16.10.20160914-0ubuntu1 in yakkety i386: universe/doc/optional/100% -> main libcontent-hub-doc 0.2+16.10.20160914-0ubuntu1 in yakkety powerpc: universe/doc/optional/100% -> main libcontent-hub-doc 0.2+16.10.20160914-0ubuntu1 in yakkety ppc64el: universe/doc/optional/100% -> main libcontent-hub-doc 0.2+16.10.20160914-0ubuntu1 in yakkety s390x: universe/doc/optional/100% -> main libcontent-hub0 0.2+16.10.20160914-0ubuntu1 in yakkety amd64: universe/libs/optional/100% -> main libcontent-hub0 0.2+16.10.20160914-0ubuntu1 in yakkety arm64: universe/libs/optional/100% -> main libcontent-hub0 0.2+16.10.20160914-0ubuntu1 in yakkety armhf: universe/libs/optional/100% -> main libcontent-hub0 0.2+16.10.20160914-0ubuntu1 in yakkety i386: universe/libs/optional/100% -> main libcontent-hub0 0.2+16.10.20160914-0ubuntu1 in yakkety powerpc: universe/libs/optional/100% -> main libcontent-hub0 0.2+16.10.20160914-0ubuntu1 in yakkety ppc64el: universe/libs/optional/100% -> main qtdeclarative5-ubuntu-content1 0.2+16.10.20160914-0ubuntu1 in yakkety amd64: universe/libs/optional/100% -> main qtdeclarative5-ubuntu-content1 0.2+16.10.20160914-0ubuntu1 in yakkety arm64: universe/libs/optional/100% -> main qtdeclarative5-ubuntu-content1 0.2+16.10.20160914-0ubuntu1 in yakkety armhf: universe/libs/optional/100% -> main qtdeclarative5-ubuntu-content1 0.2+16.10.20160914-0ubuntu1 in yakkety i386: universe/libs/optional/100% -> main qtdeclarative5-ubuntu-content1 0.2+16.10.20160914-0ubuntu1 in yakkety powerpc: universe/libs/optional/100% -> main qtdeclarative5-ubuntu-content1 0.2+16.10.20160914-0ubuntu1 in yakkety ppc64el: universe/libs/optional/100% -> main 38 publications overridden. ** Changed in: content-hub (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1597453 Title: [MIR] content-hub To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1597453/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1597453] Re: [MIR] content-hub
** Changed in: canonical-devices-system-image Status: In Progress => Fix Committed ** Changed in: canonical-devices-system-image Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1597453 Title: [MIR] content-hub To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1597453/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1597453] Re: [MIR] content-hub
** Changed in: content-hub (Ubuntu) Status: Fix Released => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1597453 Title: [MIR] content-hub To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1597453/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1597453] Re: [MIR] content-hub
This bug was fixed in the package content-hub - 0.2+16.10.20160914-0ubuntu1 --- content-hub (0.2+16.10.20160914-0ubuntu1) yakkety; urgency=medium * Build with hardening=+all (LP: #1597453) -- Ken VanDine Wed, 14 Sep 2016 14:30:52 + ** Changed in: content-hub (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1597453 Title: [MIR] content-hub To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1597453/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1597453] Re: [MIR] content-hub
I still see this issue from lintian: I: libcontent-hub0: hardening-no-fortify-functions usr/lib/x86_64-linux-gnu/libcontent-hub.so.0.2.0 However, as discussed the -D_FORTIFY_SOURCE=2 option is properly passed at build time, and we no longer have the lintian warning about bindnow, which seems to indicate that hardening options are correctly being passed. Please file a bug about this and seek help from the Security Team to figure out why this is either a false-positive or otherwise broken (could it be because cmake is doing something special?). In the meantime, I believe it is fine to accept the MIR despite this issue, as it *is* being worked on and the package looks fine otherwise. ** Changed in: content-hub (Ubuntu) Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1597453 Title: [MIR] content-hub To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1597453/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1597453] Re: [MIR] content-hub
** Also affects: canonical-devices-system-image Importance: Undecided Status: New ** Changed in: canonical-devices-system-image Status: New => Fix Committed ** Changed in: canonical-devices-system-image Status: Fix Committed => In Progress ** Changed in: canonical-devices-system-image Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1597453 Title: [MIR] content-hub To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1597453/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1597453] Re: [MIR] content-hub
** Branch linked: lp:~ken-vandine/content-hub/hardening -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1597453 Title: [MIR] content-hub To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/content-hub/+bug/1597453/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1597453] Re: [MIR] content-hub
@cyphermox: I don't get that from lintian on xenial, is that new for yakkety? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1597453 Title: [MIR] content-hub To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/content-hub/+bug/1597453/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1597453] Re: [MIR] content-hub
N: Processing binary package libcontent-hub0 (version 0.2+16.10.20160830-0ubuntu1, arch amd64) ... I: libcontent-hub0: hardening-no-bindnow usr/lib/x86_64-linux-gnu/libcontent-hub.so.0.2.0 I: libcontent-hub0: hardening-no-fortify-functions usr/lib/x86_64-linux-gnu/libcontent-hub.so.0.2.0 N: Processing binary package qtdeclarative5-ubuntu-content1 (version 0.2+16.10.20160830-0ubuntu1, arch amd64) ... I: qtdeclarative5-ubuntu-content1: hardening-no-bindnow usr/lib/x86_64-linux-gnu/qt5/qml/Ubuntu/Content/libubuntu-content-hub-plugin.so Are these expected? Please fix if possible. Otherwise I see no other issues with content-hub. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1597453 Title: [MIR] content-hub To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/content-hub/+bug/1597453/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1597453] Re: [MIR] content-hub
changing back to New, security is ok it seems and Ken commented on the bugs being feature requests ... was there anything else on content-hub itself to resolve? ** Changed in: content-hub (Ubuntu) Status: Incomplete => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1597453 Title: [MIR] content-hub To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/content-hub/+bug/1597453/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1597453] Re: [MIR] content-hub
security team gave their ack on the trello board -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1597453 Title: [MIR] content-hub To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/content-hub/+bug/1597453/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1597453] Re: [MIR] content-hub
The bulk of the bugs are actually feature requests. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1597453 Title: [MIR] content-hub To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/content-hub/+bug/1597453/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1597453] Re: [MIR] content-hub
Blockers: - I'm concerned about the number of bugs open; we should have an idea whether they are all really still issues. There are a few older bugs with no response at all, or no change in months. - Security team should explicitly sign-off on the review that was previously done, since this package is the basis for the security story behind how applications retrieve files on the system. - This is blocked on the MIR for ubuntu-download-manager still: https://bugs.launchpad.net/ubuntu/+source/ubuntu-download-manager/+bug/1488425 ** Changed in: content-hub (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1597453 Title: [MIR] content-hub To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/content-hub/+bug/1597453/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1597453] Re: [MIR] content-hub
** Changed in: content-hub (Ubuntu) Assignee: (unassigned) => Mathieu Trudel-Lapierre (cyphermox) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1597453 Title: [MIR] content-hub To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/content-hub/+bug/1597453/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1597453] Re: [MIR] content-hub
** Description changed: [Availability] - * Available in universe - + * Available in universe + [Rationale] - * This package is required by unity8 - + * This package is required by unity8 + [Security] - * No known security issues at this time. It has been reviewed by security in the past for use on the phone. - + * No known security issues at this time. It has been reviewed by security in the past for use on the phone. + [Quality assurance] - * This package has both unit tests and autopkgtests - + * This package has both unit tests and autopkgtests + [Dependencies] - Most dependencies are already in main with the exception of the following: - * ubuntu-download-manager - * qtbase-opensource-src-gles (the non-gles variant is in main) - + Most dependencies are already in main with the exception of the following: + * ubuntu-download-manager (bug #1488425) + * qtbase-opensource-src-gles (the non-gles variant is in main) (doesn't need a MIR?) + [Standards compliance] - * This package uses cmake and is properly translated. - + * This package uses cmake and is properly translated. + [Maintenance] - * This package is maintained by Canonical and actively in use on the phone images + * This package is maintained by Canonical and actively in use on the phone images -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1597453 Title: [MIR] content-hub To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/content-hub/+bug/1597453/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs