[Bug 418223] Re: MIR for rampart
** Changed in: rampart (Ubuntu Karmic) Status: In Progress = Fix Released -- MIR for rampart https://bugs.launchpad.net/bugs/418223 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 418223] Re: MIR for rampart
+1 from me, looks to be very isolated (i.e. only within axis2c). Nothing stands out as obviously unsafe. ** Changed in: rampart (Ubuntu Karmic) Status: New = In Progress ** Changed in: rampart (Ubuntu Karmic) Assignee: Kees Cook (kees) = (unassigned) -- MIR for rampart https://bugs.launchpad.net/bugs/418223 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 418223] Re: MIR for rampart
I proactively promoted this, since it's blocking server CD building and testing. (cf. recent discussion about promoting the entire euca stack now, and reviewing it later, to avoid having to review/fix everything by FF). ** Also affects: rampart (Ubuntu Karmic) Importance: Undecided Assignee: Kees Cook (kees) Status: New ** Changed in: rampart (Ubuntu Karmic) Importance: Undecided = High -- MIR for rampart https://bugs.launchpad.net/bugs/418223 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 418223] Re: MIR for rampart
I uploaded some minor fixes. Thanks! Nobody subscribed to bugmail. I am now. I see you enabled OpenSSL support; is this library used in combination with any GPL software? This is considered problematic IIRC. I understand your concern. However, rampart itself is licensed under the Apache license, so there are no licensing incompatibilites in the rampart package itself. Any such issues would have to be dealt with separately. As for the missing symbols, the intention is for rampart to be loaded by Axis2/C, which I believe will provide these symbols. Rampart is not intended to be used outside of Axis2/C. -- MIR for rampart https://bugs.launchpad.net/bugs/418223 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 418223] Re: MIR for rampart
Note that this is required for Eucalyptus to reach main (it's one of the 2 non-Java packages required). -- MIR for rampart https://bugs.launchpad.net/bugs/418223 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 418223] Re: MIR for rampart
This is good to go on my side if you sub to bug mail and comment on the licensing issue; since this is a security lib, I'd rather let Kees have a chance to comment. Also FYI there's a new upstream version and these warnings seem to indicate a missing link flag: dpkg-shlibdeps: warning: symbol oxs_axiom_get_node_content used by debian/librampart0/usr/lib/liboxstokens.so.0.0.0 found in none of the libraries. dpkg-shlibdeps: warning: symbol axiom_element_set_text used by debian/librampart0/usr/lib/liboxstokens.so.0.0.0 found in none of the libraries. dpkg-shlibdeps: warning: symbol axutil_array_list_get used by debian/librampart0/usr/lib/liboxstokens.so.0.0.0 found in none of the libraries. dpkg-shlibdeps: warning: symbol axiom_element_add_attribute used by debian/librampart0/usr/lib/liboxstokens.so.0.0.0 found in none of the libraries. dpkg-shlibdeps: warning: symbol oxs_util_generate_id used by debian/librampart0/usr/lib/liboxstokens.so.0.0.0 found in none of the libraries. dpkg-shlibdeps: warning: symbol axutil_array_list_size used by debian/librampart0/usr/lib/liboxstokens.so.0.0.0 found in none of the libraries. dpkg-shlibdeps: warning: symbol axutil_qname_free used by debian/librampart0/usr/lib/liboxstokens.so.0.0.0 found in none of the libraries. dpkg-shlibdeps: warning: symbol oxs_error used by debian/librampart0/usr/lib/liboxstokens.so.0.0.0 found in none of the libraries. dpkg-shlibdeps: warning: symbol axiom_node_get_first_element used by debian/librampart0/usr/lib/liboxstokens.so.0.0.0 found in none of the libraries. dpkg-shlibdeps: warning: symbol axiom_element_get_attribute_value_by_name used by debian/librampart0/usr/lib/liboxstokens.so.0.0.0 found in none of the libraries. ** Changed in: rampart (Ubuntu) Assignee: Loïc Minier (lool) = Kees Cook (kees) -- MIR for rampart https://bugs.launchpad.net/bugs/418223 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 418223] Re: MIR for rampart
I uploaded some minor fixes. Nobody subscribed to bugmail. I see you enabled OpenSSL support; is this library used in combination with any GPL software? This is considered problematic IIRC. ** Changed in: rampart (Ubuntu) Assignee: (unassigned) = Loïc Minier (lool) -- MIR for rampart https://bugs.launchpad.net/bugs/418223 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
