Thanks; I've fixed the copyright years nit in iprutils 2.4.15.1-2, just
uploaded to unstable.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
[MIR] ppc64-diag needed in minimal for
iprutils:
- the service auto-starting is implemented in 2.4.15.1-1
- no open issues in Debian and Ubuntu
- according to the security team no security review necessary
- minor nit: copyright years in debian/copyright are outdated
** Changed in: iprutils (Ubuntu)
Status: Incomplete =>
Override component to main
iprutils 2.4.15.1-1 in artful: universe/admin -> main
iprutils 2.4.15.1-1 in artful ppc64el: universe/admin/extra/100% -> main
iprutils-udeb 2.4.15.1-1 in artful ppc64el:
universe/debian-installer/extra/100% -> main
3 publications overridden.
** Changed in: iprutils
** Changed in: iprutils (Ubuntu)
Assignee: Adam Conrad (adconrad) => Matthias Klose (doko)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
[MIR] ppc64-diag needed in minimal for
> setting the MIR status to incomplete
Why? What information are you waiting for that's not covered in
https://bugs.launchpad.net/ubuntu/+source/ppc64-diag/+bug/1417608/comments/34
?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
setting the MIR status to incomplete
** Changed in: iprutils (Ubuntu)
Status: New => Incomplete
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
[MIR] ppc64-diag needed in
** Changed in: iprutils (Ubuntu)
Importance: Undecided => High
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
[MIR] ppc64-diag needed in minimal for hotplug capabilities
To manage
@Pavitra,
If you don't have device it will not be listed. I think its expected
behaviour on BMC based system.
-Vasant
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
[MIR] ppc64-diag
Hi,
Tested iprutils of version 2.4.13.1-2 on ubuntu 16.10, no issues are
observed on Tuleta machine. But devices are not listed on BMC based
systems [Habanero, Garisson]. Please let me know if this is expected
behavior.
On Tuleta
--
Display Hardware Status
Kalpana, Pavithra, "unstable" is from Debian. Launchpad mirrors Debian's
packages, which can be retrieved by hand if that's easier.
For e.g. the iprutils source package in Ubuntu:
https://launchpad.net/ubuntu/+source/iprutils
The corresponding source packages in Debian are mirrored to:
Hi,
Tried adding "deb http://ddebs.ubuntu.com/ yakkety-proposed main
restricted universe multiverse" still getting iprutils version as
"2.4.13.1-1".
Thanks,
Pavithra
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Not very clear on "unstable" repo path for 16.10.
Can someone post the "unstable" complete repo path that can be added to
sources.list.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
Colin,
I will ask my test team to verify iprutils ASAP.
-Vasant
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
[MIR] ppc64-diag needed in minimal for hotplug capabilities
To manage
Please could somebody test this upload to unstable?
iprutils (2.4.13.1-2) unstable; urgency=medium
* When using systemd, only start services when the hardware is present and
after the ipr driver is loaded (based on a Fedora patch; see LP
#1417608).
-- Colin Watson
Given the lateness of this change in the 16.10 cycle, the daemons being
unconditionally started (which AIUI is being worked on, but not fixed in
the current package), and the status of bug #1537116, I will upload
lsvpd to re-drop the dep on iprutils for now.
--
You received this bug notification
Package makes sense in main as a dependency of lsvpd, and as a component
of hardware support in its own right. Meets the MIR requirements.
There is no upstream test suite. The package ships three daemons for
hardware support , which will be enabled by default when installing the
package - but
Override component to main
servicelog 1.1.14-1 in yakkety: universe/misc -> main
servicelog 1.1.14-1 in yakkety powerpc: universe/misc/extra/100% -> main
servicelog 1.1.14-1 in yakkety ppc64el: universe/misc/extra/100% -> main
3 publications overridden.
** Changed in: servicelog (Ubuntu)
Override component to main
lsvpd 1.7.7-1 in yakkety: universe/misc -> main
lsvpd 1.7.7-1 in yakkety powerpc: universe/misc/extra/100% -> main
lsvpd 1.7.7-1 in yakkety ppc64el: universe/misc/extra/100% -> main
3 publications overridden.
** Changed in: lsvpd (Ubuntu)
Status: Confirmed =>
Override component to main
libservicelog 1.1.16-2 in yakkety: universe/libdevel -> main
libservicelog-1.1-1 1.1.16-2 in yakkety powerpc: universe/libdevel/extra/100%
-> main
libservicelog-1.1-1 1.1.16-2 in yakkety ppc64el: universe/libdevel/extra/100%
-> main
libservicelog-dev 1.1.16-2 in
component-mismatches reminds us that iprutils is also a dependency of
lsvpd and will need to be MIRed. opening a bug task.
** Changed in: iprutils (Ubuntu)
Status: New => Incomplete
** Changed in: iprutils (Ubuntu)
Assignee: (unassigned) => Adam Conrad (adconrad)
--
You received
Override component to main
libvpd 2.2.5-2 in yakkety: universe/libs -> main
libvpd-2.2-2 2.2.5-2 in yakkety powerpc: universe/libs/extra/100% -> main
libvpd-2.2-2 2.2.5-2 in yakkety ppc64el: universe/libs/extra/100% -> main
libvpd-dev 2.2.5-2 in yakkety powerpc: universe/libdevel/extra/100% ->
ppc64-diag has now been seeded.
** Changed in: ppc64-diag (Ubuntu)
Status: Confirmed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
[MIR] ppc64-diag needed in
Hi Steve, I am glad to hear that. Thank you!
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
[MIR] ppc64-diag needed in minimal for hotplug capabilities
To manage notifications about
Breno, yes, this is now in Adam's hands to make the necessary changes to
the installer and seeds for inclusion of these packages. It is also a
candidate for retroactively including in main for 16.04 provided we have
the right versions there.
--
You received this bug notification because you are
Thanks Seth. What are the next steps here? Are we planning to have these
packages migrated to 'main' in 16.10 or future releases?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
[MIR]
Vasant, Breno, thank you and your teams for working on these issues. I
didn't read these as closely as you deserve but what I saw impressed me.
Well done.
Security team ACK for promoting libservicelog libvpd lsvpd ppc64-diag
servicelog to main.
** Changed in: libservicelog (Ubuntu)
I understand that these packages are currently blocked on a security
team re-review following the inclusion of the upstream updates in the
archive. Tentatively assigning back to Seth.
** Changed in: libservicelog (Ubuntu)
Assignee: (unassigned) => Seth Arnold (seth-arnold)
** Changed in:
Steve,
Thanks a lot.
-Vasant
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
[MIR] ppc64-diag needed in minimal for hotplug capabilities
To manage notifications about this bug go
libvpd 2.2.5 has now also been uploaded.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
[MIR] ppc64-diag needed in minimal for hotplug capabilities
To manage notifications about this
libservicelog 1.1.16 and servicelog 1.1.14 have now been reviewed and
uploaded to xenial.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
[MIR] ppc64-diag needed in minimal for hotplug
We have request to update all the packages ..But I tagged upstream
version just after Xenial code cutoff date..These are Power system
specific packages and we take care of validating. Hence if possible can
you please update these packages?
libservicelog :
Of the listed packages, we have the following in xenial today:
ppc64-diag 2.7.0
lsvpd 1.7.6
libservicelog, servicelog, libvpd are still at earlier versions and
would need to be upgraded to include these fixes.
--
You received this bug notification because you are a member of Ubuntu
Bugs,
Seth,
We have addressed most of the concerned raised by you. Can you please
review below packages and let us know if you have any other concerns to
take this packages to default ISO.
libservicelog v1.1.16
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: servicelog (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: lsvpd (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: libvpd (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: ppc64-diag (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
Title:
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: libservicelog (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1417608
I reviewed servicelog git version 4cb0d4987ad00d4b0d5359ddb495fd20fcd7e01a;
this shouldn't be considered a full security audit.
- main() in log_repair_action.c doesn't check fread() error returns, a
zero return could cause out-of-buffer write
- main() in log_repair_action.c doesn't check
Thanks for your patience with these reviews.
We would like fixes for the issues I've raised above as soon as
practical; I'm sorry that this feedback is too late to make the 14.04.3
images, but hopefully we can have updates available near the time of
release.
The smoothest way forward would be
I reviewed libservicelog commit ebf842c43e0ad16e975db1f4a10b4f83ccbfdf72;
this sholdn't be considered a full security audit.
Nearly everything I found is an instance of one of two issues:
- Using snprintf() rether than sqlite3_bind_*() and prepared statements --
sometimes the parameters are
I reviewed libvpd, git checkout 4d57eb358f6ae4247b3f8e8160d8f16ab9fa;
this shouldn't be considered a full security review.
Some of what I found look like serious reliability issues, perhaps even
security issues; some look like standard bugs. I've also highlighted
several examples of assuming
Seth,
Thanks for the reviewing lsvpd package.. I did went through lsvpd/libvpd
package sometime back and we found some of these issues. Currently we are
working on fixing them. We will go through this list as well and fix them as
soon as possible.
Between its nice if you can review other
This review was made against lsvpd version 1.7.5-0ubuntu1; I think this
codebase would benefit from ASAN, valgrind, and consistent use of Lindent
or similar script around indent(1) or similar code formatter.
There is recurring hiding of errno and other specific errors that are
replaced by
** Description changed:
IBM has requested that ppc64-diag be installed by default to support
hotplug features on ppc64el kit. Packaging, security history, and
upstream maintenance all seem fine, but I'd like a quick security review
before we go about promoting it for them.
+
+ NOTE:
Seth , Adam,
We have fixed all the security related issues and released v2.6.8 [1].
Could you please take a look?
[1] http://sourceforge.net/projects/linux-
diag/files/ppc64-diag/v2.6.8/ppc64-diag-2.6.8.tar.gz/download
-Vasant
--
You received this bug notification because you are a member of
Thanks for the catch, Breno. In my haste to file the bug, I didn't
check and notice that all those extra deps were also in universe. This
probably means we're cutting it too close for those packages to end up
installed by default with the 14.04.2 installer, but we can still change
the
Hi Seth,
We are working internally to solve these problems and make a new release
for this package.. Since ppc64-diag depends on some other packages, I
understand that the other packages will need to be installed by default,
and I am wondering if it might be a problem also:
These are the
Adam has said he'll work with IBM on a timeline for fixing the above
issues; security team ACK on promoting ppc64-diag to main on the
condition that an SRU is prepared with the fixes when they are
available.
Thanks
--
You received this bug notification because you are a member of Ubuntu
Bugs,
I reviewed ppc64-diag version 2.6.7-0ubuntu2 from vivid. This shouldn't be
considered a full security audit but rather a quick gauge of
maintainability.
The collection of daemons and tools in this package read
platform-dependant information and report it for sysadmins to use.
The code quality
50 matches
Mail list logo
