[Bug 1475021] Re: [MIR] gcab

This bug was fixed in the package appstream-glib - 0.5.8-1ubuntu6 --- appstream-glib (0.5.8-1ubuntu6) xenial; urgency=medium * Re-enable firmware support. (LP: #1544376) - debian/rules - debian/control - debian/libappstream-glib8.symbols * Add back dependency on gcab

[Bug 1475021] Re: [MIR] gcab

Override component to main gcab 0.6-1ubuntu1 in xenial: universe/misc -> main gcab 0.6-1ubuntu1 in xenial amd64: universe/utils/optional/100% -> main gcab 0.6-1ubuntu1 in xenial arm64: universe/utils/optional/100% -> main gcab 0.6-1ubuntu1 in xenial armhf: universe/utils/optional/100% -> main gcab

[Bug 1475021] Re: [MIR] gcab

I'll subscribe the foundations-bugs team to the package. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1475021 Title: [MIR] gcab To manage notifications about this bug go to:

[Bug 1475021] Re: [MIR] gcab

Well adding them as a subscriber to this bug. Can an admin from foundations team comment if this is in your potential purview? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1475021 Title: [MIR]

[Bug 1475021] Re: [MIR] gcab

If they agree, I'm on board. :) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1475021 Title: [MIR] gcab To manage notifications about this bug go to:

Re: [Bug 1475021] Re: [MIR] gcab

I'd expect that to be foundations, that seem appropriate? On Wed, Feb 17, 2016, 14:26 Michael Terry wrote: > Mario, I think just add a team bug subscriber for whomever is looking > after this in Ubuntu and we're good. > > ** Changed in: gcab (Ubuntu) >

[Bug 1475021] Re: [MIR] gcab

Mario, I think just add a team bug subscriber for whomever is looking after this in Ubuntu and we're good. ** Changed in: gcab (Ubuntu) Status: Fix Released => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1475021] Re: [MIR] gcab

This bug was fixed in the package gcab - 0.6-1ubuntu1 --- gcab (0.6-1ubuntu1) xenial; urgency=medium * Add zalloc_integer_overflow.patch (LP: #1475021) -- Mario Limonciello Wed, 17 Feb 2016 12:29:13 -0600 ** Changed in: gcab (Ubuntu) Status:

[Bug 1475021] Re: [MIR] gcab

Thanks Seth. I've made that change and am uploading right now. Have you submitted this upstream already? MIR team, what status should this bug be set to so you can proceed? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1475021] Re: [MIR] gcab

I reviewed gcab version 0.6-1 as checked into xenial. This shouldn't be considered a full security audit but rather a quick gauge of maintainability. - gcab provides a library and program to access Microsoft Cabinet files - Build-Depends: debhelper, dh-autoreconf, gobject-introspection,

[Bug 1475021] Re: [MIR] gcab

Thanks Tyler! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1475021 Title: [MIR] gcab To manage notifications about this bug go to:

[Bug 1475021] Re: [MIR] gcab

I've temporarily dropped the firmware support from gnome-software / appstream-glib (bug 1544376) so that unblocks us getting gnome-software into Xenial. We'll enable firmware support as soon as this MIR is completed. ** Changed in: gcab (Ubuntu) Importance: Critical => High -- You received

[Bug 1475021] Re: [MIR] gcab

This is holding up a chain of updates - appstream-glib -> fwupd -> gnome-software. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1475021 Title: [MIR] gcab To manage notifications about this bug go

Re: [Bug 1475021] Re: [MIR] gcab

Hopefully I capture this all correctly: appstream-glib is in main. It has a dependency upon gcab sitting in proposed. fwupd is in universe. It has a dependency upon the newer appstream-glib to build. gnome-software is in universe. It has a dependency upon the newer fwupd and appstream-glib to

Re: [Bug 1475021] Re: [MIR] gcab

On 2016-02-10 03:48:45, Robert Ancell wrote: > The plan is to use GNOME Software as the software store for Ubuntu 16.04 > - so we need it in main before feature freeze. I was aware of the plan but wasn't aware that the security review needed to happen before feature freeze (as mentioned, that is

Re: [Bug 1475021] Re: [MIR] gcab

On 2016-02-10 01:10:23, Robert Ancell wrote: > This is holding up a chain of updates - appstream-glib -> fwupd -> > gnome-software. Hi Robert - It is on our security review list but that list has grown large. It'll happen by 16.04 but we typically don't try to target security reviews for feature

[Bug 1475021] Re: [MIR] gcab

The plan is to use GNOME Software as the software store for Ubuntu 16.04 - so we need it in main before feature freeze. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1475021 Title: [MIR] gcab To

[Bug 1475021] Re: [MIR] gcab

** Changed in: gcab (Ubuntu) Importance: High => Critical -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1475021 Title: [MIR] gcab To manage notifications about this bug go to:

[Bug 1475021] Re: [MIR] gcab

Required for fwupd MIR (bug 1536871) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1475021 Title: [MIR] gcab To manage notifications about this bug go to:

[Bug 1475021] Re: [MIR] gcab

** Tags added: gnome-software-ubuntu -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1475021 Title: [MIR] gcab To manage notifications about this bug go to:

[Bug 1475021] Re: [MIR] gcab

@Tyler, is there any chance somebody looks at it before the end of year? it would be good have things building early rather than mid-cycle -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1475021 Title:

[Bug 1475021] Re: [MIR] gcab

Adding ftbfs tag, and appstream-glib as affected package, such that this bug report shows up in the FTBFS report for xenial. This way, next person looking at ftbfs page, will easily find this pending MIR. -- You received this bug notification because you are a member of Ubuntu Bugs, which is

[Bug 1475021] Re: [MIR] gcab

>From bug subscriber point of view this makes sense for foundations and/or kernel team to own. ** Also affects: appstream-glib (Ubuntu) Importance: Undecided Status: New ** Changed in: appstream-glib (Ubuntu) Status: New => Fix Committed ** Changed in: appstream-glib (Ubuntu)

[Bug 1475021] Re: [MIR] gcab

** Changed in: gcab (Ubuntu) Status: Confirmed => Triaged ** Changed in: gcab (Ubuntu) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1475021 Title: [MIR]

[Bug 1475021] Re: [MIR] gcab

Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: gcab (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1475021 Title:

[Bug 1475021] Re: [MIR] gcab

Hi Mario - we are aware of this MIR and it is in our list to get to during the 16.04 cycle. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1475021 Title: [MIR] gcab To manage notifications about

[Bug 1475021] Re: [MIR] gcab

I just wanted to bump this for the security team. The current release of appstream-glib (0.5.2) isn't able to build without gcab. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1475021 Title: [MIR]

[Bug 1475021] Re: [MIR] gcab

Packaging wise, gcab is good. No delta, symbols file, no open bugs. It does need a team bug subscriber in Ubuntu though, for the team that will look after it. I'm also going to pass to the security team for a quick look, since this reads binary file formats and deals with firmware (and has had