** Description changed: - Please sync fdroidserver 1.0.3-1 (universe) from Debian unstable (main). + Please include fdroidserver 1.0.8-3 (universe) in Ubuntu/bionic LTS as a + Stable Release Update. It can be sourced from Debian testing (main) and + Ubuntu cosmic (universe). + + [Impact] + We (the Debian Android Tools Team) did a bunch of testing related to the Ubuntu/bionic release. This package also received a full third party - security audit after the DebianImportFreeze. These are the final round - of bugfixes from those efforts. + security audit after the DebianImportFreeze. Then there was a focused + effort to get the full test suite running in autopkgtest. These changes + were mostly done upstream. These are the final round of bugfixes from + both those efforts. - Changelog entries since current bionic version 1.0.0-1: + This also fixes: + * https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1763090 + * https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1762183 + + + [Test Case] + + The security issues fixed will be documented once we publicly publish + the security audit report. That report includes issues in other F-Droid + packages, so even though all fdroidserver issues have been fixed, we + can't yet publish the full report. + + The upstream dev process includes a large test suite: + https://gitlab.com/fdroid/fdroidserver/pipelines/25114656 + + It also now has autopkgtest passing on ARM and x86 + https://autopkgtest.ubuntu.com/packages/fdroidserver + + Also in Debian: + https://ci.debian.net/packages/f/fdroidserver/testing/amd64/ + + + The test suite has never 100% passed for ppc64el and s390x, due to issues in the dependencies. Therefore, autopkgtest is still failing on those arches. Fixing them would require complicated fixes to dependencies. + + + [Regression Potential] + + The regression potential is basically zero. Upstream focused + development on making this package work well with Ubuntu/bionic, and new + features have not been added since bionic has been released. The + existing, extensive, upstream test suite is now run via autopkgtest. + The changes were only to fix release-critical bugs. I'm also part of + upstream on this package. + + + [Other Info] + + Changelog entries since current bionic version 1.0.2-1: + + fdroidserver (1.0.8-3) unstable; urgency=medium + + * hack to get autopkgtest to skip failing gpg test + + -- Hans-Christoph Steiner <[email protected]> Wed, 27 Jun 2018 21:03:54 + +0200 + + fdroidserver (1.0.8-2) unstable; urgency=medium + + * autopkgtest: explicitly purge gnupg so tests pass + + -- Hans-Christoph Steiner <[email protected]> Mon, 25 Jun 2018 23:28:06 + +0200 + + fdroidserver (1.0.8-1) unstable; urgency=medium + + * New upstream version + * remove python3-distutils, it is no longer needed + + -- Hans-Christoph Steiner <[email protected]> Mon, 25 Jun 2018 13:12:21 + +0200 + + fdroidserver (1.0.7-2) unstable; urgency=medium + + * Depends: python3-distutils so its always there + + -- Hans-Christoph Steiner <[email protected]> Mon, 25 Jun 2018 13:12:19 + +0200 + + fdroidserver (1.0.7-1) unstable; urgency=medium + + * New upstream release + * fix autopkgtest + + -- Hans-Christoph Steiner <[email protected]> Wed, 20 Jun 2018 22:27:59 + +0200 + + fdroidserver (1.0.6-1) unstable; urgency=medium + + * New upstream release + + -- Hans-Christoph Steiner <[email protected]> Fri, 25 May 2018 17:15:51 + +0200 + + fdroidserver (1.0.4-3) unstable; urgency=medium + + * fix autopkgtest run: working dir, and UTF-8 environment + + -- Hans-Christoph Steiner <[email protected]> Fri, 18 May 2018 10:54:26 + +0200 + + fdroidserver (1.0.4-2) unstable; urgency=medium + + * run upstream testsuite using autopkgtest + + -- Hans-Christoph Steiner <[email protected]> Thu, 17 May 2018 12:17:12 + +0200 + + fdroidserver (1.0.4-1) unstable; urgency=medium + + * New upstream version 1.0.4 + * Standards-Version: 4.1.4 no changes + * support all the Java 10 and 11 packages + * works with only androguard, removed optional deps + * add debian/upstream/metadata file + * Depends: androguard only on arches where it works + + -- Hans-Christoph Steiner <[email protected]> Tue, 15 May 2018 14:04:05 + +0200 + + fdroidserver (1.0.3-2) unstable; urgency=medium + + * only depend on aapt/androguard/zipalign on arches where available + + -- Hans-Christoph Steiner <[email protected]> Fri, 23 Mar 2018 13:01:27 + +0100 fdroidserver (1.0.3-1) unstable; urgency=medium * New upstream version * tighten up Depends to install fewer packages -- Hans-Christoph Steiner <[email protected]> Thu, 22 Mar 2018 23:25:49 +0100 - - fdroidserver (1.0.2-1) unstable; urgency=medium - - * New upstream version - - -- Hans-Christoph Steiner <[email protected]> Thu, 22 Feb 2018 21:38:07 - +0100
** Patch added: "fdroidserver_1.0.2-1_to_1.0.8-3.debdiff" https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1758196/+attachment/5161415/+files/fdroidserver_1.0.2-1_to_1.0.8-3.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1758196 Title: Sync fdroidserver 1.0.8-3 (universe) from Debian/testing (main) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1758196/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
