** Description changed: [Availability] The package libgav1 is already in Ubuntu universe. The package libgav1 builds for the architectures it is designed to work on. It currently builds and works for architectures: amd64, amd64v3, - arm64, armhf, i386, ppc64el, riscv64 - (s390x is not supported by design: libgav1 Build-Depends on - architecture-is-little-endian, so the big-endian s390x build stays in - Dependency-wait.) + arm64, armhf, i386, ppc64el, riscv64 (s390x is in dependency-wait) Link to package: https://launchpad.net/ubuntu/+source/libgav1 [Rationale] - The package libgav1 is required in Ubuntu main as an AV1 decoder - backend that the binary package libavif16 is linked against. libavif - is itself being promoted to main to provide AVIF image format - support to python3-pil (pillow), which is already in main and widely - used. + backend that the binary package libavif16 is linked against. libavif + is itself being promoted to main to provide AVIF image format + support to python3-pil (pillow), which is already in main and widely + used. - The package libgav1 will not generally be useful for a large part of - our user base, but is important/helpful still because libavif16 (a - new main candidate) is compiled with libgav1 as one of its AV1 - decoder backends, and libavif16 is in turn required by python3-pil - for AVIF image support + our user base, but is important/helpful still because libavif16 (a + new main candidate) is compiled with libgav1 as one of its AV1 + decoder backends, and libavif16 is in turn required by python3-pil + for AVIF image support - The package libgav1 is a new runtime dependency of package libavif, - which we are bringing into main (see LP: #2130005) + which we are bringing into main (see LP: #2130005) - The binary package libgav1-2 needs to be in main to achieve the - above. All other binary packages built by libgav1 (libgav1-dev, - libgav1-bin) should remain in universe + above. All other binary packages built by libgav1 (libgav1-dev, + libgav1-bin) should remain in universe - There is no other/better way to solve this that is already in main - or should go universe->main instead of this. libavif supports - several AV1 codec backends (dav1d, libgav1, rav1e, svt-av1) and the - Debian/Ubuntu libavif binaries are linked against all of them, so - each enabled backend libavif16 links must also be in main. dav1d is - the primary/fastest AV1 decoder, but the current libavif build also - enables libgav1 (Google's reference AV1 decoder) as an additional - decoder backend. So, as long as libavif16 keeps that backend, - libgav1 must be in main too. (If the libavif build were changed to - drop the libgav1 backend this MIR would no longer be needed, see the - libavif MIR for that overall decision) + or should go universe->main instead of this. libavif supports + several AV1 codec backends (dav1d, libgav1, rav1e, svt-av1) and the + Debian/Ubuntu libavif binaries are linked against all of them, so + each enabled backend libavif16 links must also be in main. dav1d is + the primary/fastest AV1 decoder, but the current libavif build also + enables libgav1 (Google's reference AV1 decoder) as an additional + decoder backend. So, as long as libavif16 keeps that backend, + libgav1 must be in main too. (If the libavif build were changed to + drop the libgav1 backend this MIR would no longer be needed, see the + libavif MIR for that overall decision) - This is the first time the package will be in main - The package libgav1 is required in Ubuntu main no later than the - 26.10 release, in lockstep with the libavif MIR, in order to drop - the Ubuntu delta in pillow and enable AVIF image support, which is - available upstream but currently disabled due to libavif (and its - codec backends) being in universe + 26.10 release, in lockstep with the libavif MIR, in order to drop + the Ubuntu delta in pillow and enable AVIF image support, which is + available upstream but currently disabled due to libavif (and its + codec backends) being in universe [Security] - No known CVEs / security issues in this software in the past: - - No matches in the National Vulnerability Database for "libgav1" - - https://ubuntu.com/security/cve?package=libgav1 - - https://security-tracker.debian.org/tracker/source-package/libgav1 + - No matches in the National Vulnerability Database for "libgav1" + - https://ubuntu.com/security/cve?package=libgav1 + - https://security-tracker.debian.org/tracker/source-package/libgav1 - no `suid` or `sgid` binaries - no executables in `/sbin` and `/usr/sbin` - Package does not install services, timers or recurring jobs - Packages does not open privileged ports (ports < 1024) - Package does not expose any external endpoints - Packages does not contain extensions to security-sensitive software - (filters, scanners, plugins, UI skins, ...) + (filters, scanners, plugins, UI skins, ...) - No deprecated security algorithms [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Debian/Ubuntu/Upstream and does - not have too many, long-term & critical, open bugs - - Ubuntu https://bugs.launchpad.net/ubuntu/+source/libgav1 - - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=libgav1 - (1 open Debian bug, not critical) - - Upstream bug tracker (Google issue tracker): - https://issuetracker.google.com/issues?q=componentid:750480 + not have too many, long-term & critical, open bugs + - Ubuntu https://bugs.launchpad.net/ubuntu/+source/libgav1 + - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=libgav1 + (1 open Debian bug, not critical) + - Upstream bug tracker (Google issue tracker): + https://issuetracker.google.com/issues?q=componentid:750480 - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package runs a test suite on build time, if it fails it makes - the build fail. The build runs `ctest --force-new-ctest-process - --verbose` over the upstream googletest-based test suite (56 tests, - all passing in the latest build). Link to build log: - * amd64: - https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024677/+files/buildlog_ubuntu-stonking-amd64.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz - * amd64v3: - https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024678/+files/buildlog_ubuntu-stonking-amd64v3.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz - * arm64: - https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024679/+files/buildlog_ubuntu-stonking-arm64.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz - * armhf: - https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024680/+files/buildlog_ubuntu-stonking-armhf.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz - * i386: - https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024681/+files/buildlog_ubuntu-stonking-i386.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz - * ppc64el: - https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024682/+files/buildlog_ubuntu-stonking-ppc64el.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz - * riscv64: TBD + the build fail. The build runs `ctest --force-new-ctest-process + --verbose` over the upstream googletest-based test suite (56 tests, + all passing in the latest build). Link to build log: + * amd64: + https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024677/+files/buildlog_ubuntu-stonking-amd64.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz + * amd64v3: + https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024678/+files/buildlog_ubuntu-stonking-amd64v3.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz + * arm64: + https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024679/+files/buildlog_ubuntu-stonking-arm64.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz + * armhf: + https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024680/+files/buildlog_ubuntu-stonking-armhf.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz + * i386: + https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024681/+files/buildlog_ubuntu-stonking-i386.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz + * ppc64el: + https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024682/+files/buildlog_ubuntu-stonking-ppc64el.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz + * riscv64: TBD - One upstream unit test (the CPU feature-detection test) is - temporarily disabled via debian/patches/0004-Temporarily-disable-CPU-test.patch; - all other tests run and must pass for the build to succeed. + temporarily disabled via debian/patches/0004-Temporarily-disable-CPU-test.patch; + all other tests run and must pass for the build to succeed. - The package runs an autopkgtest, and is currently passing on - this TBD list of architectures, link to test logs TBD + this TBD list of architectures, link to test logs TBD - The package does not have failing build-time tests right now. [Quality assurance - packaging] - A mechanism to detect and fetch new upstream versions is present and - works + works - debian/control defines a correct Maintainer field (Debian Multimedia - Maintainers; the Ubuntu delta is a no-change rebuild only, so the - Debian maintainer is retained) + Maintainers; the Ubuntu delta is a no-change rebuild only, so the + Debian maintainer is retained) - This package does not yield massive lintian Warnings, Errors - Recent build log of the package: - https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024677/+files/buildlog_ubuntu-stonking-amd64.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz + https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024677/+files/buildlog_ubuntu-stonking-amd64.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz - ```lintian --pedantic - P: libgav1 source: maintainer-manual-page [debian/gav1_decode.1] - P: libgav1 source: redundant-priority-optional-field [debian/control:3] - P: libgav1 source: trailing-whitespace [debian/changelog:92] - ``` + P: libgav1 source: maintainer-manual-page [debian/gav1_decode.1] + P: libgav1 source: redundant-priority-optional-field [debian/control:3] + P: libgav1 source: trailing-whitespace [debian/changelog:92] + ``` - Lintian overrides are not present - This package does not rely on obsolete or about to be demoted - packages + packages - This package has no python2 or GTK2 dependencies - The package will not be installed by default - Packaging and build is easy: debian/rules is short and only sets - hardening + LTO, disables non-baseline SIMD (SSE4.1/AVX2 on x86, - selectively NEON on arm) to meet Debian's ISA baseline, links - -latomic on a few arches, and enables shared-library builds. Link to - debian/rules: - https://git.launchpad.net/ubuntu/+source/libgav1/tree/debian/rules + hardening + LTO, disables non-baseline SIMD (SSE4.1/AVX2 on x86, + selectively NEON on arm) to meet Debian's ISA baseline, links + -latomic on a few arches, and enables shared-library builds. Link to + debian/rules: + https://git.launchpad.net/ubuntu/+source/libgav1/tree/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - Used check-mir from ubuntu-dev-tools to validate all dependencies or - recommends are in main. + recommends are in main. [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - The owning team will be ~debcrafters-packages and I have their - acknowledgment for that commitment + acknowledgment for that commitment - The future owning team is already subscribed to the package before - promotion + promotion - This does not use static builds - This does not use vendored code - This package is not rust based - The package has been built within the last 3 months in the archive - Build link on launchpad: - https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1 + https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1 - This change will not impact other teams (it only adds an AV1 decoder - backend used by libavif) + backend used by libavif) [Background information] The Package description explains the package well Upstream Name is libgav1 Link to upstream project: https://chromium.googlesource.com/codecs/libgav1/
** Description changed: [Availability] The package libgav1 is already in Ubuntu universe. The package libgav1 builds for the architectures it is designed to work on. It currently builds and works for architectures: amd64, amd64v3, - arm64, armhf, i386, ppc64el, riscv64 (s390x is in dependency-wait) + arm64, armhf, i386, ppc64el, riscv64 + (s390x is not supported by design as libgav1 Build-Depends on + architecture-is-little-endian, so the big-endian s390x build stays in + dependency-wait) Link to package: https://launchpad.net/ubuntu/+source/libgav1 [Rationale] - The package libgav1 is required in Ubuntu main as an AV1 decoder backend that the binary package libavif16 is linked against. libavif is itself being promoted to main to provide AVIF image format support to python3-pil (pillow), which is already in main and widely used. - The package libgav1 will not generally be useful for a large part of our user base, but is important/helpful still because libavif16 (a new main candidate) is compiled with libgav1 as one of its AV1 decoder backends, and libavif16 is in turn required by python3-pil for AVIF image support - The package libgav1 is a new runtime dependency of package libavif, which we are bringing into main (see LP: #2130005) - The binary package libgav1-2 needs to be in main to achieve the above. All other binary packages built by libgav1 (libgav1-dev, libgav1-bin) should remain in universe - There is no other/better way to solve this that is already in main or should go universe->main instead of this. libavif supports several AV1 codec backends (dav1d, libgav1, rav1e, svt-av1) and the Debian/Ubuntu libavif binaries are linked against all of them, so each enabled backend libavif16 links must also be in main. dav1d is the primary/fastest AV1 decoder, but the current libavif build also enables libgav1 (Google's reference AV1 decoder) as an additional decoder backend. So, as long as libavif16 keeps that backend, libgav1 must be in main too. (If the libavif build were changed to drop the libgav1 backend this MIR would no longer be needed, see the libavif MIR for that overall decision) - This is the first time the package will be in main - The package libgav1 is required in Ubuntu main no later than the 26.10 release, in lockstep with the libavif MIR, in order to drop the Ubuntu delta in pillow and enable AVIF image support, which is available upstream but currently disabled due to libavif (and its codec backends) being in universe [Security] - No known CVEs / security issues in this software in the past: - No matches in the National Vulnerability Database for "libgav1" - https://ubuntu.com/security/cve?package=libgav1 - https://security-tracker.debian.org/tracker/source-package/libgav1 - no `suid` or `sgid` binaries - no executables in `/sbin` and `/usr/sbin` - Package does not install services, timers or recurring jobs - Packages does not open privileged ports (ports < 1024) - Package does not expose any external endpoints - Packages does not contain extensions to security-sensitive software (filters, scanners, plugins, UI skins, ...) - No deprecated security algorithms [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Debian/Ubuntu/Upstream and does not have too many, long-term & critical, open bugs - Ubuntu https://bugs.launchpad.net/ubuntu/+source/libgav1 - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=libgav1 (1 open Debian bug, not critical) - Upstream bug tracker (Google issue tracker): https://issuetracker.google.com/issues?q=componentid:750480 - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package runs a test suite on build time, if it fails it makes the build fail. The build runs `ctest --force-new-ctest-process --verbose` over the upstream googletest-based test suite (56 tests, all passing in the latest build). Link to build log: * amd64: https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024677/+files/buildlog_ubuntu-stonking-amd64.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz * amd64v3: https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024678/+files/buildlog_ubuntu-stonking-amd64v3.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz * arm64: https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024679/+files/buildlog_ubuntu-stonking-arm64.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz * armhf: https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024680/+files/buildlog_ubuntu-stonking-armhf.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz * i386: https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024681/+files/buildlog_ubuntu-stonking-i386.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz * ppc64el: https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024682/+files/buildlog_ubuntu-stonking-ppc64el.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz * riscv64: TBD - One upstream unit test (the CPU feature-detection test) is temporarily disabled via debian/patches/0004-Temporarily-disable-CPU-test.patch; all other tests run and must pass for the build to succeed. - The package runs an autopkgtest, and is currently passing on this TBD list of architectures, link to test logs TBD - The package does not have failing build-time tests right now. [Quality assurance - packaging] - A mechanism to detect and fetch new upstream versions is present and works - debian/control defines a correct Maintainer field (Debian Multimedia Maintainers; the Ubuntu delta is a no-change rebuild only, so the Debian maintainer is retained) - This package does not yield massive lintian Warnings, Errors - Recent build log of the package: https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1/+build/33024677/+files/buildlog_ubuntu-stonking-amd64.libgav1_0.20.0-2ubuntu1_BUILDING.txt.gz - ```lintian --pedantic P: libgav1 source: maintainer-manual-page [debian/gav1_decode.1] P: libgav1 source: redundant-priority-optional-field [debian/control:3] P: libgav1 source: trailing-whitespace [debian/changelog:92] ``` - Lintian overrides are not present - This package does not rely on obsolete or about to be demoted packages - This package has no python2 or GTK2 dependencies - The package will not be installed by default - Packaging and build is easy: debian/rules is short and only sets hardening + LTO, disables non-baseline SIMD (SSE4.1/AVX2 on x86, selectively NEON on arm) to meet Debian's ISA baseline, links -latomic on a few arches, and enables shared-library builds. Link to debian/rules: https://git.launchpad.net/ubuntu/+source/libgav1/tree/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - Used check-mir from ubuntu-dev-tools to validate all dependencies or recommends are in main. [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - The owning team will be ~debcrafters-packages and I have their acknowledgment for that commitment - The future owning team is already subscribed to the package before promotion - This does not use static builds - This does not use vendored code - This package is not rust based - The package has been built within the last 3 months in the archive - Build link on launchpad: https://launchpad.net/ubuntu/+source/libgav1/0.20.0-2ubuntu1 - This change will not impact other teams (it only adds an AV1 decoder backend used by libavif) [Background information] The Package description explains the package well Upstream Name is libgav1 Link to upstream project: https://chromium.googlesource.com/codecs/libgav1/ -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2158712 Title: [MIR] libgav1 (libavif dependency) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libgav1/+bug/2158712/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
