libsoup3 3.0.6-1 in kinetic: universe/misc -> main
Override [y|N]? y
1 publication overridden.
** Changed in: libsoup3 (Ubuntu)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to libsoup3 in Ubuntu.
https://bugs.launchpad.net/bugs/1972153
Title:
[MIR] libsoup3
Status in libsoup3 package in Ubuntu:
Fix Released
Bug description:
[Availability]
Already in Ubuntu universe.
Builds and works for all supported architectures including i386
https://launchpad.net/ubuntu/+source/libsoup3
[Rationale]
GNOME is switching to libsoup3. This has been delayed a few releases but I
suspect it will be more mandatory for GNOME 43 or GNOME 44.
- gnome-bluetooth3 is a new runtime dependency of package gnome-shell that
we already support
libsoup3 is requested in Ubuntu main no longer than August 4 to allow
time for reverse dependencies to be switched before 22.10 Feature
Freeze August 25.
[Security]
- https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=libsoup
- https://ubuntu.com/security/cve?package=libsoup2.4
- https://security-tracker.debian.org/tracker/source-package/libsoup2.4
- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Package does not install services, timers or recurring jobs
- Package does not open privileged ports (ports < 1024)
- debian/rules builds with all standard hardening flags
This is a security-sensitive library that allows apps to access data
over the Internet.
[Quality assurance - function/usage]
The package works well right after install
[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu and has not too many
and long term critical bugs open
- Ubuntu https://bugs.launchpad.net/ubuntu/+source/libsoup3
- Ubuntu older series https://bugs.launchpad.net/ubuntu/+source/libsoup2.4
- Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=libsoup3
- Debian older series
https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=libsoup2.4
- GNOME https://gitlab.gnome.org/GNOME/libsoup/-/issues
- The package does not deal with exotic hardware we cannot support
[Quality assurance - testing]
- Runs a test suite on build time, if it fails it makes the build fail, link
to build log:
https://launchpad.net/ubuntu/+source/libsoup3/3.0.6-1/+build/23589175/+files/buildlog_ubuntu-kinetic-amd64.libsoup3_3.0.6-1_BUILDING.txt.gz
- Includes autopkgtests, both a basic superficial test and an
installed-tests suite
[Quality assurance - packaging]
- debian/watch is present and works
- Does not yield massive lintian Warnings or Errors
- Lintian overrides are not present
- Des not rely on obsolete or about to be demoted packages.
- Has no python2 or GTK2 dependencies
- Does not ask debconf questions
- Packaging and build is easy:
https://salsa.debian.org/gnome-team/libsoup3/-/blob/debian/master/debian/rules
[UI standards]
Skipping
[Dependencies]
- No dependencies not already in main
- libsoup-3.0-dev has been added to the Extra-Exclude list to keep its
sysprof dependency out of main for now
[Standards compliance]
- This package correctly follows FHS and Debian Policy
[Maintenance/Owner]
- Owning Team will be Ubuntu Desktop (Co-maintained with Debian GNOME team.)
- Team is not yet, but will subscribe to the package before promotion
- This does not use static builds
- This does not use vendored code
[Background information]
The Ubuntu Desktop Team expects that it will be necessary to keep both
libsoup2.4 and libsoup3 in main for Ubuntu 22.10.
This is a big and complicated transition. Apps will crash if they are
linked against both libraries.
Upstream progress tracker:
https://gitlab.gnome.org/GNOME/libsoup/-/issues/218
Migration hints:
https://libsoup.org/libsoup-3.0/migrating-from-libsoup-2.html
Fedora announcement:
https://lists.fedoraproject.org/archives/list/de...@lists.fedoraproject.org/thread/JAQJ5WJQ6U6IZ3BZAZ5AM3VMMQCNOA7G/
https://people.canonical.com/~ubuntu-
archive/transitions/html/libsoup3.html
Estimated 30 affected source packages in main (some are libraries so true
affected count is higher):
https://people.canonical.com/~ubuntu-archive/transitions/html/libsoup3-main.html
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libsoup3/+bug/1972153/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
