[Touch-packages] [Bug 1933979] Re: [MIR] busybox package

2021-08-27 Thread Utkarsh Gupta
Hello, Thank you for the review, comments, and suggestions, Seth. We'll investigate other options and see what can be worked out. Closing this until then. Thanks, again. ** Changed in: busybox (Ubuntu) Status: Incomplete => Invalid -- You received this bug notification because you are a

[Touch-packages] [Bug 1933979] Re: [MIR] busybox package

2021-08-24 Thread Christian Ehrhardt 
Thank you, options are discussed. I'll set the bug to incomplete to reflect this isn't blocked on security right now. ** Changed in: busybox (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscri

[Touch-packages] [Bug 1933979] Re: [MIR] busybox package

2021-08-10 Thread Seth Arnold
Just how bad are the consequences of not promoting this package to main? The code is fairly gross. There's absolute gobs of writing outside array bounds, resource leaks, potential uses of uninitialized variables, etc. I don't know if there's any security-relevant findings -- busybox is almost alw

[Touch-packages] [Bug 1933979] Re: [MIR] busybox package

2021-07-08 Thread Didier Roche
Note: this is not a full review of the busybox package but rather a difference assessement between the busybox-static and busybox package (as part of this request). The binary package "busybox" is quite similar to the static one and replaces it. It produces a binary with the same name, linked aga

[Touch-packages] [Bug 1933979] Re: [MIR] busybox package

2021-06-29 Thread Christian Ehrhardt 
** Changed in: busybox (Ubuntu) Assignee: (unassigned) => Didier Roche (didrocks) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to busybox in Ubuntu. https://bugs.launchpad.net/bugs/1933979 Title: [MIR] busybox package

[Touch-packages] [Bug 1933979] Re: [MIR] busybox package

2021-06-29 Thread Utkarsh Gupta
** Description changed: [Availability] == src:busybox was introduced in Dapper (2006) and has been in main since then. src:busybox & bin:busybox-static are in main, to be more precise. And this request is to promote bin:busybox from src:busybox in main, too. It only depends on

[Touch-packages] [Bug 1933979] Re: [MIR] busybox package

2021-06-29 Thread Utkarsh Gupta
** Description changed: [Availability] == src:busybox was introduced in Dapper (2006) and has been in main since then. src:busybox & bin:busybox-static are in main, to be more precise. And this request is to promote bin:busybox from src:busybox in main, too. It only depends on

[Touch-packages] [Bug 1933979] Re: [MIR] busybox package

2021-06-29 Thread Utkarsh Gupta
Commenting here to be explicit: We want to promote bin:busybox until Bionic. So I/H/G/F/B seed changes are expected. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to busybox in Ubuntu. https://bugs.launchpad.net/bugs/1933979