Public bug reported:

[Availability]

-  The package libsdl3 is already in Ubuntu universe.
-  The package libsdl3 build for the architectures it is designed to work on.
-  It currently builds and works for architectures: amd64, amd64v3, arm64, 
armhf, i386, ppc64el, riscv64, s390x
-  Link to package https://launchpad.net/ubuntu/+source/libsdl3

[Rationale]

-  sdl is currently undergoing a transition. Debian is replacing libsdl2
   with a compatibility shim provided by libsdl2-compat. Because of this,
   libsdl2 now depends on libsdl3 (universe), hence this MIR.

-  There is no other/better way to solve this that is already in main or
   should go universe->main instead of this, as v3 is now the preferred upstream
   version of libsdl. As such, this package and all binary packages it builds
   should be in main.

-  This is the first time package will be in main, though its previous version
   is already in main.

-  The package libsdl3 is required in Ubuntu main no later than 26.10, as Debian
   is in the process of transitioning.

[Security]

-  Had one security issue in the past
   - (libsdl3-image) https://ubuntu.com/security/CVE-2026-35444 (also affected 
the predecessors libsdl2-image and sdl-image1.2)
   - Still undergoing evaluation.

- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Package does not install services, timers or recurring jobs
- Package does not open privileged ports (ports < 1024).
- Package does not expose any external endpoints
- Packages does not contain extensions to security-sensitive software

[Quality assurance - function/usage]
- The package works well right after install

[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu/Upstream and does
  not have too many, long-term & critical, open bugs
  - Ubuntu https://bugs.launchpad.net/ubuntu/+source/libsdl3/+bug (none open)
  - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=libsdl3 (one open, 
forwarded and fixed upstream)
  - Upstream's bug tracker: https://github.com/libsdl-org/SDL/issues
- The package does not deal with exotic hardware we cannot support

[Quality assurance - testing]

- The package runs a test suite on build time, if it fails
  it makes the build fail, link to build log
  
https://launchpadlibrarian.net/863484030/buildlog_ubuntu-stonking-amd64.libsdl3_3.4.10+ds-1_BUILDING.txt.gz

- The package runs an autopkgtest, and is currently passing on
  all architectures, link to test logs: 
https://autopkgtest.ubuntu.com/packages/libsdl3

[Quality assurance - packaging]

- A mechanism to detect and fetch new upstream versions is present and
works

- debian/control defines a correct Maintainer field

- This package does not yield massive lintian Warnings, Errors
- Link to a recent build log of the package <TBD>
- Full `lintian --pedantic` output:

  E: libsdl3 changes: bad-distribution-in-changes-file unstable
  W: libsdl3 source: newer-standards-version 4.7.4 (current is 4.7.3)

- Lintian overrides are not present

- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies

- The package will not be installed by default

- Packaging and build is relatively straightforward,
  link to debian/rules: 
https://salsa.debian.org/sdl-team/libsdl3/-/blob/debian/latest/debian/rules?ref_type=heads

[UI standards]
- Application is not end-user facing (does not need translation)

[Dependencies]

- libsdl3 has 42 build dependencies:
  - 35 of them are already in main
  - the following seven are in universe (checked with check-mir):
      dependency       | sdl2 builldep? | notes
      ------------------------------------------
    - doxygen          | yes            |
    - dh-dlopenlibdeps | no             | only provider of virtual package 
dh-sequence-dlopenlibdeps
    - fcitx-libs-dev   | yes            |
    - glslang-tools    | no             | "BOpenGL and OpenGL ES shader front 
end and validator -- tools"
    - graphviz         | yes            |
    - libsndio-dev     | yes            |
    - ninja-build      | no             | "small build system closest in spirit 
to Make"

- the binary packages produced by libsdl3 have no universe dependencies
(save for itself)

[Standards compliance]
- This package correctly follows FHS and Debian Policy

- Based on a reasonable review of information available at the time of
  this report, no expiry, time-limited grants, or obvious legal
  encumbrances have been identified that would be expected to affect
  promotion

[Maintenance/Owner]
- The owning team will be Server and I have their acknowledgment for
  that commitment
- The future owning team is not yet subscribed, but will subscribe to
  the package before promotion (our automation is going to pick it up)

- This does not use static builds
- This does not use vendored code
- This package is not rust based

- The package has been built within the last 3 months in the archive
- Build link on launchpad: 
https://launchpad.net/ubuntu/+source/libsdl3/3.4.10+ds-1

- This change will not impact other teams

[Background information]
- The Package description explains the package well
- Upstream Name is SDL
- Link to upstream project: https://github.com/libsdl-org/SDL

** Affects: libsdl3 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2155439

Title:
  [MIR] Promote libsdl3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libsdl3/+bug/2155439/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to