Upstream explaining that they use it only for checksum calculations and
they want to avoid an extra depends only for this, sha1 is also being
deprecated. I think it seems a reasonable position for them to have.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which i
> Please do not forget the intention to "goal to work over the next
cycles to try to improve things" in comment #7 :-)
The maintainer responded that he would rather keep things as they are
currently: https://github.com/libimobiledevice/libimobiledevice-
glue/issues/48.
I don't think it's worth ad
$ rmadison -u ubuntu -s plucky,plucky-proposed libimobiledevice-glue
libimobiledevice-glue-dev libimobiledevice-glue-1.0-0
libimobiledevice-glue | 1.3.1-1 | plucky/universe | source
libimobiledevice-glue-dev | 1.3.1-1 | plucky/universe | amd64, arm64, armhf,
ppc64el, riscv64, s390x
lib
Approved and in component mismatches
** Changed in: libimobiledevice-glue (Ubuntu)
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2074086
Title:
MIR libim
I added a desktop team Jira backlog card for the "improve things" task.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2074086
Title:
MIR libimobiledevice-glue
To manage notifications about this bug
** Description changed:
[Availability]
The package libimobiledevice-glue is already in Ubuntu universe.
The package libimobiledevice-glue build for the architectures it is designed
to work on.
It currently builds and works for architectures: amd64 arm64 armhf ppc64el
riscv64 s390x
Link
Hey, this is now approved.
Please do not forget the intention to "goal to work over the next cycles
to try to improve things" in comment #7 :-)
Ready to promote once showing up in component mismatches.
** Changed in: libimobiledevice-glue (Ubuntu)
Status: New => In Progress
--
You recei
** Changed in: libimobiledevice-glue (Ubuntu)
Assignee: Ubuntu Security Team (ubuntu-security) => (unassigned)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2074086
Title:
MIR libimobiledevice-
I reviewed libimobiledevice-glue 1.3.1-1 as checked into plucky. This
shouldn't be
considered a full audit but rather a quick gauge of maintainability.
libimobiledevice-glue is a library with common code used by the libraries and
tools
around the libimobiledevice project. The following project
Adding this comment as a data point. The code in the -glue package is
mostly in main already, those functions used to be included as copies in
the different components of the libimobiledevice project, they are just
not moving them to a shared location (they also added some functions
since the refac
There's embedded copies of sha1, sha256, sha512 in the upstream package:
https://github.com/libimobiledevice/libimobiledevice-
glue/tree/master/src
I haven't yet looked at our version of the package.
The libimobiledevice library is licensed LGPL; the libtomcrypt code has
been placed in the public
** Tags added: sec-4836
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2074086
Title:
MIR libimobiledevice-glue
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+sourc
Review for Source Package: libimobiledevice-glue
[Summary]
MIR team ACK
As the package had many CVEs in the past, and as it’s parsing external content
fdrom untrusted source, I think we should then ask for a security review. I'll
thus assign ubuntu-security.
List of specific binary packages to b
Ok, I see now that the autopkgtest part was merged and the description
was updated even if the part "- The package does have not failing
autopkgtests right now" was still present.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https:/
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2074086
Title:
MIR libimobiledevice-glue
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libimobiledevice-glue/+
** Changed in: libimobiledevice-glue (Ubuntu)
Assignee: (unassigned) => Didier Roche-Tolomelli (didrocks)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2074086
Title:
MIR libimobiledevice-glue
Reviewers: The autopkgtest proposal was sent to Debian[1]. I'm assuming
we do need to wait for them to be merged to start the review.
[1] https://salsa.debian.org/imobiledevice-team/libimobiledevice-
glue/-/merge_requests/1/diffs
--
You received this bug notification because you are a member of
** Description changed:
[Availability]
The package libimobiledevice-glue is already in Ubuntu universe.
The package libimobiledevice-glue build for the architectures it is designed
to work on.
It currently builds and works for architectures: amd64 arm64 armhf ppc64el
riscv64 s390x
Link
% lintian --pedantic
W: libimobiledevice-glue source: newer-standards-version 4.7.0 (current is
4.6.2)
P: libimobiledevice-glue source: silent-on-rules-requiring-root [debian/control]
** Description changed:
[Availability]
The package libimobiledevice-glue is already in Ubuntu universe.
Th
19 matches
Mail list logo
