[Bug 1877844] Re: [SRU] borgbackup version 1.1.15 and 1.0.13

[Gianfranco Costamagna]

btw there is a bug where the embedded liblzf is still used, so the runtime dependency on liblzf is not yet added. This is not a problem, and on the next update the full system liblzf will be used
If you are interested in the fix, its available there:
http://launchpadlibrarian.net/516662518/borgbackup_1.1.15-1_1.1.15-2.diff.gz

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to xxhash in Ubuntu.
https://bugs.launchpad.net/bugs/1877844

Title:
  [SRU] borgbackup version 1.1.15 and 1.0.13

Status in borgbackup package in Ubuntu:
  Fix Released
Status in xxhash package in Ubuntu:
  Fix Released
Status in borgbackup source package in Xenial:
  Fix Committed
Status in borgbackup source package in Bionic:
  Fix Committed
Status in xxhash source package in Bionic:
  Fix Committed
Status in borgbackup source package in Focal:
  Fix Committed
Status in borgbackup source package in Groovy:
  Fix Committed
Status in xxhash source package in Groovy:
  Fix Released
Status in borgbackup package in Debian:
  Fix Released

Bug description:
  [ Impact ]
  * Data is corrupted on some specific conditions, upstream asked to backport 1.1.15 that fixes some high ram usage and this corruption bug (not for focal, already fixed)

  [ Regression Potential ]
  * Really low, the package has an autopkgtestsuite that runs thousand of tests, and the fix is since one year part of upstream code

  [ Test Case ]
  * Backup some TB of data, and try to read the index, it should be not corrupted

  [ Other info ]
  Per the "important notes" section of the borg docs:

  https://borgbackup.readthedocs.io/en/stable/changes.html

  "Pre-1.1.11 potential index corruption / data loss issue
  A bug was discovered in our hashtable code, see issue #4829. The code is used for the client-side chunks cache and the server-side repo index.

  Although borg uses the hashtables very heavily, the index corruption
  did not happen too frequently, because it needed specific conditions
  to happen.

  Data loss required even more specific conditions, so it should be rare
  (and also detectable via borg check). [..]"

  Theoretically affects all Ubuntu releases before 20.04 (focal.)

  I know this is a universe package, but if anyone was up for an SRU
  that would be fantastic..

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/borgbackup/+bug/1877844/+subscriptions