[Bug 1956617] [NEW] [MIR] protobuf-c

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Lukas Märdian (slyon):

[Availability]
The package protobuf-c is already in Ubuntu universe, and was in main some years ago.
The package protobuf-c builds for the architectures it is designed to work on.
It currently builds and works for architectures:  amd64 arm64 armhf i386 ppc64el riscv64 s390x
Link to package https://launchpad.net/ubuntu/+source/protobuf-c

[Rationale]
- The package protobuf-c is required in Ubuntu main for fwupd 1.7.x to handle firmware updates for Logitech devices that use logitech_bulkcontroller such as their 4k webcams.
- The feature is only going to be useful to users owning such hardware but it is important for those users.

[Security]
- No CVEs/security issues in this software in the past

- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Package does not install services, timers or recurring jobs
- Packages does not open privileged ports (ports < 1024)
- Packages does not contain extensions to security-sensitive software

[Quality assurance - function/usage]
- The package works well right after install

[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu and has no bugs open in Debian or Ubuntu
  - Ubuntu https://bugs.launchpad.net/ubuntu/+source/protobuf-c/+bug
  - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=protobuf-c
- The package does not deal with exotic hardware we cannot support

[Quality assurance - testing]
- The package runs a test suite on build time, if it fails
  it makes the build fail, link to build log https://launchpadlibrarian.net/464904971/buildlog_ubuntu-focal-amd64.protobuf-c_1.3.3-1_BUILDING.txt.gz

- The package does not run an autopkgtest but there is no reason they
shouldn't be added.

[Quality assurance - packaging]
- debian/watch is not present, no reason it shouldn't have one though

- This package has some minor lintian warnings

# lintian --pedantic
running with root privileges is not recommended!
W: protobuf-c-compiler: no-manual-page usr/bin/protoc-c
W: protobuf-c-compiler: no-manual-page usr/bin/protoc-gen-c
P: protobuf-c source: package-uses-old-debhelper-compat-version 12
P: protobuf-c source: silent-on-rules-requiring-root
P: protobuf-c source: update-debian-copyright 2019 vs 2020 [debian/copyright:65]

and some warnings about long lines in upstream sources

- Lintian overrides are not present

- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies

- The package will be installed by default, but does not ask debconf
questions

- Packaging and build is easy, link to d/rules
https://salsa.debian.org/edmonds/protobuf-c/-/blob/master/debian/rules

[UI standards]
- Application is not end-user facing (does not need translation)

[Dependencies]
- No further depends or recommends dependencies that are not yet in main

[Standards compliance]
- This package correctly follows FHS and Debian Policy

[Maintenance/Owner]
- Owning Team should be foundations since they own fwupd
- Team is not yet, but will subscribe to the package before promotion

- This does not use static builds
- This does not use vendored code

[Background information]
The Package description explains the package well
Upstream Name is protobuf-c
Link to upstream project https://github.com/protobuf-c/protobuf-c

** Affects: protobuf-c (Ubuntu)
     Importance: Undecided
         Status: Fix Committed

** Affects: protobuf-c (Ubuntu Focal)
     Importance: Undecided
         Status: In Progress

** Affects: protobuf-c (Ubuntu Jammy)
     Importance: Undecided
         Status: In Progress

** Affects: protobuf-c (Ubuntu Kinetic)
     Importance: Undecided
         Status: Fix Committed


** Tags: fr-1990 sec-754
-- 
[MIR] protobuf-c
https://bugs.launchpad.net/bugs/1956617
You received this bug notification because you are a member of Ubuntu Package Archive Administrators, which is subscribed to the bug report.