[Bug 1758196] Re: SRU backport fdroidserver 1.0.8-3 from cosmic to bionic

Tue Jul 17 11:41:41 UTC 2018

Ok, following the example of https://bugs.launchpad.net/ubuntu/+source
/ca-certificates-java/+bug/1770553, I hope I got it right this time.  I
have made a debdiff for the bugfix-only, rebuild-only, backport from
Cosmic.  It is just a change to the changelog with the bug numbers.  It
is attached.

** Patch added: "patch to backport Cosmic version to Bionic"
   https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1758196/+attachment/5164486/+files/fdroidserver_1.0.8-3_debdiff_1.0.8-3ubuntu1.18.04.1.patch

** Summary changed:

- SRU backport fdroidserver 1.0.8-3 from cosmic to bionic
+ [SRU] backport fdroidserver 1.0.8-3 from cosmic to bionic

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1758196

Title:
  [SRU] backport fdroidserver 1.0.8-3 from cosmic to bionic

Status in fdroidserver package in Ubuntu:
  Confirmed

Bug description:
  Please include fdroidserver 1.0.8-3 (universe) in Ubuntu/bionic LTS as
  a Stable Release Update.  It can be sourced from Debian testing (main)
  and Ubuntu cosmic (universe).

  [Impact]

  We (the Debian Android Tools Team) did a bunch of testing related to
  the Ubuntu/bionic release.  This package also received a full third
  party security audit after the DebianImportFreeze.  Then there was a
  focused effort to get the full test suite running in autopkgtest.
  These changes were mostly done upstream.  These are the final round of
  bugfixes from both those efforts.

  This also fixes:
  * https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1763090
  * https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1762183

  [Test Case]

  The security issues fixed will be documented once we publicly publish
  the security audit report.  That report includes issues in other
  F-Droid packages, so even though all fdroidserver issues have been
  fixed, we can't yet publish the full report.

  The upstream dev process includes a large test suite:
  https://gitlab.com/fdroid/fdroidserver/pipelines/25114656

  It also now has autopkgtest passing on ARM and x86
  https://autopkgtest.ubuntu.com/packages/fdroidserver

  Also in Debian:
  https://ci.debian.net/packages/f/fdroidserver/testing/amd64/

  The test suite has never 100% passed for ppc64el and s390x, due to issues in the dependencies.  Therefore, autopkgtest is still failing on those arches.  Fixing them would require complicated fixes to dependencies.

  [Regression Potential]

  The regression potential is basically zero.  Upstream focused
  development on making this package work well with Ubuntu/bionic, and
  new features have not been added since bionic has been released.  The
  existing, extensive, upstream test suite is now run via autopkgtest.
  The changes were only to fix release-critical bugs.  I'm also part of
  upstream on this package.

  [Other Info]

  Changelog entries since current bionic version 1.0.2-1:

  fdroidserver (1.0.8-3) unstable; urgency=medium

    * hack to get autopkgtest to skip failing gpg test

   -- Hans-Christoph Steiner <hans at eds.org>  Wed, 27 Jun 2018 21:03:54
  +0200

  fdroidserver (1.0.8-2) unstable; urgency=medium

    * autopkgtest: explicitly purge gnupg so tests pass

   -- Hans-Christoph Steiner <hans at eds.org>  Mon, 25 Jun 2018 23:28:06
  +0200

  fdroidserver (1.0.8-1) unstable; urgency=medium

    * New upstream version
    * remove python3-distutils, it is no longer needed

   -- Hans-Christoph Steiner <hans at eds.org>  Mon, 25 Jun 2018 13:12:21
  +0200

  fdroidserver (1.0.7-2) unstable; urgency=medium

    * Depends: python3-distutils so its always there

   -- Hans-Christoph Steiner <hans at eds.org>  Mon, 25 Jun 2018 13:12:19
  +0200

  fdroidserver (1.0.7-1) unstable; urgency=medium

    * New upstream release
    * fix autopkgtest

   -- Hans-Christoph Steiner <hans at eds.org>  Wed, 20 Jun 2018 22:27:59
  +0200

  fdroidserver (1.0.6-1) unstable; urgency=medium

    * New upstream release

   -- Hans-Christoph Steiner <hans at eds.org>  Fri, 25 May 2018 17:15:51
  +0200

  fdroidserver (1.0.4-3) unstable; urgency=medium

    * fix autopkgtest run: working dir, and UTF-8 environment

   -- Hans-Christoph Steiner <hans at eds.org>  Fri, 18 May 2018 10:54:26
  +0200

  fdroidserver (1.0.4-2) unstable; urgency=medium

    * run upstream testsuite using autopkgtest

   -- Hans-Christoph Steiner <hans at eds.org>  Thu, 17 May 2018 12:17:12
  +0200

  fdroidserver (1.0.4-1) unstable; urgency=medium

    * New upstream version 1.0.4
    * Standards-Version: 4.1.4 no changes
    * support all the Java 10 and 11 packages
    * works with only androguard, removed optional deps
    * add debian/upstream/metadata file
    * Depends: androguard only on arches where it works

   -- Hans-Christoph Steiner <hans at eds.org>  Tue, 15 May 2018 14:04:05
  +0200

  fdroidserver (1.0.3-2) unstable; urgency=medium

    * only depend on aapt/androguard/zipalign on arches where available

   -- Hans-Christoph Steiner <hans at eds.org>  Fri, 23 Mar 2018 13:01:27
  +0100

  fdroidserver (1.0.3-1) unstable; urgency=medium

    * New upstream version
    * tighten up Depends to install fewer packages

   -- Hans-Christoph Steiner <hans at eds.org>  Thu, 22 Mar 2018 23:25:49
  +0100

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1758196/+subscriptions