[Bug 1758196] Re: [SRU] backport fdroidserver 1.0.8-3 from cosmic to bionic

Hans-Christoph Steiner 1758196 at bugs.launchpad.net
Fri Jul 27 12:36:19 UTC 2018


I made an upstream 1.0.9 release with a couple of key bugs we just found
in a big round of testing.  I included this fixes upstream so there is
also a stable release in the other channels.  The target platform for
the 1.0.9 release is still Ubuntu/bionic.


** Description changed:

- Please include fdroidserver 1.0.8-3 (universe) in Ubuntu/bionic LTS as a
+ Please include fdroidserver 1.0.9-1 (universe) in Ubuntu/bionic LTS as a
  Stable Release Update.  It can be sourced from Debian testing (main) and
  Ubuntu cosmic (universe).
  
  [Impact]
  
  We (the Debian Android Tools Team) did a bunch of testing related to the
  Ubuntu/bionic release.  This package also received a full third party
  security audit after the DebianImportFreeze.  Then there was a focused
  effort to get the full test suite running in autopkgtest.  These changes
  were mostly done upstream.  These are the final round of bugfixes from
  both those efforts.
  
  This also fixes:
  * https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1763090
  * https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1762183
- 
  
  [Test Case]
  
  The security issues fixed will be documented once we publicly publish
  the security audit report.  That report includes issues in other F-Droid
  packages, so even though all fdroidserver issues have been fixed, we
  can't yet publish the full report.
  
  The upstream dev process includes a large test suite:
  https://gitlab.com/fdroid/fdroidserver/pipelines/25114656
  
  It also now has autopkgtest passing on ARM and x86
  https://autopkgtest.ubuntu.com/packages/fdroidserver
  
  Also in Debian:
  https://ci.debian.net/packages/f/fdroidserver/testing/amd64/
  
- 
- The test suite has never 100% passed for ppc64el and s390x, due to issues in the dependencies.  Therefore, autopkgtest is still failing on those arches.  Fixing them would require complicated fixes to dependencies.
- 
+ The test suite has never 100% passed for ppc64el and s390x, due to
+ issues in the dependencies.  Therefore, autopkgtest is still failing on
+ those arches.  Fixing them would require complicated fixes to
+ dependencies.
  
  [Regression Potential]
  
  The regression potential is basically zero.  Upstream focused
  development on making this package work well with Ubuntu/bionic, and new
  features have not been added since bionic has been released.  The
  existing, extensive, upstream test suite is now run via autopkgtest.
  The changes were only to fix release-critical bugs.  I'm also part of
  upstream on this package.
  
- 
  [Other Info]
  
  Changelog entries since current bionic version 1.0.2-1:
  
+ fdroidserver (1.0.9-1) unstable; urgency=medium
+ 
+   * New upstream version
+ 
+  -- Hans-Christoph Steiner <hans at eds.org>  Thu, 19 Jul 2018 16:14:09
+ +0200
+ 
  fdroidserver (1.0.8-3) unstable; urgency=medium
  
-   * hack to get autopkgtest to skip failing gpg test
+   * hack to get autopkgtest to skip failing gpg test
  
-  -- Hans-Christoph Steiner <hans at eds.org>  Wed, 27 Jun 2018 21:03:54
+  -- Hans-Christoph Steiner <hans at eds.org>  Wed, 27 Jun 2018 21:03:54
  +0200
  
  fdroidserver (1.0.8-2) unstable; urgency=medium
  
-   * autopkgtest: explicitly purge gnupg so tests pass
+   * autopkgtest: explicitly purge gnupg so tests pass
  
-  -- Hans-Christoph Steiner <hans at eds.org>  Mon, 25 Jun 2018 23:28:06
+  -- Hans-Christoph Steiner <hans at eds.org>  Mon, 25 Jun 2018 23:28:06
  +0200
  
  fdroidserver (1.0.8-1) unstable; urgency=medium
  
-   * New upstream version
-   * remove python3-distutils, it is no longer needed
+   * New upstream version
+   * remove python3-distutils, it is no longer needed
  
-  -- Hans-Christoph Steiner <hans at eds.org>  Mon, 25 Jun 2018 13:12:21
+  -- Hans-Christoph Steiner <hans at eds.org>  Mon, 25 Jun 2018 13:12:21
  +0200
  
  fdroidserver (1.0.7-2) unstable; urgency=medium
  
-   * Depends: python3-distutils so its always there
+   * Depends: python3-distutils so its always there
  
-  -- Hans-Christoph Steiner <hans at eds.org>  Mon, 25 Jun 2018 13:12:19
+  -- Hans-Christoph Steiner <hans at eds.org>  Mon, 25 Jun 2018 13:12:19
  +0200
  
  fdroidserver (1.0.7-1) unstable; urgency=medium
  
-   * New upstream release
-   * fix autopkgtest
+   * New upstream release
+   * fix autopkgtest
  
-  -- Hans-Christoph Steiner <hans at eds.org>  Wed, 20 Jun 2018 22:27:59
+  -- Hans-Christoph Steiner <hans at eds.org>  Wed, 20 Jun 2018 22:27:59
  +0200
  
  fdroidserver (1.0.6-1) unstable; urgency=medium
  
-   * New upstream release
+   * New upstream release
  
-  -- Hans-Christoph Steiner <hans at eds.org>  Fri, 25 May 2018 17:15:51
+  -- Hans-Christoph Steiner <hans at eds.org>  Fri, 25 May 2018 17:15:51
  +0200
  
  fdroidserver (1.0.4-3) unstable; urgency=medium
  
-   * fix autopkgtest run: working dir, and UTF-8 environment
+   * fix autopkgtest run: working dir, and UTF-8 environment
  
-  -- Hans-Christoph Steiner <hans at eds.org>  Fri, 18 May 2018 10:54:26
+  -- Hans-Christoph Steiner <hans at eds.org>  Fri, 18 May 2018 10:54:26
  +0200
  
  fdroidserver (1.0.4-2) unstable; urgency=medium
  
-   * run upstream testsuite using autopkgtest
+   * run upstream testsuite using autopkgtest
  
-  -- Hans-Christoph Steiner <hans at eds.org>  Thu, 17 May 2018 12:17:12
+  -- Hans-Christoph Steiner <hans at eds.org>  Thu, 17 May 2018 12:17:12
  +0200
  
  fdroidserver (1.0.4-1) unstable; urgency=medium
  
-   * New upstream version 1.0.4
-   * Standards-Version: 4.1.4 no changes
-   * support all the Java 10 and 11 packages
-   * works with only androguard, removed optional deps
-   * add debian/upstream/metadata file
-   * Depends: androguard only on arches where it works
+   * New upstream version 1.0.4
+   * Standards-Version: 4.1.4 no changes
+   * support all the Java 10 and 11 packages
+   * works with only androguard, removed optional deps
+   * add debian/upstream/metadata file
+   * Depends: androguard only on arches where it works
  
-  -- Hans-Christoph Steiner <hans at eds.org>  Tue, 15 May 2018 14:04:05
+  -- Hans-Christoph Steiner <hans at eds.org>  Tue, 15 May 2018 14:04:05
  +0200
  
  fdroidserver (1.0.3-2) unstable; urgency=medium
  
-   * only depend on aapt/androguard/zipalign on arches where available
+   * only depend on aapt/androguard/zipalign on arches where available
  
-  -- Hans-Christoph Steiner <hans at eds.org>  Fri, 23 Mar 2018 13:01:27
+  -- Hans-Christoph Steiner <hans at eds.org>  Fri, 23 Mar 2018 13:01:27
  +0100
  
  fdroidserver (1.0.3-1) unstable; urgency=medium
  
-   * New upstream version
-   * tighten up Depends to install fewer packages
+   * New upstream version
+   * tighten up Depends to install fewer packages
  
-  -- Hans-Christoph Steiner <hans at eds.org>  Thu, 22 Mar 2018 23:25:49
+  -- Hans-Christoph Steiner <hans at eds.org>  Thu, 22 Mar 2018 23:25:49
  +0100

** Summary changed:

- [SRU] backport fdroidserver 1.0.8-3 from cosmic to bionic
+ [SRU] backport fdroidserver 1.0.9-1 from cosmic to bionic

** Patch added: "fdroidserver_1.0.9-1_debdiff_1.0.9-1ubuntu1.18.04.1.patch"
   https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1758196/+attachment/5168604/+files/fdroidserver_1.0.9-1_debdiff_1.0.9-1ubuntu1.18.04.1.patch

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1758196

Title:
  [SRU] backport fdroidserver 1.0.9-1 from cosmic to bionic

Status in fdroidserver package in Ubuntu:
  Confirmed

Bug description:
  Please include fdroidserver 1.0.9-1 (universe) in Ubuntu/bionic LTS as
  a Stable Release Update.  It can be sourced from Debian testing (main)
  and Ubuntu cosmic (universe).

  [Impact]

  We (the Debian Android Tools Team) did a bunch of testing related to
  the Ubuntu/bionic release.  This package also received a full third
  party security audit after the DebianImportFreeze.  Then there was a
  focused effort to get the full test suite running in autopkgtest.
  These changes were mostly done upstream.  These are the final round of
  bugfixes from both those efforts.

  This also fixes:
  * https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1763090
  * https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1762183

  [Test Case]

  The security issues fixed will be documented once we publicly publish
  the security audit report.  That report includes issues in other
  F-Droid packages, so even though all fdroidserver issues have been
  fixed, we can't yet publish the full report.

  The upstream dev process includes a large test suite:
  https://gitlab.com/fdroid/fdroidserver/pipelines/25114656

  It also now has autopkgtest passing on ARM and x86
  https://autopkgtest.ubuntu.com/packages/fdroidserver

  Also in Debian:
  https://ci.debian.net/packages/f/fdroidserver/testing/amd64/

  The test suite has never 100% passed for ppc64el and s390x, due to
  issues in the dependencies.  Therefore, autopkgtest is still failing
  on those arches.  Fixing them would require complicated fixes to
  dependencies.

  [Regression Potential]

  The regression potential is basically zero.  Upstream focused
  development on making this package work well with Ubuntu/bionic, and
  new features have not been added since bionic has been released.  The
  existing, extensive, upstream test suite is now run via autopkgtest.
  The changes were only to fix release-critical bugs.  I'm also part of
  upstream on this package.

  [Other Info]

  Changelog entries since current bionic version 1.0.2-1:

  fdroidserver (1.0.9-1) unstable; urgency=medium

    * New upstream version

   -- Hans-Christoph Steiner <hans at eds.org>  Thu, 19 Jul 2018 16:14:09
  +0200

  fdroidserver (1.0.8-3) unstable; urgency=medium

    * hack to get autopkgtest to skip failing gpg test

   -- Hans-Christoph Steiner <hans at eds.org>  Wed, 27 Jun 2018 21:03:54
  +0200

  fdroidserver (1.0.8-2) unstable; urgency=medium

    * autopkgtest: explicitly purge gnupg so tests pass

   -- Hans-Christoph Steiner <hans at eds.org>  Mon, 25 Jun 2018 23:28:06
  +0200

  fdroidserver (1.0.8-1) unstable; urgency=medium

    * New upstream version
    * remove python3-distutils, it is no longer needed

   -- Hans-Christoph Steiner <hans at eds.org>  Mon, 25 Jun 2018 13:12:21
  +0200

  fdroidserver (1.0.7-2) unstable; urgency=medium

    * Depends: python3-distutils so its always there

   -- Hans-Christoph Steiner <hans at eds.org>  Mon, 25 Jun 2018 13:12:19
  +0200

  fdroidserver (1.0.7-1) unstable; urgency=medium

    * New upstream release
    * fix autopkgtest

   -- Hans-Christoph Steiner <hans at eds.org>  Wed, 20 Jun 2018 22:27:59
  +0200

  fdroidserver (1.0.6-1) unstable; urgency=medium

    * New upstream release

   -- Hans-Christoph Steiner <hans at eds.org>  Fri, 25 May 2018 17:15:51
  +0200

  fdroidserver (1.0.4-3) unstable; urgency=medium

    * fix autopkgtest run: working dir, and UTF-8 environment

   -- Hans-Christoph Steiner <hans at eds.org>  Fri, 18 May 2018 10:54:26
  +0200

  fdroidserver (1.0.4-2) unstable; urgency=medium

    * run upstream testsuite using autopkgtest

   -- Hans-Christoph Steiner <hans at eds.org>  Thu, 17 May 2018 12:17:12
  +0200

  fdroidserver (1.0.4-1) unstable; urgency=medium

    * New upstream version 1.0.4
    * Standards-Version: 4.1.4 no changes
    * support all the Java 10 and 11 packages
    * works with only androguard, removed optional deps
    * add debian/upstream/metadata file
    * Depends: androguard only on arches where it works

   -- Hans-Christoph Steiner <hans at eds.org>  Tue, 15 May 2018 14:04:05
  +0200

  fdroidserver (1.0.3-2) unstable; urgency=medium

    * only depend on aapt/androguard/zipalign on arches where available

   -- Hans-Christoph Steiner <hans at eds.org>  Fri, 23 Mar 2018 13:01:27
  +0100

  fdroidserver (1.0.3-1) unstable; urgency=medium

    * New upstream version
    * tighten up Depends to install fewer packages

   -- Hans-Christoph Steiner <hans at eds.org>  Thu, 22 Mar 2018 23:25:49
  +0100

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/fdroidserver/+bug/1758196/+subscriptions



More information about the Ubuntu-sponsors mailing list