[MIR] qdjango

Bug #1612270 reported by Pete Woods
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
qdjango (Ubuntu)
Fix Released
Undecided
Ubuntu Security Team

Bug Description

[Availability]
 * Available in universe

[Rationale]
 * This package is required by unity8 infographics

[Security]
 * No known security issues at this time.

[Quality assurance]
 * This package has unit tests.

[Dependencies]
 All dependencies are already in main

[Standards compliance]
 * This package uses qmake and does not require translations.

[Maintenance]
 * This package is maintained by Jeremy Laine, upstream in Debian and actively in use on the phone images.

Revision history for this message
Michael Terry (mterry) wrote :

I don't think we need this for libusermetrics? It seems to just be a build-dependency, not a run-time dependency (it only seems to use the headers, not the library)

Changed in qdjango (Ubuntu):
status: New → Incomplete
Revision history for this message
Pete Woods (pete-woods) wrote :

I'm pretty sure it does use the library libqdjango-db0 (for the database abstraction layer).

Revision history for this message
Michael Terry (mterry) wrote :

Ah yes, it does. Duh.

Changed in qdjango (Ubuntu):
status: Incomplete → New
Revision history for this message
Michael Terry (mterry) wrote :

So... qdjango is a database and a http server rolled into one source. Is there a reason that database was chosen? Seems like a curiously web-centric choice.

We could promote only the database side of things. But just checking if there isn't a more suitable library to use.

Revision history for this message
Michael Terry (mterry) wrote :

(It seems fine packaging/bug wise though.)

Changed in qdjango (Ubuntu):
status: New → Incomplete
Revision history for this message
Pete Woods (pete-woods) wrote :

Well it's two libraries in the same source package, and HTTP server (which we don't use) and a database ORM (which we do use). I looked through several options when implementing the infographics, and this ORM (which models itself after django) was clearly better than the other options. The upstream developer is extremely responsive, and I've worked with him on bug fixes and to resolve packaging problems in the past.

Revision history for this message
Pete Woods (pete-woods) wrote :

For some reason Qt itself doesn't include a good ORM, just a ODBC style database connector, so you would be forced to do all that unpleasant building of SQL strings manually.

Revision history for this message
Michael Terry (mterry) wrote :

OK approved, but for safety's sake: archive admins, can you please only promote libqdjango-dev and libqdjango-db0? That's all we care about right now.

Changed in qdjango (Ubuntu):
status: Incomplete → Fix Committed
Revision history for this message
Matthias Klose (doko) wrote :

Override component to main
libqdjango-dev 0.6.2-2 in yakkety amd64: universe/libdevel/optional/100% -> main
libqdjango-dev 0.6.2-2 in yakkety arm64: universe/libdevel/optional/100% -> main
libqdjango-dev 0.6.2-2 in yakkety armhf: universe/libdevel/optional/100% -> main
libqdjango-dev 0.6.2-2 in yakkety i386: universe/libdevel/optional/100% -> main
libqdjango-dev 0.6.2-2 in yakkety powerpc: universe/libdevel/optional/100% -> main
libqdjango-dev 0.6.2-2 in yakkety ppc64el: universe/libdevel/optional/100% -> main
libqdjango-dev 0.6.2-2 in yakkety s390x: universe/libdevel/optional/100% -> main
libqdjango-db0 0.6.2-2 in yakkety amd64: universe/libdevel/optional/100% -> main
libqdjango-db0 0.6.2-2 in yakkety arm64: universe/libdevel/optional/100% -> main
libqdjango-db0 0.6.2-2 in yakkety armhf: universe/libdevel/optional/100% -> main
libqdjango-db0 0.6.2-2 in yakkety i386: universe/libdevel/optional/100% -> main
libqdjango-db0 0.6.2-2 in yakkety powerpc: universe/libdevel/optional/100% -> main
libqdjango-db0 0.6.2-2 in yakkety ppc64el: universe/libdevel/optional/100% -> main
libqdjango-db0 0.6.2-2 in yakkety s390x: universe/libdevel/optional/100% -> main
14 publications overridden.

Changed in qdjango (Ubuntu):
status: Fix Committed → Fix Released
Revision history for this message
Michael Terry (mterry) wrote :

Err, I just noticed that the security team wanted to look at upstream on this. Though maybe that's for the still-in-universe http library. But until they comment here, I should go back to incomplete... though I know this already got promoted. My bad. :(

Changed in qdjango (Ubuntu):
status: Fix Released → Incomplete
Revision history for this message
Sebastien Bacher (seb128) wrote :

should it be assigned to security team then?

Michael Terry (mterry)
Changed in qdjango (Ubuntu):
assignee: nobody → Ubuntu Security Team (ubuntu-security)
Changed in qdjango (Ubuntu):
status: Incomplete → New
Revision history for this message
Emily Ratliff (emilyr) wrote :

The security team is ACKing this for 16.10.

Changed in qdjango (Ubuntu):
status: New → Fix Released
Changed in qdjango (Ubuntu):
status: Fix Released → Fix Committed
Revision history for this message
Steve Langasek (vorlon) wrote :

Override component to main
qdjango 0.6.2-2 in yakkety: universe/libs -> main
libqdjango-db0 0.6.2-2 in yakkety amd64: universe/libdevel/optional/100% -> main
libqdjango-db0 0.6.2-2 in yakkety arm64: universe/libdevel/optional/100% -> main
libqdjango-db0 0.6.2-2 in yakkety armhf: universe/libdevel/optional/100% -> main
libqdjango-db0 0.6.2-2 in yakkety i386: universe/libdevel/optional/100% -> main
libqdjango-db0 0.6.2-2 in yakkety powerpc: universe/libdevel/optional/100% -> main
libqdjango-db0 0.6.2-2 in yakkety ppc64el: universe/libdevel/optional/100% -> main
libqdjango-db0 0.6.2-2 in yakkety s390x: universe/libdevel/optional/100% -> main
libqdjango-dbg 0.6.2-2 in yakkety amd64: universe/debug/extra/100% -> main
libqdjango-dbg 0.6.2-2 in yakkety arm64: universe/debug/extra/100% -> main
libqdjango-dbg 0.6.2-2 in yakkety armhf: universe/debug/extra/100% -> main
libqdjango-dbg 0.6.2-2 in yakkety i386: universe/debug/extra/100% -> main
libqdjango-dbg 0.6.2-2 in yakkety powerpc: universe/debug/extra/100% -> main
libqdjango-dbg 0.6.2-2 in yakkety ppc64el: universe/debug/extra/100% -> main
libqdjango-dbg 0.6.2-2 in yakkety s390x: universe/debug/extra/100% -> main
libqdjango-dev 0.6.2-2 in yakkety amd64: universe/libdevel/optional/100% -> main
libqdjango-dev 0.6.2-2 in yakkety arm64: universe/libdevel/optional/100% -> main
libqdjango-dev 0.6.2-2 in yakkety armhf: universe/libdevel/optional/100% -> main
libqdjango-dev 0.6.2-2 in yakkety i386: universe/libdevel/optional/100% -> main
libqdjango-dev 0.6.2-2 in yakkety powerpc: universe/libdevel/optional/100% -> main
libqdjango-dev 0.6.2-2 in yakkety ppc64el: universe/libdevel/optional/100% -> main
libqdjango-dev 0.6.2-2 in yakkety s390x: universe/libdevel/optional/100% -> main
libqdjango-doc 0.6.2-2 in yakkety amd64: universe/doc/optional/100% -> main
libqdjango-doc 0.6.2-2 in yakkety arm64: universe/doc/optional/100% -> main
libqdjango-doc 0.6.2-2 in yakkety armhf: universe/doc/optional/100% -> main
libqdjango-doc 0.6.2-2 in yakkety i386: universe/doc/optional/100% -> main
libqdjango-doc 0.6.2-2 in yakkety powerpc: universe/doc/optional/100% -> main
libqdjango-doc 0.6.2-2 in yakkety ppc64el: universe/doc/optional/100% -> main
libqdjango-doc 0.6.2-2 in yakkety s390x: universe/doc/optional/100% -> main
libqdjango-http0 0.6.2-2 in yakkety amd64: universe/libdevel/optional/100% -> main
libqdjango-http0 0.6.2-2 in yakkety arm64: universe/libdevel/optional/100% -> main
libqdjango-http0 0.6.2-2 in yakkety armhf: universe/libdevel/optional/100% -> main
libqdjango-http0 0.6.2-2 in yakkety i386: universe/libdevel/optional/100% -> main
libqdjango-http0 0.6.2-2 in yakkety powerpc: universe/libdevel/optional/100% -> main
libqdjango-http0 0.6.2-2 in yakkety ppc64el: universe/libdevel/optional/100% -> main
libqdjango-http0 0.6.2-2 in yakkety s390x: universe/libdevel/optional/100% -> main
36 publications overridden.

Changed in qdjango (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.