[MIR] libgsf

[Jeremy Bícha]

Availability
============
Built for all supported architectures. In sync with Debian.

Rationale
=========
The Ubuntu Desktop team intends to include tracker by default in Ubuntu 18.10. tracker recommends tracker-miner-fs which depends on tracker-extract which has an optional dependency on libgsf for metadata used in "MSOffice, LibreOffice, EPub".

libgsf was previously in Ubuntu main (I think until the Xenial universe reorganization) so I'm hoping for fast-track processing. There is no previous MIR since libgsf was always in main before.

Security
========
One recent "minor" recent security issue, CVE-2016-9888, fixed in 17.04 and newer.

https://security-tracker.debian.org/tracker/source-package/libgsf
https://launchpad.net/ubuntu/+source/libgsf/+cve

Quality assurance
=================
- Ubuntu Desktop Packages is subscribed

https://bugs.launchpad.net/ubuntu/+source/libgsf
https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=libgsf
https://bugzilla.gnome.org/buglist.cgi?quicksearch=product%3A"libgsf"

Tests are run during the build.
No autopkgtests.

Dependencies
============
No binary universe dependencies

Standards compliance
====================
4.1.4, dh compat 11, dh7 style simple rules

Maintenance
===========
Not team maintained.

https://salsa.debian.org/debian/libgsf

upstream:
https://git.gnome.org/browse/libgsf/

Other Info
==========
https://developer.gnome.org/gsf/stable/

[Matthias Klose (doko)]

 - could you have a look at the crash reported in LP: # 1725711 ?
 - it was already in main, however seeing crashes in the thumbnailer looks like
   issues with bad data might lead to security issues.

[Mathieu Trudel-Lapierre (cyphermox)]

- AIUI usually desktop-bugs should be subscribed -- has the team situation for which teams you guys are looking at the bugs for been clarified?

- tests exists, and are "run" but all are skipped: please fix this to actually run the tests properly, or explain why they can only be skipped.

As mentioned, libgsf was previous in main, so I see no other blockers.

[Launchpad Janitor (janitor)]

[Expired for libgsf (Ubuntu) because there has been no activity for 60 days.]

[Jeremy Bícha (jbicha)]

Build tests now run and completely pass on most architectures. On armhf and ppc64el we skip the valgrind tests (2 of 9 tests) since they will likely need special casing upstream to pass. I reported this upstream as https://gitlab.gnome.org/GNOME/libgsf/issues/13

The test system is set up so that tests are skipped if a required dependency isn't found. Otherwise, failing tests will fail the build.

https://launchpad.net/ubuntu/+source/libgsf/1.14.43-1ubuntu2

[Jeremy Bícha (jbicha)]

I don't think the valgrind tests are very useful for us. The Debian maintainer isn't really interested in them either, but we can still run the other 7 tests.

[Jeremy Bícha (jbicha)]

We've now enabled all the build tests except for the valgrind tests:

https://launchpad.net/ubuntu/+source/libgsf/1.14.44-1

[Launchpad Janitor (janitor)]

[Expired for libgsf (Ubuntu) because there has been no activity for 60 days.]

[Iain Lane (laney)]

I'll reset this back to New, because I would like to upload Nautilus depending on tracker soon. This is something we should do towards the start of a cycle.

[Matthias Klose (doko)]

no need for a new MIR, when it was already in main. just upload the dependency and we can promote it.

[Sebastien Bacher (seb128)]

libgsf 1.14.44-1 in disco: universe/libs -> main