MIR: libisoburn, libisofs, libburn

Bug #582189 reported by Colin Watson
This bug report is a duplicate of:  Bug #1977959: [MIR] libisoburn, libburn, libisofs. Edit Remove
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
libburn (Ubuntu)
Fix Released
High
Unassigned
libisoburn (Ubuntu)
Fix Released
High
Unassigned
libisofs (Ubuntu)
Fix Released
High
Unassigned

Bug Description

libisoburn is needed for new versions of grub2 in maverick: specifically, grub-mkrescue calls xorriso now. This was done because genisoimage wasn't able to do some of the complicated things GRUB wants to do in order to generate hybrid images bootable as both CD-ROMs and USB simultaneously. GRUB previously had an embedded and modified copy of mkisofs in it, but this was obviously suboptimal; it now depends on xorriso instead of embedding that code.

This also pulls in libburn and libisofs. I've taken the liberty of just adding tasks to this MIR bug for those, since they all come from the same upstream project (http://libburnia-project.org/). It's worth noting that brasero in Debian is also configured to depend on libburn and libisofs, so we may want to sync up with this too; this is part of a project to gradually supersede cdrtools/cdrkit in general.

libisoburn is in universe, and I've tested that the xorriso binary package it produces in maverick works well out of the box with grub-mkrescue, without the need for any extra configuration work.

I found no security advisories for any of the keywords libisoburn, xorriso, libburn, or libburnia, and there don't seem to be any particularly security-sensitive components (set-id, daemons, etc.). Of course, xorriso will often be processing untrusted data in the form of CD image contents.

To my eye all three packages look quite well-constructed and well-maintained. libisoburn has no bugs in Debian; libisofs has one wishlist bug in Debian; libburn has two important bugs in Debian, which don't seem particularly relevant to GRUB's use case at least. None of them have any Ubuntu bugs other than this one. I think that for the most part we can probably just keep these packages synced from Debian rather than needing to invest much maintenance effort ourselves.

Colin Watson (cjwatson)
description: updated
summary: - MIR: libisoburn needed for new grub2
+ MIR: libisoburn, libisofs, libburn
Revision history for this message
Kees Cook (kees) wrote :

Nothing jumps out at me; seems like a +1 to me. Thanks!

Changed in libburn (Ubuntu):
status: New → In Progress
Changed in libisoburn (Ubuntu):
status: New → In Progress
Changed in libisofs (Ubuntu):
status: New → In Progress
Changed in libisoburn (Ubuntu):
importance: Undecided → High
Changed in libburn (Ubuntu):
importance: Undecided → High
Changed in libisofs (Ubuntu):
importance: Undecided → High
Revision history for this message
Colin Watson (cjwatson) wrote :

Thanks for the double-checking. Promoted to main.

Changed in libburn (Ubuntu):
status: In Progress → Fix Released
Changed in libisofs (Ubuntu):
status: In Progress → Fix Released
Changed in libisoburn (Ubuntu):
status: In Progress → Fix Released
Revision history for this message
Lukas Märdian (slyon) wrote :

Replacing this in favor of the newer MIR at LP: #1977959

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.