Activity log for bug #1977614

Date Who What changed Old value New value Message
2022-06-03 20:38:12 Jeremy Bícha bug added bug
2022-06-04 05:44:07 Pascal Nowack bug added subscriber Pascal Nowack
2022-08-08 14:34:42 Jeremy Bícha description [Availability] The package fdk-aac is already in Ubuntu **multiverse**. The package fdk-aac builds for the architectures it is designed to work on. It currently builds and works for architetcures: amd64 arm64 armhf ppc64el riscv64 s390x Link to package https://launchpad.net/ubuntu/+source/fdk-aac [Rationale] - fdk-aac will be required by gnome-remote-desktop 43 to allow audio forwarding from the Ubuntu desktop host to the remote client. - fdk-aac is required in Ubuntu main no later than Aug 25 due to kinetic feature freeze [Security] - No CVEs/security issues in this software in the past - no `suid` or `sgid` binaries - no executables in `/sbin` and `/usr/sbin` - Package does not install services, timers or recurring jobs - Packages does not open privileged ports (ports < 1024) - Packages does not contain extensions to security-sensitive software [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Debian/Ubuntu and has no open bug reports except for this MIR and a similar "move to main" bug in Debian   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fdk-aac   - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=fdk-aac - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package does not run tests at build time because upstream doesn't provide one - The package does not run an autopkgtest [Quality assurance - packaging] - debian/watch is present. It wasn't working so I pushed a trivial fix to the Salsa packaging repo. - No significant Lintian warnings or errors https://lintian.debian.org/sources/fdk-aac - Lintian overrides are not present - This package does not rely on obsolete or about to be demoted packages. - This package has no python2 or GTK2 dependencies - The package will be installed by default, but does not ask debconf questions - Packaging and build is easy, link to d/rules https://salsa.debian.org/multimedia-team/fdk-aac/-/blob/master/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - No further depends or recommends dependencies that are not yet in main [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - Owning Team will be desktop-packages - Team is not yet, but will subscribe to the package before promotion - This does not use static builds - This does not use vendored code - The package successfully built during the most recent test rebuild [Background information] The Package description explains the package well Upstream Name is fdk-aac Link to upstream project https://github.com/mstorsjo/fdk-aac fdk-aac is currently in Debian non-free. It has been in the Debian NEW queue since the end of January waiting for ftpmasters to review it for a move to Debian main. Some discussion (from people who aren't ftpmasters) at https://bugs.debian.org/981285 [Availability] The package fdk-aac is already in Ubuntu **multiverse**. The package fdk-aac builds for the architectures it is designed to work on. It currently builds and works for architetcures: amd64 arm64 armhf ppc64el riscv64 s390x Link to package https://launchpad.net/ubuntu/+source/fdk-aac [Rationale] - fdk-aac will be required by gnome-remote-desktop 43 to allow audio forwarding from the Ubuntu desktop host to the remote client. - fdk-aac is requested in Ubuntu main no later than Aug 25 due to kinetic feature freeze [Security] - No CVEs/security issues in this software in the past - no `suid` or `sgid` binaries - no executables in `/sbin` and `/usr/sbin` - Package does not install services, timers or recurring jobs - Packages does not open privileged ports (ports < 1024) - Packages does not contain extensions to security-sensitive software [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Debian/Ubuntu and has no open bug reports except for this MIR and a similar "move to main" bug in Debian   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fdk-aac   - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=fdk-aac - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package does not run tests at build time because upstream doesn't provide one - The package does not run an autopkgtest - A manual test case has been added to this wiki page: https://wiki.ubuntu.com/DesktopTeam/TestPlans/RemoteDesktop [Quality assurance - packaging] - debian/watch is present. It wasn't working so I pushed a trivial fix to the Salsa packaging repo. - No significant Lintian warnings or errors https://lintian.debian.org/sources/fdk-aac - Lintian overrides are not present - This package does not rely on obsolete or about to be demoted packages. - This package has no python2 or GTK2 dependencies - The package will be installed by default, but does not ask debconf questions - Packaging and build is easy, link to d/rules https://salsa.debian.org/multimedia-team/fdk-aac/-/blob/master/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - No further depends or recommends dependencies that are not yet in main [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - Owning Team will be desktop-packages - Team is not yet, but will subscribe to the package before promotion - This does not use static builds - This does not use vendored code - The package successfully built during the most recent test rebuild [Background information] The Package description explains the package well Upstream Name is fdk-aac Link to upstream project https://github.com/mstorsjo/fdk-aac fdk-aac is currently in Debian non-free. It has been in the Debian NEW queue since the end of January waiting for ftpmasters to review it for a move to Debian main. Some discussion (from people who aren't ftpmasters) at https://bugs.debian.org/981285
2022-08-08 14:37:22 Jeremy Bícha bug added subscriber MIR approval team
2022-08-09 13:37:55 Jeremy Bícha description [Availability] The package fdk-aac is already in Ubuntu **multiverse**. The package fdk-aac builds for the architectures it is designed to work on. It currently builds and works for architetcures: amd64 arm64 armhf ppc64el riscv64 s390x Link to package https://launchpad.net/ubuntu/+source/fdk-aac [Rationale] - fdk-aac will be required by gnome-remote-desktop 43 to allow audio forwarding from the Ubuntu desktop host to the remote client. - fdk-aac is requested in Ubuntu main no later than Aug 25 due to kinetic feature freeze [Security] - No CVEs/security issues in this software in the past - no `suid` or `sgid` binaries - no executables in `/sbin` and `/usr/sbin` - Package does not install services, timers or recurring jobs - Packages does not open privileged ports (ports < 1024) - Packages does not contain extensions to security-sensitive software [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Debian/Ubuntu and has no open bug reports except for this MIR and a similar "move to main" bug in Debian   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fdk-aac   - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=fdk-aac - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package does not run tests at build time because upstream doesn't provide one - The package does not run an autopkgtest - A manual test case has been added to this wiki page: https://wiki.ubuntu.com/DesktopTeam/TestPlans/RemoteDesktop [Quality assurance - packaging] - debian/watch is present. It wasn't working so I pushed a trivial fix to the Salsa packaging repo. - No significant Lintian warnings or errors https://lintian.debian.org/sources/fdk-aac - Lintian overrides are not present - This package does not rely on obsolete or about to be demoted packages. - This package has no python2 or GTK2 dependencies - The package will be installed by default, but does not ask debconf questions - Packaging and build is easy, link to d/rules https://salsa.debian.org/multimedia-team/fdk-aac/-/blob/master/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - No further depends or recommends dependencies that are not yet in main [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - Owning Team will be desktop-packages - Team is not yet, but will subscribe to the package before promotion - This does not use static builds - This does not use vendored code - The package successfully built during the most recent test rebuild [Background information] The Package description explains the package well Upstream Name is fdk-aac Link to upstream project https://github.com/mstorsjo/fdk-aac fdk-aac is currently in Debian non-free. It has been in the Debian NEW queue since the end of January waiting for ftpmasters to review it for a move to Debian main. Some discussion (from people who aren't ftpmasters) at https://bugs.debian.org/981285 [Availability] The package fdk-aac is already in Ubuntu **multiverse**. The package fdk-aac builds for the architectures it is designed to work on. It currently builds and works for architetcures: amd64 arm64 armhf ppc64el riscv64 s390x Link to package https://launchpad.net/ubuntu/+source/fdk-aac [Rationale] - fdk-aac will be required by gnome-remote-desktop 43 to allow audio forwarding from the Ubuntu desktop host to the remote client. - It would be great and useful to have fdk-aac in Ubuntu main, but there is no definitive deadline. [Security] - No CVEs/security issues in this software in the past - no `suid` or `sgid` binaries - no executables in `/sbin` and `/usr/sbin` - Package does not install services, timers or recurring jobs - Packages does not open privileged ports (ports < 1024) - Packages does not contain extensions to security-sensitive software [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Debian/Ubuntu and has no open bug reports except for this MIR and a similar "move to main" bug in Debian   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fdk-aac   - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=fdk-aac - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package does not run tests at build time because upstream doesn't provide one - The package does not run an autopkgtest - A manual test case has been added to this wiki page: https://wiki.ubuntu.com/DesktopTeam/TestPlans/RemoteDesktop [Quality assurance - packaging] - debian/watch is present. It wasn't working so I pushed a trivial fix to the Salsa packaging repo. - No significant Lintian warnings or errors https://lintian.debian.org/sources/fdk-aac - Lintian overrides are not present - This package does not rely on obsolete or about to be demoted packages. - This package has no python2 or GTK2 dependencies - The package will be installed by default, but does not ask debconf questions - Packaging and build is easy, link to d/rules https://salsa.debian.org/multimedia-team/fdk-aac/-/blob/master/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - No further depends or recommends dependencies that are not yet in main [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - Owning Team will be desktop-packages - Team is not yet, but will subscribe to the package before promotion - This does not use static builds - This does not use vendored code - The package successfully built during the most recent test rebuild [Background information] The Package description explains the package well Upstream Name is fdk-aac Link to upstream project https://github.com/mstorsjo/fdk-aac fdk-aac is currently in Debian non-free. It has been in the Debian NEW queue since the end of January waiting for ftpmasters to review it for a move to Debian main. Some discussion (from people who aren't ftpmasters) at https://bugs.debian.org/981285
2022-08-09 14:45:10 Lukas Märdian fdk-aac (Ubuntu): assignee Lukas Märdian (slyon)
2022-08-09 15:36:32 Lukas Märdian tags kinetic fr-2597 kinetic
2022-08-16 10:32:34 Launchpad Janitor fdk-aac (Ubuntu): status New Confirmed
2022-08-16 10:33:41 amano bug added subscriber amano
2022-08-23 10:28:09 Lukas Märdian bug watch added https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=981285
2022-08-23 10:28:43 Lukas Märdian fdk-aac (Ubuntu): assignee Lukas Märdian (slyon) Ubuntu Security Team (ubuntu-security)
2022-08-24 07:13:47 Steve Beattie tags fr-2597 kinetic fr-2597 kinetic sec-1244
2022-10-04 07:30:55 Dylan Aïssi bug added subscriber Dylan Aïssi
2023-07-07 13:12:29 Jeremy Bícha fdk-aac (Ubuntu): status Confirmed Incomplete
2023-07-07 13:12:35 Jeremy Bícha fdk-aac (Ubuntu): assignee Ubuntu Security Team (ubuntu-security)
2023-07-07 13:14:45 Jeremy Bícha fdk-aac (Ubuntu): assignee Jeremy Bícha (jbicha)
2023-12-05 13:31:42 Jeremy Bícha affects fdk-aac (Ubuntu) fdk-aac-free (Ubuntu)
2023-12-05 13:31:58 Jeremy Bícha summary [MIR] fdk-aac [MIR] fdk-aac-free
2023-12-05 13:43:57 Jeremy Bícha description [Availability] The package fdk-aac is already in Ubuntu **multiverse**. The package fdk-aac builds for the architectures it is designed to work on. It currently builds and works for architetcures: amd64 arm64 armhf ppc64el riscv64 s390x Link to package https://launchpad.net/ubuntu/+source/fdk-aac [Rationale] - fdk-aac will be required by gnome-remote-desktop 43 to allow audio forwarding from the Ubuntu desktop host to the remote client. - It would be great and useful to have fdk-aac in Ubuntu main, but there is no definitive deadline. [Security] - No CVEs/security issues in this software in the past - no `suid` or `sgid` binaries - no executables in `/sbin` and `/usr/sbin` - Package does not install services, timers or recurring jobs - Packages does not open privileged ports (ports < 1024) - Packages does not contain extensions to security-sensitive software [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Debian/Ubuntu and has no open bug reports except for this MIR and a similar "move to main" bug in Debian   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fdk-aac   - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=fdk-aac - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package does not run tests at build time because upstream doesn't provide one - The package does not run an autopkgtest - A manual test case has been added to this wiki page: https://wiki.ubuntu.com/DesktopTeam/TestPlans/RemoteDesktop [Quality assurance - packaging] - debian/watch is present. It wasn't working so I pushed a trivial fix to the Salsa packaging repo. - No significant Lintian warnings or errors https://lintian.debian.org/sources/fdk-aac - Lintian overrides are not present - This package does not rely on obsolete or about to be demoted packages. - This package has no python2 or GTK2 dependencies - The package will be installed by default, but does not ask debconf questions - Packaging and build is easy, link to d/rules https://salsa.debian.org/multimedia-team/fdk-aac/-/blob/master/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - No further depends or recommends dependencies that are not yet in main [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - Owning Team will be desktop-packages - Team is not yet, but will subscribe to the package before promotion - This does not use static builds - This does not use vendored code - The package successfully built during the most recent test rebuild [Background information] The Package description explains the package well Upstream Name is fdk-aac Link to upstream project https://github.com/mstorsjo/fdk-aac fdk-aac is currently in Debian non-free. It has been in the Debian NEW queue since the end of January waiting for ftpmasters to review it for a move to Debian main. Some discussion (from people who aren't ftpmasters) at https://bugs.debian.org/981285 [Availability] The package fdk-aac-free is already in Ubuntu universe. The package fdk-aac-free builds for the architectures it is designed to work on. It currently builds and works for all Ubuntu architectures except i386 (where it is not needed). Link to package https://launchpad.net/ubuntu/+source/fdk-aac-free [Rationale] - fdk-aac-free is required by gnome-remote-desktop to allow audio forwarding from the Ubuntu desktop host to the remote client. - It would be great and useful to have fdk-aac-free in Ubuntu main, but there is no definitive deadline. [Security] - No CVEs/security issues in this software in the past - no `suid` or `sgid` binaries - no executables in `/sbin` and `/usr/sbin` - Package does not install services, timers or recurring jobs - Packages does not open privileged ports (ports < 1024) - Packages does not contain extensions to security-sensitive software [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Debian/Ubuntu and has no open bug reports except for this MIR and a "move to main" bug in Debian   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fdk-aac-free   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fdk-aac (the older library this was forked from)   - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=fdk-aac - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package does not run tests at build time because upstream doesn't provide one - The package does not run an autopkgtest - A manual test case has been added to this wiki page: https://wiki.ubuntu.com/DesktopTeam/TestPlans/RemoteDesktop [Quality assurance - packaging] - debian/watch is present. It wasn't working so I pushed a trivial fix to the Salsa packaging repo. - No significant Lintian warnings or errors https://lintian.debian.org/sources/fdk-aac - Lintian overrides are not present - This package does not rely on obsolete or about to be demoted packages. - This package has no python2 or GTK2 dependencies - The package will be installed by default, but does not ask debconf questions - Packaging and build is easy, link to d/rules https://salsa.debian.org/multimedia-team/fdk-aac-free/-/blob/debian/latest/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - No further depends or recommends dependencies that are not yet in main [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - Owning Team will be desktop-packages - Team is not yet, but will subscribe to the package before promotion - This does not use static builds - This does not use vendored code - The package successfully built during the most recent test rebuild [Background information] The Package description explains the package well Upstream Name is fdk-aac Link to upstream project https://github.com/mstorsjo/fdk-aac However, we are using Fedora's forked version. The upstream can be found at https://gitlab.freedesktop.org/wtaymans/fdk-aac-stripped fdk-aac is currently in Debian non-free. It has been in the Debian NEW queue since January 2022 waiting for ftpmasters to review it for a move to Debian main. Some discussion (from people who aren't ftpmasters) at https://bugs.debian.org/981285 In mid-2023, we decided to rename the source package to fdk-aac-free and reuploaded to Debian NEW but there still has not been any comment from ftpmasters. Meanwhile, the renamed source package was accepted into Ubuntu universe. Compared to the original fdk-aac, the Fedora fork strips the newer High Efficiency and High Efficiency v2 profiles with very low bitrates. Those profiles would not have been used by gnome-remote-desktop anyway since gnome-remote-desktop uses 96 kbps for its AAC implementation.
2023-12-05 13:44:00 Jeremy Bícha fdk-aac-free (Ubuntu): status Incomplete New
2023-12-05 13:44:22 Jeremy Bícha fdk-aac-free (Ubuntu): status New Confirmed
2023-12-05 13:44:25 Jeremy Bícha fdk-aac-free (Ubuntu): assignee Jeremy Bícha (jbicha)
2023-12-05 14:45:14 Jeremy Bícha description [Availability] The package fdk-aac-free is already in Ubuntu universe. The package fdk-aac-free builds for the architectures it is designed to work on. It currently builds and works for all Ubuntu architectures except i386 (where it is not needed). Link to package https://launchpad.net/ubuntu/+source/fdk-aac-free [Rationale] - fdk-aac-free is required by gnome-remote-desktop to allow audio forwarding from the Ubuntu desktop host to the remote client. - It would be great and useful to have fdk-aac-free in Ubuntu main, but there is no definitive deadline. [Security] - No CVEs/security issues in this software in the past - no `suid` or `sgid` binaries - no executables in `/sbin` and `/usr/sbin` - Package does not install services, timers or recurring jobs - Packages does not open privileged ports (ports < 1024) - Packages does not contain extensions to security-sensitive software [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Debian/Ubuntu and has no open bug reports except for this MIR and a "move to main" bug in Debian   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fdk-aac-free   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fdk-aac (the older library this was forked from)   - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=fdk-aac - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package does not run tests at build time because upstream doesn't provide one - The package does not run an autopkgtest - A manual test case has been added to this wiki page: https://wiki.ubuntu.com/DesktopTeam/TestPlans/RemoteDesktop [Quality assurance - packaging] - debian/watch is present. It wasn't working so I pushed a trivial fix to the Salsa packaging repo. - No significant Lintian warnings or errors https://lintian.debian.org/sources/fdk-aac - Lintian overrides are not present - This package does not rely on obsolete or about to be demoted packages. - This package has no python2 or GTK2 dependencies - The package will be installed by default, but does not ask debconf questions - Packaging and build is easy, link to d/rules https://salsa.debian.org/multimedia-team/fdk-aac-free/-/blob/debian/latest/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - No further depends or recommends dependencies that are not yet in main [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - Owning Team will be desktop-packages - Team is not yet, but will subscribe to the package before promotion - This does not use static builds - This does not use vendored code - The package successfully built during the most recent test rebuild [Background information] The Package description explains the package well Upstream Name is fdk-aac Link to upstream project https://github.com/mstorsjo/fdk-aac However, we are using Fedora's forked version. The upstream can be found at https://gitlab.freedesktop.org/wtaymans/fdk-aac-stripped fdk-aac is currently in Debian non-free. It has been in the Debian NEW queue since January 2022 waiting for ftpmasters to review it for a move to Debian main. Some discussion (from people who aren't ftpmasters) at https://bugs.debian.org/981285 In mid-2023, we decided to rename the source package to fdk-aac-free and reuploaded to Debian NEW but there still has not been any comment from ftpmasters. Meanwhile, the renamed source package was accepted into Ubuntu universe. Compared to the original fdk-aac, the Fedora fork strips the newer High Efficiency and High Efficiency v2 profiles with very low bitrates. Those profiles would not have been used by gnome-remote-desktop anyway since gnome-remote-desktop uses 96 kbps for its AAC implementation. [Availability] The package fdk-aac-free is already in Ubuntu universe. The package fdk-aac-free builds for the architectures it is designed to work on. It currently builds and works for all Ubuntu architectures except i386 (where it is not needed). Link to package https://launchpad.net/ubuntu/+source/fdk-aac-free [Rationale] - fdk-aac-free is required by gnome-remote-desktop to allow audio forwarding from the Ubuntu desktop host to the remote client. - It would be great and useful to have fdk-aac-free in Ubuntu main, but there is no definitive deadline. [Security] - No CVEs/security issues in this software in the past - no `suid` or `sgid` binaries - no executables in `/sbin` and `/usr/sbin` - Package does not install services, timers or recurring jobs - Packages does not open privileged ports (ports < 1024) - Packages does not contain extensions to security-sensitive software [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Debian/Ubuntu and has no open bug reports except for this MIR and a "move to main" bug in Debian   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fdk-aac-free   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fdk-aac (the older library this was forked from)   - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=fdk-aac - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package does not run tests at build time because upstream doesn't provide one - The package does not run an autopkgtest - A manual test case has been added to this wiki page: https://wiki.ubuntu.com/DesktopTeam/TestPlans/RemoteDesktop [Quality assurance - packaging] - debian/watch is present. It wasn't working so I pushed a trivial fix to the Salsa packaging repo. - No significant Lintian warnings or errors (see comment 6) - Lintian overrides are not present - This package does not rely on obsolete or about to be demoted packages. - This package has no python2 or GTK2 dependencies - The package will be installed by default, but does not ask debconf questions - Packaging and build is easy, link to d/rules https://salsa.debian.org/multimedia-team/fdk-aac-free/-/blob/debian/latest/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - No further depends or recommends dependencies that are not yet in main [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - Owning Team will be desktop-packages - Team is not yet, but will subscribe to the package before promotion - This does not use static builds - This does not use vendored code - The package successfully built during the most recent test rebuild [Background information] The Package description explains the package well Upstream Name is fdk-aac Link to upstream project https://github.com/mstorsjo/fdk-aac However, we are using Fedora's forked version. The upstream can be found at https://gitlab.freedesktop.org/wtaymans/fdk-aac-stripped fdk-aac is currently in Debian non-free. It has been in the Debian NEW queue since January 2022 waiting for ftpmasters to review it for a move to Debian main. Some discussion (from people who aren't ftpmasters) at https://bugs.debian.org/981285 In mid-2023, we decided to rename the source package to fdk-aac-free and reuploaded to Debian NEW but there still has not been any comment from ftpmasters. Meanwhile, the renamed source package was accepted into Ubuntu universe. Compared to the original fdk-aac, the Fedora fork strips the newer High Efficiency and High Efficiency v2 profiles with very low bitrates. Those profiles would not have been used by gnome-remote-desktop anyway since gnome-remote-desktop uses 96 kbps for its AAC implementation.
2023-12-05 15:43:17 Lukas Märdian fdk-aac-free (Ubuntu): assignee Ubuntu Security Team (ubuntu-security)
2024-02-09 20:07:15 Jeremy Bícha description [Availability] The package fdk-aac-free is already in Ubuntu universe. The package fdk-aac-free builds for the architectures it is designed to work on. It currently builds and works for all Ubuntu architectures except i386 (where it is not needed). Link to package https://launchpad.net/ubuntu/+source/fdk-aac-free [Rationale] - fdk-aac-free is required by gnome-remote-desktop to allow audio forwarding from the Ubuntu desktop host to the remote client. - It would be great and useful to have fdk-aac-free in Ubuntu main, but there is no definitive deadline. [Security] - No CVEs/security issues in this software in the past - no `suid` or `sgid` binaries - no executables in `/sbin` and `/usr/sbin` - Package does not install services, timers or recurring jobs - Packages does not open privileged ports (ports < 1024) - Packages does not contain extensions to security-sensitive software [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Debian/Ubuntu and has no open bug reports except for this MIR and a "move to main" bug in Debian   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fdk-aac-free   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fdk-aac (the older library this was forked from)   - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=fdk-aac - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package does not run tests at build time because upstream doesn't provide one - The package does not run an autopkgtest - A manual test case has been added to this wiki page: https://wiki.ubuntu.com/DesktopTeam/TestPlans/RemoteDesktop [Quality assurance - packaging] - debian/watch is present. It wasn't working so I pushed a trivial fix to the Salsa packaging repo. - No significant Lintian warnings or errors (see comment 6) - Lintian overrides are not present - This package does not rely on obsolete or about to be demoted packages. - This package has no python2 or GTK2 dependencies - The package will be installed by default, but does not ask debconf questions - Packaging and build is easy, link to d/rules https://salsa.debian.org/multimedia-team/fdk-aac-free/-/blob/debian/latest/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - No further depends or recommends dependencies that are not yet in main [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - Owning Team will be desktop-packages - Team is not yet, but will subscribe to the package before promotion - This does not use static builds - This does not use vendored code - The package successfully built during the most recent test rebuild [Background information] The Package description explains the package well Upstream Name is fdk-aac Link to upstream project https://github.com/mstorsjo/fdk-aac However, we are using Fedora's forked version. The upstream can be found at https://gitlab.freedesktop.org/wtaymans/fdk-aac-stripped fdk-aac is currently in Debian non-free. It has been in the Debian NEW queue since January 2022 waiting for ftpmasters to review it for a move to Debian main. Some discussion (from people who aren't ftpmasters) at https://bugs.debian.org/981285 In mid-2023, we decided to rename the source package to fdk-aac-free and reuploaded to Debian NEW but there still has not been any comment from ftpmasters. Meanwhile, the renamed source package was accepted into Ubuntu universe. Compared to the original fdk-aac, the Fedora fork strips the newer High Efficiency and High Efficiency v2 profiles with very low bitrates. Those profiles would not have been used by gnome-remote-desktop anyway since gnome-remote-desktop uses 96 kbps for its AAC implementation. [Availability] The package fdk-aac-free is already in Ubuntu universe. The package fdk-aac-free builds for the architectures it is designed to work on. It currently builds and works for all Ubuntu architectures except i386 (where it is not needed). Link to package https://launchpad.net/ubuntu/+source/fdk-aac-free [Rationale] - fdk-aac-free is required by gnome-remote-desktop to allow audio forwarding from the Ubuntu desktop host to the remote client. - It would be great and useful to have fdk-aac-free in Ubuntu main, but there is no definitive deadline. [Security] - No CVEs/security issues in this software in the past - no `suid` or `sgid` binaries - no executables in `/sbin` and `/usr/sbin` - Package does not install services, timers or recurring jobs - Packages does not open privileged ports (ports < 1024) - Packages does not contain extensions to security-sensitive software [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Debian/Ubuntu and has no open bug reports except for this MIR and a "move to main" bug in Debian   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fdk-aac-free   - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fdk-aac (the older library this was forked from)   - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=fdk-aac - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package does not run tests at build time because upstream doesn't provide one - The package runs an autopkgtest, and is currently passing on all architectures (except i386), link to test logs: https://autopkgtest.ubuntu.com/packages/fdk-aac-free - A manual test case has been added to this wiki page: https://wiki.ubuntu.com/DesktopTeam/TestPlans/RemoteDesktop [Quality assurance - packaging] - debian/watch is present. It wasn't working so I pushed a trivial fix to the Salsa packaging repo. - No significant Lintian warnings or errors (see comment 6) - Lintian overrides are not present - This package does not rely on obsolete or about to be demoted packages. - This package has no python2 or GTK2 dependencies - The package will be installed by default, but does not ask debconf questions - Packaging and build is easy, link to d/rules https://salsa.debian.org/multimedia-team/fdk-aac-free/-/blob/debian/latest/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - No further depends or recommends dependencies that are not yet in main [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - Owning Team will be desktop-packages - Team is not yet, but will subscribe to the package before promotion - This does not use static builds - This does not use vendored code - The package successfully built during the most recent test rebuild [Background information] The Package description explains the package well Upstream Name is fdk-aac Link to upstream project https://github.com/mstorsjo/fdk-aac However, we are using Fedora's forked version. The upstream can be found at https://gitlab.freedesktop.org/wtaymans/fdk-aac-stripped fdk-aac is currently in Debian non-free. It has been in the Debian NEW queue since January 2022 waiting for ftpmasters to review it for a move to Debian main. Some discussion (from people who aren't ftpmasters) at https://bugs.debian.org/981285 In mid-2023, we decided to rename the source package to fdk-aac-free and reuploaded to Debian NEW but there still has not been any comment from ftpmasters. Meanwhile, the renamed source package was accepted into Ubuntu universe. Compared to the original fdk-aac, the Fedora fork strips the newer High Efficiency and High Efficiency v2 profiles with very low bitrates. Those profiles would not have been used by gnome-remote-desktop anyway since gnome-remote-desktop uses 96 kbps for its AAC implementation.
2024-03-16 00:02:07 Mark Esler bug watch added https://github.com/mstorsjo/fdk-aac/issues/167
2024-04-08 19:26:44 Seth Arnold fdk-aac-free (Ubuntu): assignee Ubuntu Security Team (ubuntu-security) Jeremy Bícha (jbicha)
2024-04-08 19:26:48 Seth Arnold fdk-aac-free (Ubuntu): status Confirmed Incomplete