Activity log for bug #1910262

Date Who What changed Old value New value Message
2021-01-05 15:35:59 Christian Ehrhardt  bug added bug
2021-01-05 15:36:10 Christian Ehrhardt  bug task added backuppc-rsync (Ubuntu)
2021-01-05 15:36:17 Christian Ehrhardt  backuppc-rsync (Ubuntu): assignee Christian Ehrhardt  (paelzer)
2021-01-05 15:36:20 Christian Ehrhardt  libbackuppc-xs-perl (Ubuntu): assignee Christian Ehrhardt  (paelzer)
2021-01-05 15:40:08 Christian Ehrhardt  backuppc-rsync (Ubuntu): status New Incomplete
2021-01-06 15:40:43 Christian Ehrhardt  description For Backuppc 4.x This is a stub bug for now # libbackuppc-xs-perl [Availability] The package is in Ubuntu universe since bionic, builds for the architectures it is designed to work on (arch any perl -> C). This is the perl binding to backuppc and we'd need binary:libbackuppc-xs-perl [Rationale] This is part of the MIR activity for all dependencies of backuppc4. That is out for quite a while and we wanted it for a while already. v4 was a significant improvement over 3.x in terms of performance and storage efficiency. While at the same time being compatible with the on disk format. => https://github.com/backuppc/backuppc/releases/tag/4.0.0 Later 4.1/4.2/4.3 further improved and stabilized things with 4.4 again having some more good new features. Said version 4.x needs this package as a requirement. [Security] Check the security History of the package There were four XSS attacks and a config issue in 2009/2011 on backuppc itself. But nothing on this lib. [Quality assurance] The package itself runs tests through autopkgtest-pkg-perl (testing the basics) and backuppc itself does a backup/restore autopkgtest (testing the stack) The package does not ask debconf questions higher than medium and is not going to be installed by default. There are no long-term outstanding bugs. The package is maintained well in Debian/Ubuntu The package does not deal with exotic hardware which we cannot support. d/watch is present No massive lintian warnings. The package does not rely on obsolete or about to be demoted packages. [UI standards] Not an End-user application by itself. [Dependencies] No further dependencies that are not in main. [Standards compliance] The package does meet the FHS and Debian Policy standards. Also, the source packaging is reasonably easy to understand and maintain. Upstream packs an embedded zlib, but it is patches out and uses the system libs. [Maintenance] The Server team will subscribe for the package for maintenance [Background] Perl module with C backend for BackupPC 4 --- # backuppc-rsync [Availability] The package is in Ubuntu universe since <=precise and builds for all architectures. [Rationale] This is part of the MIR activity for all dependencies of backuppc4. That is out for quite a while and we wanted it for a while already. v4 was a significant improvement over 3.x in terms of performance and storage efficiency. While at the same time being compatible with the on disk format. => https://github.com/backuppc/backuppc/releases/tag/4.0.0 Later 4.1/4.2/4.3 further improved and stabilized things with 4.4 again having some more good new features. Said version 4.x needs this package as a requirement. [Security] Check the security History of the package: No documented issues, but TBH it is a fork of rsync which is known to have some issues. But since this is more or less tracking the an active stable rsync release the same triage&fixes apply here as well. Also most rsync CVEs are about rsync running as a server which isn't the case here. We still want to have security to nod about it. [Quality assurance] No autopkgtests present, but Backuppc does a backup/restore autopkgtest (testing the stack) which includes this. The package does not ask debconf questions higher than medium and is not going to be installed by default. There are no long-term outstanding bugs. The package is maintained well in Debian/Ubuntu The package does not deal with exotic hardware which we cannot support. d/watch is present No massive lintian warnings. The package does not rely on obsolete or about to be demoted packages. [UI standards] Not an End-user application by itself (internal usage in backuppc4 only). [Dependencies] No further dependencies that are not in main. [Standards compliance] The package does meet the FHS and Debian Policy standards. Also, the source packaging is reasonably easy to understand and maintain. Upstream packs an embedded zlib, but it is patches out and uses the system libs. [Maintenance] The Server team will subscribe for the package for maintenance [Background] Rsync-bpc is a customized version of rsync that is used as part of BackupPC, an open source backup system. I'd wish this could be a module for normal rsync, but I don't consider this a hard blocker. It is used in a much smaller scope than "general rsync" since it isn't in a public binary ath (only internal use). It does not build/provide a lot what rsync is - no services, no extra tools, ... Also this is a replacement for libfile-rsyncp-perl which can be demoted once we get backuppc4 into main. Thereby while a "second rsync" isn't perfect we are maintaining it anyway. And it might be better than a perl rewrite of the same (which is what the old solution was). The biggest issue IMHO is that it is slightly behind the main rsync in versions. But it is not too far and e.g. currently on the Focal version which will have lots of LTS support anyway. And backuppc-rsync has regular updates, they are just aligning on the stable releases instead of new streams for features.
2021-01-06 15:40:46 Christian Ehrhardt  backuppc-rsync (Ubuntu): status Incomplete New
2021-01-06 15:40:47 Christian Ehrhardt  libbackuppc-xs-perl (Ubuntu): status Incomplete New
2021-01-07 13:59:32 Christian Ehrhardt  backuppc-rsync (Ubuntu): status New In Progress
2021-01-07 14:56:37 Christian Ehrhardt  backuppc-rsync (Ubuntu): status In Progress New
2021-01-07 14:56:45 Christian Ehrhardt  backuppc-rsync (Ubuntu): assignee Christian Ehrhardt  (paelzer) Ubuntu Security Team (ubuntu-security)
2021-01-07 15:24:29 Christian Ehrhardt  bug watch added https://github.com/backuppc/backuppc-xs/issues/7
2021-01-07 15:24:29 Christian Ehrhardt  bug watch added https://github.com/backuppc/backuppc-xs/issues/6
2021-01-07 15:24:36 Christian Ehrhardt  libbackuppc-xs-perl (Ubuntu): status New In Progress
2021-01-07 15:24:38 Christian Ehrhardt  libbackuppc-xs-perl (Ubuntu): assignee Christian Ehrhardt  (paelzer)
2021-01-12 15:22:38 Christian Ehrhardt  bug added subscriber MIR approval team
2021-07-16 13:05:25 chielchiel bug added subscriber chielchiel
2021-07-21 01:57:36 Seth Arnold bug watch added https://github.com/backuppc/rsync-bpc/issues/23
2021-07-21 01:57:36 Seth Arnold bug watch added https://github.com/backuppc/rsync-bpc/issues/24
2021-07-21 01:57:42 Seth Arnold backuppc-rsync (Ubuntu): assignee Ubuntu Security Team (ubuntu-security)
2021-07-21 01:57:56 Seth Arnold bug added subscriber Seth Arnold
2021-07-21 01:58:22 Seth Arnold backuppc-rsync (Ubuntu): status New In Progress
2021-07-21 07:22:51 Chris Halse Rogers backuppc-rsync (Ubuntu): status In Progress Fix Released
2021-07-21 07:22:53 Chris Halse Rogers libbackuppc-xs-perl (Ubuntu): status In Progress Fix Released