Activity log for bug #1914808

Date Who What changed Old value New value Message
2021-02-05 18:36:03 Gunnar Hjalmarsson bug added bug
2021-02-05 18:36:21 Gunnar Hjalmarsson bug added subscriber MIR approval team
2021-02-05 18:36:36 Gunnar Hjalmarsson bug added subscriber Sebastien Bacher
2021-02-08 11:09:10 Sebastien Bacher description Please include the marisa source package in Ubuntu's component main. This is actually a follow-up of bug #1909665: I overlooked that libopencc1.1 depends on libmarisa0, which is the only binary that needs to be promoted to main due to this MIR. libmarisa0 is a C++ library which provides an implementation of the MARISA (Matching Algorithm with Recursively Implemented StorAge) try data structure. Given the purpose of this MIR, I think ~desktop-packages would be a suitable subscriber to marisa bugs in Ubuntu. Upstream bugs: https://github.com/s-yata/marisa-trie/issues <https://bugs.debian.org/981488>, which I submitted about adding a symbols file, is the only open Debian bug. And no open Ubuntu bugs except for this one. I have read https://wiki.ubuntu.com/MainInclusionProcess#Main_Inclusion_requirements and given that a symbols file is now in place (in Ubuntu), I found no issues that would prevent the proposed main inclusion. * Availability It's available on the Ubuntu supported architectures https://bugs.launchpad.net/ubuntu/+source/marisa/0.2.6-3~exp2ubuntu1 The package was in sync until it had to be changed to accomodate the MIR requirements (the delta now is cpp symbols delta on some of the architectures since our toolchain seems to be different enough that it is required) * Rationale It's a depends of opencc, MIR bug #1909665 libmarisa0 is the only binary that needs to be promoted * Security There is no known security issues https://security-tracker.debian.org/tracker/source-package/marisa https://people.canonical.com/~ubuntu-security/cve/pkg/marisa.html https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=marisa * Quality assurance The desktop team is going to subscribe to the package https://launchpad.net/ubuntu/+source/marisa/+bugs https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=marisa No open reports out of the MIR and a request for the .symbols to be added in Debian The package enables upstream tests during the build and ships autopkgtests * Dependencies No universe binary dependencies Depends: libc6 (>= 2.33), libgcc-s1 (>= 3.0), libstdc++6 (>= 5.2) * Standards compliance current 4.5.1 standards-version, debhelper compat 13, dh style simple rules * Maintenance Upstream is active, the package is maintained in Debian and desktop team is going to sign up for Ubuntu
2021-02-08 12:42:22 Christian Ehrhardt  marisa (Ubuntu): assignee Ubuntu Security Team (ubuntu-security)
2021-04-07 00:35:04 Seth Arnold attachment added coverity.txt https://bugs.launchpad.net/ubuntu/+source/marisa/+bug/1914808/+attachment/5484982/+files/coverity.txt
2021-04-09 02:08:07 Seth Arnold marisa (Ubuntu): assignee Ubuntu Security Team (ubuntu-security)
2021-04-09 02:08:29 Seth Arnold bug added subscriber Seth Arnold
2021-04-09 02:09:02 Seth Arnold marisa (Ubuntu): status New In Progress
2021-05-05 06:32:59 Didier Roche-Tolomelli marisa (Ubuntu): status In Progress Fix Released