Activity log for bug #1946901

Date Who What changed Old value New value Message
2021-10-13 04:07:01 Bryce Harrington bug added bug
2021-10-13 04:07:03 Bryce Harrington bug added subscriber Canonical Server Team
2021-10-14 09:18:53 Christian Ehrhardt  spice (Ubuntu): assignee Christian Ehrhardt  (paelzer)
2021-10-19 04:36:34 Bryce Harrington description Scheduled-For: 22.11 Upstream: tbd Debian: 0.15.0-2 Ubuntu: 0.14.3-2.1ubuntu1 ### New Debian Changes ### spice (0.15.0-2) unstable; urgency=medium * switch from $DEB_TARGET_MULTIARCH to $DEB_HOST_MULTIARCH * do-not-run-nonexisting-doxygen-sh.patch to fix FTBFS (apparently wrong upstream meson.build) -- Michael Tokarev <mjt@tls.msk.ru> Fri, 01 Oct 2021 09:49:55 +0300 spice (0.15.0-1) unstable; urgency=medium * new upstream release 0.15.0 * removed patches included upstream * use meson+ninja build-system * removed the wrongly implemented automated tests the meson build system run the same tests now too. (Closes: #973803) * bump debhelper-compat to 13 * use ${DEB_TARGET_MULTIARCH} in .install files * update paths in d/copyright for spice-common * removed trailing whitespaces from this file (d/changelog) -- Michael Tokarev <mjt@tls.msk.ru> Fri, 01 Oct 2021 01:17:04 +0300 spice (0.14.3-2.1) unstable; urgency=medium * Non-maintainer upload. * Client initiated renegotiation denial of service (CVE-2021-20201) (Closes: #983698) - With OpenSSL 1.1: Disable client-initiated renegotiation - With OpenSSL 1.0.2 and earlier: disable client-side renegotiation -- Salvatore Bonaccorso <carnil@debian.org> Sun, 28 Feb 2021 16:29:54 +0100 spice (0.14.3-2) unstable; urgency=medium [ Christian Ehrhardt ] * - d/t/automated-tests: d/t/control: make test work again * - d/t/control: install new test dependency python-pil * - d/t/regression-test.py,d/t/base_test.ppm: add files dropped in release tarball but needed for autopkgtests * - d/source/include-binaries: allow binary base_test.ppm in package [ Michael Tokarev ] * build on riscv64 too (Closes: #958349) * bump debhelper compat to 12 and switch to debhelper-compat build-dep * add Rules-Requires-Root: no * d/rules: run dh for recognized targets only * use secure (https) URLs in d/control & d/copyright [ Salvatore Bonaccorso ] * Point Vcs-{Git,Browser} field to qemu-team packaging repository (Closes: #971873) * Fix multiple buffer overflow vulnerabilities in QUIC image decoding (CVE-2020-14355) (Closes: #971750) -- Michael Tokarev <mjt@tls.msk.ru> Thu, 29 Oct 2020 10:57:02 +0300 spice (0.14.3-1) unstable; urgency=medium * new upstream version (Closes: #940057, #954629) * remove NEWS from d/docs (removed upstream) * remove patches included upstream * refresh disable-failing-test-listen.patch * set Multi-Arch: same for libspice-server-dev too * update libspice-server1.symbols -- Michael Tokarev <mjt@tls.msk.ru> Tue, 14 Apr 2020 16:55:25 +0300 spice (0.14.2-4) unstable; urgency=medium * disable failing test-listen (Closes: #941006) * add fix-test-qxl-parsing-on-ppc64el-and-armhf.patch * stop using dh_autoreconf as we do not patch autoconf/automake anymore -- Michael Tokarev <mjt@tls.msk.ru> Tue, 01 Oct 2019 08:52:16 +0300 spice (0.14.2-3) unstable; urgency=medium * red-replay-qxl-fix-replay-on-32-bit-systems.patch hopefully fix the tests failure on arm* and ppc (FTBFS) * remove-compile-warnings-on-Linux-32bit-system.patch fix tons of compiler warnings on 32bit platforms -- Michael Tokarev <mjt@tls.msk.ru> Sat, 31 Aug 2019 21:20:40 +0300 spice (0.14.2-2) unstable; urgency=medium * set $XDG_RUNTIME_DIR instead of $HOME when running tests to avoid dconf cache failure (fix FTBFS on almost all buildds) * set GSTREAMER_1_0_LIBS and GLIB2_LIBS (trimmed) for configure to avoid linking with useless libs -- Michael Tokarev <mjt@tls.msk.ru> Fri, 30 Aug 2019 15:58:47 +0300 spice (0.14.2-1) unstable; urgency=medium * new upstream 0.14.2 release * remove all security patches (included upstream) * set maintainer to the QEMU team (Closes: #911427) * spice-protocol needs to be >= 0.14.0 ### Old Ubuntu Delta ### spice (0.14.3-2.1ubuntu1) impish; urgency=medium * Merge with Debian unstable. Remaining changes: - d/control: Don't recommend -libav gstreamer plugins since it is in universe. This now downgrades it to a suggest instead of completely removing the dependency. - d/t/automated-tests: avoid test fail due to build errors (Closes: #973803). -- Miriam España Acebal <miriam.espana@canonical.com> Fri, 13 Aug 2021 14:12:44 +0200 Upstream: tbd Debian: 0.15.0-2 Ubuntu: 0.14.3-2.1ubuntu1 ### New Debian Changes ### spice (0.15.0-2) unstable; urgency=medium   * switch from $DEB_TARGET_MULTIARCH to $DEB_HOST_MULTIARCH   * do-not-run-nonexisting-doxygen-sh.patch to fix FTBFS     (apparently wrong upstream meson.build)  -- Michael Tokarev <mjt@tls.msk.ru> Fri, 01 Oct 2021 09:49:55 +0300 spice (0.15.0-1) unstable; urgency=medium   * new upstream release 0.15.0   * removed patches included upstream   * use meson+ninja build-system   * removed the wrongly implemented automated tests     the meson build system run the same tests now too.     (Closes: #973803)   * bump debhelper-compat to 13   * use ${DEB_TARGET_MULTIARCH} in .install files   * update paths in d/copyright for spice-common   * removed trailing whitespaces from this file (d/changelog)  -- Michael Tokarev <mjt@tls.msk.ru> Fri, 01 Oct 2021 01:17:04 +0300 spice (0.14.3-2.1) unstable; urgency=medium   * Non-maintainer upload.   * Client initiated renegotiation denial of service (CVE-2021-20201)     (Closes: #983698)     - With OpenSSL 1.1: Disable client-initiated renegotiation     - With OpenSSL 1.0.2 and earlier: disable client-side renegotiation  -- Salvatore Bonaccorso <carnil@debian.org> Sun, 28 Feb 2021 16:29:54 +0100 spice (0.14.3-2) unstable; urgency=medium   [ Christian Ehrhardt ]   * - d/t/automated-tests: d/t/control: make test work again   * - d/t/control: install new test dependency python-pil   * - d/t/regression-test.py,d/t/base_test.ppm: add files       dropped in release tarball but needed for autopkgtests   * - d/source/include-binaries: allow binary base_test.ppm in package   [ Michael Tokarev ]   * build on riscv64 too (Closes: #958349)   * bump debhelper compat to 12 and switch to debhelper-compat build-dep   * add Rules-Requires-Root: no   * d/rules: run dh for recognized targets only   * use secure (https) URLs in d/control & d/copyright   [ Salvatore Bonaccorso ]   * Point Vcs-{Git,Browser} field to qemu-team packaging repository     (Closes: #971873)   * Fix multiple buffer overflow vulnerabilities in QUIC image decoding     (CVE-2020-14355) (Closes: #971750)  -- Michael Tokarev <mjt@tls.msk.ru> Thu, 29 Oct 2020 10:57:02 +0300 spice (0.14.3-1) unstable; urgency=medium   * new upstream version (Closes: #940057, #954629)   * remove NEWS from d/docs (removed upstream)   * remove patches included upstream   * refresh disable-failing-test-listen.patch   * set Multi-Arch: same for libspice-server-dev too   * update libspice-server1.symbols  -- Michael Tokarev <mjt@tls.msk.ru> Tue, 14 Apr 2020 16:55:25 +0300 spice (0.14.2-4) unstable; urgency=medium   * disable failing test-listen (Closes: #941006)   * add fix-test-qxl-parsing-on-ppc64el-and-armhf.patch   * stop using dh_autoreconf as we do not patch autoconf/automake anymore  -- Michael Tokarev <mjt@tls.msk.ru> Tue, 01 Oct 2019 08:52:16 +0300 spice (0.14.2-3) unstable; urgency=medium   * red-replay-qxl-fix-replay-on-32-bit-systems.patch     hopefully fix the tests failure on arm* and ppc (FTBFS)   * remove-compile-warnings-on-Linux-32bit-system.patch     fix tons of compiler warnings on 32bit platforms  -- Michael Tokarev <mjt@tls.msk.ru> Sat, 31 Aug 2019 21:20:40 +0300 spice (0.14.2-2) unstable; urgency=medium   * set $XDG_RUNTIME_DIR instead of $HOME when running tests     to avoid dconf cache failure (fix FTBFS on almost all buildds)   * set GSTREAMER_1_0_LIBS and GLIB2_LIBS (trimmed) for configure     to avoid linking with useless libs  -- Michael Tokarev <mjt@tls.msk.ru> Fri, 30 Aug 2019 15:58:47 +0300 spice (0.14.2-1) unstable; urgency=medium   * new upstream 0.14.2 release   * remove all security patches (included upstream)   * set maintainer to the QEMU team (Closes: #911427)   * spice-protocol needs to be >= 0.14.0 ### Old Ubuntu Delta ### spice (0.14.3-2.1ubuntu1) impish; urgency=medium   * Merge with Debian unstable. Remaining changes:     - d/control: Don't recommend -libav gstreamer plugins since it       is in universe. This now downgrades it to a suggest instead       of completely removing the dependency.     - d/t/automated-tests: avoid test fail due to build       errors (Closes: #973803).  -- Miriam España Acebal <miriam.espana@canonical.com> Fri, 13 Aug 2021 14:12:44 +0200
2021-10-19 04:36:38 Bryce Harrington spice (Ubuntu): milestone ubuntu-21.11
2021-10-29 08:09:04 Christian Ehrhardt  bug watch added https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=973803
2021-10-29 08:09:08 Christian Ehrhardt  spice (Ubuntu): status New In Progress
2021-11-04 14:32:12 Launchpad Janitor spice (Ubuntu): status In Progress Fix Released