[MIR] nacl: pulled into main via libssh Built-Using

Bug #1847346 reported by Steve Langasek
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
libssh (Ubuntu)
Fix Released
Undecided
Unassigned
nacl (Ubuntu)
Invalid
High
Unassigned

Bug Description

The libssh package has a Built-Using: nacl field in its binaries, indicating that it is embedding code from nacl. The changelog confirms that this was added because libssh statically links nacl. Either nacl needs to go through an MIR process since we're shipping the code in main, or libssh needs to not use nacl.

Steve Langasek (vorlon)
Changed in libssh (Ubuntu):
assignee: nobody → Desktop Packages (desktop-packages)
importance: Undecided → Critical
status: New → Incomplete
assignee: Desktop Packages (desktop-packages) → Ubuntu Desktop Bugs (desktop-bugs)
affects: libssh (Ubuntu) → nacl (Ubuntu)
Revision history for this message
Steve Langasek (vorlon) wrote :

According to the cmake rules libnacl is used for curve25519 support, which is optional. I think for eoan we should address this by disabling nacl at build time. I'll upload this libssh change, which takes the pressure off for eoan release, and the MIR can be revisited in FF.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package libssh - 0.9.0-1ubuntu1

---------------
libssh (0.9.0-1ubuntu1) eoan; urgency=medium

  * Disable libnacl support, which has not gone through an MIR.
    LP: #1847346.

 -- Steve Langasek <email address hidden> Tue, 08 Oct 2019 20:31:16 +0000

Changed in libssh (Ubuntu):
status: New → Fix Released
Changed in nacl (Ubuntu):
assignee: Ubuntu Desktop Bugs (desktop-bugs) → nobody
importance: Critical → High
Changed in nacl (Ubuntu):
status: Incomplete → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.