ubuntu-security-tools

Merge ~iconstantin/ubuntu-security-tools:master into ubuntu-security-tools:master

  1. Git
  2. lp:~iconstantin/ubuntu-security-tools
  3. master
  4. Merge into master
Proposed by Ian Constantin
Status: Merged
Merged at revision: 7afaccad5c06a34513b5ff67cd3a46583c7ff7f4
Proposed branch: ~iconstantin/ubuntu-security-tools:master
Merge into: ubuntu-security-tools:master
Diff against target: 12 lines (+1/-0)
1 file modified
build-tools/umt (+1/-0)
Reviewer Review Type Date Requested Status
Steve Beattie Approve
Marc Deslauriers Pending
Review via email: mp+417637@code.launchpad.net

Commit message

Added a special warning for ghostscript on trusty/xenial/bionic to check that openjpeg patches are for files that compile when ghostscript builds.

Description of the change

ghostscript prior to focal vendors openjpeg - this warning for `umt check` will give an extra notice to check that any changes to openjpeg are to files that are ultimately used/compiled.

To post a comment you must log in.
Revision history for this message
Steve Beattie (sbeattie) wrote :

LGTM, merged. Thanks!

review: Approve

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1diff --git a/build-tools/umt b/build-tools/umt
2index 3c33569..9416371 100755
3--- a/build-tools/umt
4+++ b/build-tools/umt
5@@ -895,6 +895,7 @@ def cmd_check():
6 'eglibc' : [ None, "IMPORTANT: ABI changes may break running daemons! See $QRT/notes-testing/glibc/README" ],
7 'fwupd' : [ None, "IMPORTANT: also needs fwupd-signed updates, and special publishing procedure - talk to infinity" ],
8 'glibc' : [ None, "IMPORTANT: ABI changes may break running daemons! See $QRT/notes-testing/glibc/README" ],
9+ 'ghostscript' : [ [ 'trusty', 'xenial', 'bionic' ], "Important: if addressing a CVE in the embedded version of openjpeg, ensure the patches change files that ultimately get compiled" ],
10 'grub2' : [ None, "IMPORTANT: also needs grub2-signed updates, and special publishing procedure - talk to infinity" ],
11 'isc-dhcp' : [ [ 'natty', 'oneiric', 'precise' ], "IMPORTANT: patches at end of 00list file may get reverted at build, see $QRT/build_testing/isc-dhcp!! Also, please include LP: #727837 fix!" ],
12 'json-c' : [ 'xenial', "IMPORTANT: Must test upstart with the updated json-c package! (LP: #1878723)" ],

Subscribers

People subscribed via source and target branches