Tag
We received a private report from a security researcher describing a vulnerability affecting Launchpad. The vulnerability involved the unsafe processing of tar files at build upload and custom upload. We investigated promptly and deployed a fix shortly after the report. The …
Read more of Launchpad security advisory: Fix applied for unsafe tar file extraction vulnerability →
Here’s a brief changelog of what we’ve been up to since our last general update. Bugs Add basic GitLab bug linking (#1603679) Expect the upstream bug ID in the “number” field of GitHub issue objects, not the “id” field (#1824728) Include …
Here’s a brief changelog for this month. Build farm Allow dispatching builds with base images selected based on the pocket and/or using LXD images instead of chroot tarballs where appropriate (#1811677) Code Store bzr-svn’s cache in the import data store Allow project …
Here’s a brief changelog of what we’ve been up to since our last general update. Bugs Parse a few more possible Savane URL formats (#197250) Compare Bugzilla versions properly when checking whether they support the Bugzilla API (part of #1802798) Build farm Configure …
Here’s a brief changelog for this month. Bugs Handle Bugzilla.time() changes in Bugzilla 5.1.1 (#1774838) Cope with the comment author field being renamed to creator in recent Bugzilla versions (#1774838) Build farm Set the hostname and FQDN of LXD containers to match the …
Here’s a brief changelog for this month. Build farm Send fast_cleanup: True to virtualised builds, since they can safely skip the final cleanup steps Code Add spam controls to code review comments (#1680746) Only consider the most recent nine successful builds when …
Once again it’s been a while since we posted a general update, so here’s a changelog-style summary of what we’ve been up to. As usual, this changelog preserves a reasonable amount of technical detail, but I’ve omitted changes that were purely internal …
Here’s a brief changelog for this month. Bugs Export searchTasks for the top-level bugs collection on the webservice, and implement a global bugs feed to go with it (#434244) Code Fix git-to-git code imports on xenial Backport upstream serf commit to fix svn-to-bzr code …
Well, it’s been a while! Since we last posted a general update, the Launchpad team has become part of Canonical’s Online Services department, so some of our efforts have gone into other projects. There’s still plenty happening with Launchpad, though, and …
Here’s what the Launchpad team did in October. Code Ensure that enabled and restricted processors are left untouched when submitting Archive:+edit (#1501519) Describe merge proposal listings in the second person (#991945) Increase Git backend communication timeout to 30 …