Ubuntu
consul package

Remove consul from lunar

Bug #2006724 reported by Shengjing Zhu
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
consul (Ubuntu)
Fix Released
Undecided
Łukasz Zemczak
consulfs (Ubuntu)
Fix Released
Undecided
Łukasz Zemczak

Bug Description

The consul package will be ftbfs with go-1.20, I probably can patch out the failed test.

But the question is whether we should remove it from Ubuntu entirely. In Debian we have lost interests to maintain it. No one wants to package the new version and fix CVEs.

The current version 1.8.7 is released on December 10, 2020, which is very old and at least has 5 open CVEs.

Shengjing Zhu (zhsj)
summary: - Remove from lunar
+ Remove consul from lunar
Revision history for this message
Łukasz Zemczak (sil2100) wrote :

Hello Shengjing! I had a quick look and it seems like consul has one reverse-build-dependency:

$ reverse-depends -b src:consul
Reverse-Testsuite-Triggers
* patroni (for consul)

Reverse-Build-Depends
* consulfs (for golang-github-hashicorp-consul-dev)

So we'd have to remove consulfs as well. Is that fine? I see consulfs has been also removed from Debian testing? We'd need to update the bug description to remove both.

Revision history for this message
Shengjing Zhu (zhsj) wrote :

Yes. consulfs should be removed together. Either is in abandoned status in Debian.

Łukasz Zemczak (sil2100)
Changed in consul (Ubuntu):
assignee: nobody → Łukasz Zemczak (sil2100)
Changed in consulfs (Ubuntu):
assignee: nobody → Łukasz Zemczak (sil2100)
Revision history for this message
Steve Langasek (vorlon) wrote :

Removing packages from lunar:
 consulfs 0.2.1-2build1 in lunar
  consulfs 0.2.1-2build1 in lunar amd64
  consulfs 0.2.1-2build1 in lunar arm64
  consulfs 0.2.1-2build1 in lunar armhf
  consulfs 0.2.1-2build1 in lunar ppc64el
  consulfs 0.2.1-2build1 in lunar riscv64
  consulfs 0.2.1-2build1 in lunar s390x
Comment: Removed from Debian testing, depends on consul which has security vulnerabilities; Debian bug #1017982, LP: #2006724
1 package successfully removed.

Changed in consulfs (Ubuntu):
status: New → Fix Released
Revision history for this message
Steve Langasek (vorlon) wrote :

Removing packages from lunar:
 consul 1.8.7+dfsg1-6 in lunar
  consul 1.8.7+dfsg1-6 in lunar amd64
  consul 1.8.7+dfsg1-6 in lunar arm64
  consul 1.8.7+dfsg1-6 in lunar armhf
  consul 1.8.7+dfsg1-6 in lunar ppc64el
  consul 1.8.7+dfsg1-6 in lunar s390x
  golang-github-hashicorp-consul-dev 1.8.7+dfsg1-6 in lunar amd64
  golang-github-hashicorp-consul-dev 1.8.7+dfsg1-6 in lunar arm64
  golang-github-hashicorp-consul-dev 1.8.7+dfsg1-6 in lunar armhf
  golang-github-hashicorp-consul-dev 1.8.7+dfsg1-6 in lunar i386
  golang-github-hashicorp-consul-dev 1.8.7+dfsg1-6 in lunar ppc64el
  golang-github-hashicorp-consul-dev 1.8.7+dfsg1-6 in lunar riscv64
  golang-github-hashicorp-consul-dev 1.8.7+dfsg1-6 in lunar s390x
Comment: Removed from Debian testing, has security vulnerabilities; Debian bug #1017982, LP: #2006724
1 package successfully removed.

Changed in consul (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.