Launchpad.net

Summary Mohamed Alaa reported that Launchpad’s Bing site search implementation had a cross-site-scripting vulnerability.  This was introduced on 2018-03-29, and fixed on 2018-04-10.  We have not found any evidence of this bug being actively exploited ... [More] by attackers; the rest of this post is an explanation of the problem for the sake of transparency. Details Some […] [Less]

Here’s a brief changelog for this month. Bugs Export searchTasks for the top-level bugs collection on the webservice, and implement a global bugs feed to go with it (#434244) Code Fix git-to-git code imports on xenial Backport upstream serf commit to fix svn-to-bzr code imports on xenial (#1690613) Fix crash when unlinking a bug from […]

Here’s a brief changelog for this month. Bugs Export searchTasks for the top-level bugs collection on the webservice, and implement a global bugs feed to go with it (#434244) Code Fix git-to-git code imports on xenial Backport upstream serf commit to fix svn-to-bzr code imports on xenial (#1690613) Fix crash when unlinking a bug from […]

Well, it’s been a while!  Since we last posted a general update, the Launchpad team has become part of Canonical’s Online Services department, so some of our efforts have gone into other projects.  There’s still plenty happening with Launchpad, though, and here’s a changelog-style summary of what we’ve been up to. Answers Lock down question […]

Launchpad has had Git-to-Bazaar code imports since 2009, along with imports from a few other systems.  These form part of Launchpad’s original mission to keep track of free software, regardless of where it’s hosted.  They’re also very useful for ... [More] automatically building other artifacts, such as source package recipes or snap packages, from code hosted elsewhere.  […] [Less]

If you are a member of Launchpad’s beta testers team, you’ll now have a slightly different interface for selecting source packages in the Launchpad web interface, and we’d like to know if it goes wrong for you. One of our longer-standing bugs has been #42298 (“package picker lists unpublished (invalid) packages”).  When selecting a package […]

We just rolled out a new feature for Launchpad’s Git repository hosting: Git-based merge proposals can now be linked to Launchpad bugs.  This can be done manually from the web UI for the merge proposal, but normally you should just mention the Launchpad bug in the commit message of one of the commits you want […]

If you are a member of Launchpad’s beta testers team, you can now try out Git-based recipes.  These work very similarly to the Bazaar-based recipes that Launchpad has supported for a long time, with a few minor changes to handle differences in the underlying version control system: the main thing you’ll probably notice is that […]

If you are a member of Launchpad’s beta testers team, you can now try out Git-based recipes.  These work very similarly to the Bazaar-based recipes that Launchpad has supported for a long time, with a few minor changes to handle differences in the underlying version control system: the main thing you’ll probably notice is that […]

Here’s what the Launchpad team did in October. Code Ensure that enabled and restricted processors are left untouched when submitting Archive:+edit (#1501519) Describe merge proposal listings in the second person (#991945) Increase Git backend ... [More] communication timeout to 30 seconds (from 5), as detecting merges can be quite slow on large repositories (#1502748) Link directly to […] [Less]