pkg-perl-maintainers team mailing list archive

[Mathieu Trudel-Lapierre <mathieu.tl@xxxxxxxxx>]

All these have a very active security history, it would be good to have
an official buy-in from the Security team. They will also benefit from a
security review.

I'm concerned by percona-xtrabackup, it does not seem well maintained in
Debian, which increases the work for us. It is not up to date in the
Ubuntu archive either. There's also a patch for mips assembler, which
doesn't fill me with confidence.

percona-xtradb-cluster has had a lot of CVEs in the past. It also seems
to be slightly out of date in the Ubuntu archive, and newer versions are
not at all in Debian.

libdbd-mysql-perl is in a set of packages that we typically consider to
be well-maintained in Debian, which is a good sign. Tests exists and are
run at build time, that's good.

Are there any plans, any steps to move away from percona software, which
seems to be relatively poorly maintained?

** Changed in: libdbd-mysql-perl (Ubuntu)
     Assignee: Mathieu Trudel-Lapierre (cyphermox) => Ubuntu Security Team (ubuntu-security)

** Changed in: percona-xtrabackup (Ubuntu)
     Assignee: Mathieu Trudel-Lapierre (cyphermox) => Ubuntu Security Team (ubuntu-security)

** Changed in: percona-xtradb-cluster-5.7 (Ubuntu)
     Assignee: Mathieu Trudel-Lapierre (cyphermox) => Ubuntu Security Team (ubuntu-security)

** Changed in: percona-xtrabackup (Ubuntu)
       Status: New => Incomplete

** Changed in: percona-xtradb-cluster-5.7 (Ubuntu)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Debian
Perl Group, which is subscribed to libdbd-mysql-perl in Ubuntu.
https://bugs.launchpad.net/bugs/1768119

Title:
  [MIR] percona-xtradb-cluster-5.7, percona-xtrabackup, libdbd-mysql-
  perl

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libdbd-mysql-perl/+bug/1768119/+subscriptions