pkg-perl-maintainers team mailing list archive

[Łukasz Zemczak <1907422@xxxxxxxxxxxxxxxxxx>]

** Description changed:

+ [Availability]
+ 
+ The package and its dependencies are already in universe.
+ 
+ [Rationale]
+ 
+ needrestart is a very useful maintainance tool to track any processes
+ that are out of date, and when possible offer to restart them. This
+ tool is very useful to check if sessions need to be restarted,
+ workloads need restarting, user & system daemons need restarting. But
+ also, whether the restarts were successful.
+ 
+ [Security]
+ 
+ The needrestart package is around in Ubuntu and Debian since many years
+ (first upload in Debian in 2013). Since then, there have been no CVE's
+ or serious security vulnerabilities reported (+ no mention of any
+ security related fixes in the changelog). It installs the needrestart
+ perl script into /usr/sbin/, no setuid binaries present.
+ 
+ As for its runtime dependencies:
+ 
+ - libintl-perl: in 2016 CVE-2016-1238 has been addressed
+ - libmodule-find-perl: none
+ - libmodule-scandeps-perl: none
+ - libsort-naturally-perl: none
+ 
+ (all the dependencies are perl modules, so no security-interesting
+ binaries/configurations are being installed)
+ 
+ [Quality assurance]
+ 
+ TODO
+ 
+ [Dependencies]
+ 
+ All dependencies are either already in main or are part of this MIR.
+ There are a few additional universe build-dependencies (and build-
+ dependencies of the dependencies) but those have been confirmed to only
+ be used during the build and not result in any other universe runtime
+ dependencies.
+ 
+ [Standards compliance]
+ 
+ FHS and Debian Policy compliant.
+ 
+ [Maintenance]
+ 
+ The Ubuntu Foundations Team will be subscribed to the package and its
+ relevant dependencies. All the packages seem to be actively maintained
+ in Debian and so far no additional Ubuntu changes were required.
+ 
+ [Background information]
+ 
+ TODO
+ 
+ [Original Description]
+ 
  This is a stub for coming MIR activity.
  Since this was already seeded [1] it regularly shows up as component mismatch now.
  
  Therefore we want to raise this from "status is unknown" to "nothing
  done yet, but documented as that" :-)
  
  The bug status will be incomplete util properly prepared.
  
  This covers needrestart and it's dependencies:
  - libintl-perl
  - libmodule-find-perl
  - libmodule-scandeps-perl
  - libsort-naturally-perl
  
  [1]: https://git.launchpad.net/~ubuntu-core-dev/ubuntu-
  seeds/+git/ubuntu/commit/?id=ed7003d4c9a0be80e8a17699baa858b2bf1ce06b

-- 
You received this bug notification because you are a member of Debian
Perl Group, which is subscribed to libmodule-scandeps-perl in Ubuntu.
https://bugs.launchpad.net/bugs/1907422

Title:
  [MIR] needrestart + dependencies

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libintl-perl/+bug/1907422/+subscriptions