Bug#887542: [request-tracker-maintainers] Bug#887542: libemail-address-list-perl depends on libemail-address-perl
On Wed, 23 May 2018 19:38:22 +0100, Dominic Hargreaves wrote: > On Wed, May 23, 2018 at 06:57:23PM +0200, gregor herrmann wrote: > > On Sun, 20 May 2018 12:41:57 +0200, Pali Rohár wrote: > > > Perl module Email::Address::List is probably not possible to fix. But > > > perl module Email::Address::XS already provides methods for parsing > > > list/groups of email addresses -- functionality which is provided by > > > Email::Address::List. Therefore applications which depends on > > > Email::Address::List can be rewritten to use Email::Address::XS. > > > > libemail-address-list-perl has one reverse dependency: > > request-tracker4. > > > The bug about that is here: > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887551 That's about libemail-address-perl directly; I just checked the possibility to remove libemail-address-list-perl (because of its dependency on libemail-address-perl); but yeah, in the end it boils down to the same topic. > It looks like a lot of other rdep must have gone away since I wrote > the last update on that mail. Then again, as long as it is marked > deprecated, perhaps the cost of keeping it in Debian until that bug > is fixed is not that high? Ack, I'm in no specific hurry, just going through Pali's bug reports and looking at the situation. Cheers, gregor -- .''`. https://info.comodo.priv.at -- Debian Developer https://www.debian.org : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06 `. `' Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe `- NP: Tony Joe White: Selena signature.asc Description: Digital Signature
Bug#887551: [request-tracker-maintainers] Bug#887542: libemail-address-list-perl depends on libemail-address-perl
On Wed, May 23, 2018 at 06:57:23PM +0200, gregor herrmann wrote: > On Sun, 20 May 2018 12:41:57 +0200, Pali Rohár wrote: > > > Perl module Email::Address::List is probably not possible to fix. But > > perl module Email::Address::XS already provides methods for parsing > > list/groups of email addresses -- functionality which is provided by > > Email::Address::List. Therefore applications which depends on > > Email::Address::List can be rewritten to use Email::Address::XS. > > Thanks for this update. > > libemail-address-list-perl has one reverse dependency: > request-tracker4. > > Cc'ing the maintainers. The bug about that is here: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887551 It looks like a lot of other rdep must have gone away since I wrote the last update on that mail. Then again, as long as it is marked deprecated, perhaps the cost of keeping it in Debian until that bug is fixed is not that high? Dominic.
Bug#887542: libemail-address-list-perl depends on libemail-address-perl
On Sun, 20 May 2018 12:41:57 +0200, Pali Rohár wrote: > Perl module Email::Address::List is probably not possible to fix. But > perl module Email::Address::XS already provides methods for parsing > list/groups of email addresses -- functionality which is provided by > Email::Address::List. Therefore applications which depends on > Email::Address::List can be rewritten to use Email::Address::XS. Thanks for this update. libemail-address-list-perl has one reverse dependency: request-tracker4. Cc'ing the maintainers. Cheers, gregor -- .''`. https://info.comodo.priv.at -- Debian Developer https://www.debian.org : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06 `. `' Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe `- NP: Rolling Stones: Can't Believe signature.asc Description: Digital Signature
Bug#887542: libemail-address-list-perl depends on libemail-address-perl
Perl module Email::Address::List is probably not possible to fix. But perl module Email::Address::XS already provides methods for parsing list/groups of email addresses -- functionality which is provided by Email::Address::List. Therefore applications which depends on Email::Address::List can be rewritten to use Email::Address::XS. -- Pali Rohár pali.ro...@gmail.com signature.asc Description: PGP signature
Bug#887542: libemail-address-list-perl depends on libemail-address-perl
Package: libemail-address-list-perl Version: 0.05-1 Severity: wishlist Hi! Package libemail-address-list-perl depends on libemail-address-perl which is vulnerable to CVE-2015-7686, see bug #868170. libemail-address-perl provides perl module Email::Address which is now unmaintained. There is a new perl module Email::Address::XS which is API compatible replacement for Email::Address and is available in libemail-address-xs-perl. Please port libemail-address-list-perl package to use libemail-address-xs-perl. If you need help with porting let me know. -- Pali Rohár pali.ro...@gmail.com signature.asc Description: PGP signature
