I reviewed libscalar-list-utils-perl 1:1.53-1 as checked into focal. This shouldn't be considered a full audit but rather a quick gauge of maintainability. The guts of this perl module is in ListUtil.xs which is turned into C code. I did run that portion of the build through coverity, which did not complain about anything I found to be concerning.
libscalar-list-utils-perl is a replacement for the default List::Util distribution that is built into perl core and adds some additional subroutines. - CVE History: - no CVEs found - Build-Depends: - perl - pre/post inst/rm scripts? - not applicable - init scripts? - not applicable - systemd units? - not applicable - dbus services? - not applicable - setuid binaries? - not applicable - binaries in PATH? - not applicable - sudo fragments? - not applicable - udev rules? - not applicable - unit tests / autopkgtests? - there is a fairly comprehensive test suite - cron jobs? - not applicable - Build logs: - Everything looks fine - Processes spawned? - not applicable - Memory management? - I do not see anything that looks problematic - File IO? - not applicable - Logging? - not applicable - Environment variable usage? - not applicable - Use of privileged functions? - not applicable - Use of cryptography / random number sources etc? - not applicable - Use of temp files? - not applicable - Use of networking? - not applicable - Use of WebKit? - not applicable - Use of PolicyKit? - not applicable - Any significant cppcheck results? - not applicable - Any significant Coverity results? - not applicable Security team ACK for promoting libscalar-list-utils-perl to main. ** Changed in: libscalar-list-utils-perl (Ubuntu) Assignee: Ubuntu Security Team (ubuntu-security) => (unassigned) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1854849 Title: [MIR] libscalar-list-utils-perl To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libscalar-list-utils-perl/+bug/1854849/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs