Your message dated Mon, 24 Jul 2023 19:36:06 +0000
with message-id <[email protected]>
and subject line Bug#1040007: fixed in libwww-perl 6.72-1
has caused the Debian Bug report #1040007,
regarding spurious runtime dependency on libhttp-cookiejar-perl
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1040007: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040007
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libwww-mechanize-perl
Version: 2.16-1
Severity: wishlist
User: [email protected]
Usertags: origin-ubuntu mantic
Dear maintainers,
The libwww-perl package has recently switched from depending on
libhttp-cookies-perl, to depending on libhttp-cookiejar-perl, with the
upstream rationale that this is "a safer cookie jar".
Are there any plans for libwww-mechanize-perl to also switch?
Downstream in Ubuntu, we libwww-perl, libwww-mechanize-perl, and
libhttp-cookies-perl are all in the "main" component of the archive with
different security committments than "universe" and we have a preference for
not having duplicate implementations of functionality where we can avoid it;
therefore we would prefer to replace libhttp-cookies-perl with
libhttp-cookiejar-perl in main by having both of the reverse-dependencies
updated to use the same implementation, rather than having both in main.
I also see that libwww-mechanize-perl itself depends on libwww-perl, so I
wonder what the interactions are like there if the two libraries are using
separate cookie stores?
Thanks,
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developer https://www.debian.org/
[email protected] [email protected]
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: libwww-perl
Source-Version: 6.72-1
Done: gregor herrmann <[email protected]>
We believe that the bug you reported is fixed in the latest version of
libwww-perl, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
gregor herrmann <[email protected]> (supplier of updated libwww-perl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 24 Jul 2023 21:18:10 +0200
Source: libwww-perl
Architecture: source
Version: 6.72-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <[email protected]>
Changed-By: gregor herrmann <[email protected]>
Closes: 1040007
Changes:
libwww-perl (6.72-1) unstable; urgency=medium
.
* Import upstream version 6.72.
* Remove libhttp-cookiejar-perl from Depends.
It is recommended in the documentation (and used in tests) but not
actually used at runtime, and also waits for Mozilla::PublicSuffix to be
packaged in order to use its full potential.
Thanks to Steve Langasek for the analysis. (Closes: #1040007)
* Drop PR436.patch. Taken from a now merged upstream pull request.
Checksums-Sha1:
dd934eced433b95d793986aa0e70c1f2ad36e394 2963 libwww-perl_6.72-1.dsc
39a1caebe3af25eccc287df151d8c284c4a5ff49 184644 libwww-perl_6.72.orig.tar.gz
1d839a5624e649cfa19103a49764d00800cbafd8 11460 libwww-perl_6.72-1.debian.tar.xz
Checksums-Sha256:
0062cf94a442ad74edc262abafc5b1ef2e4a5be49e547c89dc5e36c86290b0ee 2963
libwww-perl_6.72-1.dsc
e9b8354fd5e20be207afe23ddd584fcd59bf82998dc077decf684ba1dae5a05d 184644
libwww-perl_6.72.orig.tar.gz
a8b8586c0ee15f36aa182749fd45a011772ecc4dd3448c73e8a88485574e5275 11460
libwww-perl_6.72-1.debian.tar.xz
Files:
de236800d50d1424463a28212b09dbc4 2963 perl optional libwww-perl_6.72-1.dsc
ea683625d1c875c583ae8859602bac66 184644 perl optional
libwww-perl_6.72.orig.tar.gz
593d2e1c4d03465fd7d3dfe60c1807e2 11460 perl optional
libwww-perl_6.72-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmS+z2dfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx
RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ
qgah4g/9FWmgcNiOyZqsuuNmC0kjeD0UpwIIrHQ2b3QUxEq6dUlYYiDNKSi1pDlD
VC0Q+Xqho5jh+FBEcrh+0Uh5izh3XGfrv5iEvOJy2IGjW+NdJDNR69XC0zMEV3id
Wa2erRqmMn4RdEnt2rqKXblqdH+s60h99rLYyUWdN0QUg15r4HVxPayS+Z7S3nr5
CIWxNlJ8+CANiMwKN9AziUBn+aSgpIRinFAtMvTG17QA6h/HuSskQ9LbsKLiusVW
COoFhkf675UJA9PrGoWh64+pkjW0pzErxfqaFDQ9oBEk5DiSR/O50lPJMlr2GhTw
/ZpKXtagv5oQOcLP1wuH44oU5XVu5HQdbSx6oj3+BlZtC9JwHtWOjFm/LYwS/lPt
1/8auk9vFvJMEQd5NdXaicLXiloQQ6WoXqYC0byivHZ07XQLWSM73fK2S+bs+Lzt
ZqcPsee13eJueTTILitdIf/Oj+lwYENpClApCTWgOr/ufORJcl8cXC+0lGXEvt5W
d6WoXV/6Tz00090sqXDqCMyaDpRkvfYCs1l/LH+t+oVv42YlwmKvkeQrjnIOKYVs
JVVkk1bv36+3C4ClxMAFmXhMuWCvxr7uriBTCZufjQI7dcM2dZx5V8VttVQhFt2N
k/HozXGl2PeZjhu5gqkl+9UJUh5A9kbSt4cAlAsj027pW2cnVfo=
=nop+
-----END PGP SIGNATURE-----
--- End Message ---
