** Description changed:

  Main inclusion report for libpipeline:
  
  Availability: In natty/universe for all supported architectures.
  
- Rationale: Upcoming (build-)depends from man-db and binfmt-support; code
- split out from man-db.
+ Rationale: (Build-)depends from man-db 2.5.8-1 and an upcoming version
+ of binfmt-support; code split out from man-db.
  
  Security: I wrote libpipeline in response to a series of systemic
  security issues in man-db, not all of which ever received CVEs;
  CVE-2003-0645 is vaguely related.  Since it was written, the only CVE in
  man-db has been CVE-2006-4250 which was a flaw in a routine that used
  the pipeline library, but not a problem in the library itself.  There
  has never been a security issue with the pipeline library in man-db to
  the best of my knowledge.
  
  QA: No configuration.  No bugs in libpipeline in Debian or Ubuntu, and I
  don't think any of the man-db bugs can be attributed to libpipeline
  (though I'll deal with them if that's incorrect, of course).
  libpipeline has a test suite with moderate coverage (the main omissions
  are the pipeline_connect/pipeline_pump family) which is run during the
  build.
  
  Standards compliance: FHS/policy-compliant; debhelper 7 with a few
  simple overrides.  As a bonus, uses hardening-includes. :-)
  
  Maintenance: I expect that we can just keep this synced with Debian.

-- 
[MIR] libpipeline
https://bugs.launchpad.net/bugs/675775
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to