Main Inclusion Report for cmake

Requirements

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/c/cmake, available for all supported architectures

2. Rationale:

   • Build dependency of cdrkit

3. Security:

   • One CVE entry (from 2005; untrusted search path vulnerability).

   • No Secunia history.

   • No binaries running as root or suid/sgid.
   • Does not open any port.
   • Source code review:

4. Quality assurance:

   • Package works out of the box without configuration.
   • Package does not ask any debconf questions higher than priority 'normal'.

   • No showstopper Debian bugs.

   • Good maintenance in Debian.

   • Active upstream.

   • Some critical bugs in bug tracker, but those does not seem to be critical for us.

   • Does not deal with exotic hardware which we cannot support.

5. Standards compliance:

   • Meets the FHS, Debian Policy

   • Standard debhelper/cdbs/dbs packaging, standard patch system.

6. Dependencies:

   • All in main.

Reviewers

MartinPitt: approved