Main Inclusion Report for libnet-dns-perl

Requirements

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/libn/libnet-dns-perl/; available for all architectures.

2. Rationale:

   • Build dependency of spamassassin and libmail-dkim-perl (both spec'ed for Intrepid):
     • ServerAmavisdDKIMSpec

     • ClamavSpamassassinInMain

3. Security:

   • CVE entries: Three CVEs in 2007, none since. (note: I did the patches for these and they weren't very hard to deal with - upstream responded quickly to the issues).

   • Secunia history: Same as Mitre

   • Any binaries running as root or suid/sgid ? No Any daemons ? No
   • Network activity: does it open any port ? Yes (it will get answers to queries) Does it handle incoming network data ? Yes.
   • Does it directly (not through a library) process binary (video, audio, etc) or structured (PDF, etc) data ? No.
   • Any source code review performed ? (The approver will do a quick and shallow check.) No.

4. Quality assurance:

   • In what situations does the package not work out of the box without configuration ? None
   • Does the package ask any debconf questions higher than priority 'medium' ? No.

   • Debian bugs: A few interesting bugs, but none confirmed against newer versions.

   • Maintenance in Debian is vigorous.

   • http://search.cpan.org/~olaf/Net-DNS-0.63/lib/Net/DNS.pm is active.

   • http://rt.cpan.org/Public/Dist/Display.html?Name=Net-DNS: Nothing critical.

   • Hardware: Does this package deal with hardware and if so how exotic is it ? No.
   • Is there a test suite in the upstream source or packaging ? Yes. Is it enabled to run in the build ? Yes.

5. Standards compliance:

   • FHS, Debian Policy compliance ? Yes.

   • Debian library packaging guide standards compliance ? N/A.

   • Packaging system (debhelper/cdbs/dbs) ? debhelper Patch system ? dpatch Any packaging oddities ? Standard perl module.

6. Dependencies:

   • libnet-dns-perl
     • Depends: libc6
     • Depends: libdigest-hmac-perl

     • Depends: <libmime-base64-perl> perl

     • Depends: libnet-ip-perl
     • Depends: perl

     • Depends: <perlapi-5.10.0> perl-base

   • Are these all in main ? No.

     • MainInclusionReportLibnetIpPerl

7. Background information:

   • The general purpose and context of the package should be clear from the package's debian/control file. If it isn't then please explain.
   • What do upstream call this software ? Net::DNS Has it had different names in the past ? No.

Reviewers

MIR bug: https://bugs.launchpad.net/ubuntu/+source/libnet-dns-perl/+bug/243301

Author: ScottKitterman