Main Inclusion Report for libytnef

Note: when writing a report this template should be vigorously edited; as a rule of thumb, every individual point should be replaced with a description of the actual situation in the package in question. The purpose of the report is to convey information to the reviewer, so there is no problem with varying the text in the bullet items, or with adding additional information.

Please be informative, and in particular be thorough in investigating and explaining any weaknesses and problems with the package. The purpose of the report is to show to the reviewer that the package has been properly investigated, and to give the reviewer the information from that investigation, for their decision.

Requirements

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/liby/libytnef; available for all supported architectures

2. Rationale:

   • Build dependency of evolution-plugins-experimental (tnef-attachment plugin) 2.12 onwards (Gutsy/Hardy)
   • run-time dependency of evolution-plugins-experimental (tnef-attachment plugin) 2.12 onwards (Gutsy/Hardy)

3. Security:

   • http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=ytnef: no entries

   • http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=libytnef: no entries

   • http://secunia.com/search/?search=libytnef&w=0: no entries

   • http://secunia.com/search/?search=ytnef&w=0: no entries

   • Any binaries running as root or suid/sgid ? Any daemons ? No.
   • Network activity: does it open any port ? Does it handle incoming network data ? No.
   • Any source code review performed ? No full source code review. Package is inherited from the Debian distribution, and has been stable for about 3 years.

4. Quality assurance:

   • In what situations does the package not work out of the box without configuration ? No known instances.
   • Does the package ask any debconf questions higher than priority 'medium' ? No questions asked.

   • http://bugs.debian.org/cgi-bin/pkgreport.cgi?src=libytnef: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=342670 might be a problem, but the Ubuntu package does not have a FTBS issue.

   • http://packages.qa.debian.org/liby/libytnef.html is frenetic/vigorous/calm/dead ? No movement or updates visible since 2005 (time of last source release). Current Debian maintainer is looking for replacement.

   • http://sourceforge.net/projects/ytnef/ is frenetic/vigorous/calm/dead ? Calm to dead. Last update is from 2006.

   • http://sourceforge.net/tracker/?atid=527487&group_id=70352&func=browse: (mention any particularly relevant or critical) http://sourceforge.net/tracker/index.php?func=detail&aid=1883305&group_id=70352&atid=527487 may be an issue on users of Microsoft Exchange 2007.

   • Hardware: Does this package deal with hardware and if so how exotic is it ? not hardware dependant or aware.

5. Standards compliance:

   • FHS, Debian Policy compliance ? Package complies.

   • Debian library packaging guide standards compliance ? Package complies.

   • Packaging system (debhelper/cdbs/dbs) ? Patch system ? Any packaging oddities ? None know.

6. Dependencies:

   • debhelper >= 4.0.0 for build,

   • ${sh-libs:Depends} for execution
   • Are these all in main ? Yes.

7. Background information:

   • package provides libytnef0 and libytnef0-dev, the run-time library and the development files for usage of the library.
   • a related package (ytnef) provides a command-line interface for manipulation of the TNEF files, but is not required: Evolution provides the necessary interface.
   • the tnef-attachment plugin addresses a major inconvenience of Evolution users receiving emails generated by Outlook, with the dreaded 'winmail.dat' file attached. This file is created using the Microsoft Transport Neutral Encapsulation Format (so TNEF), and carries many different goodies, including ICS and others. Evolution upstream has released this attachment on the last stable version, but it has not yet been put available for Ubuntu users due to the lack of a MIR for libytnef
   • What do upstream call this software ? Has it had different names in the past ? Upstream calls it "Yerase's TNEF Stream Reader". No previous known names; released by author.

Reviewers

MIR bug: https://bugs.launchpad.net/ubuntu/+source/libytnef/+bug/199943

hggdh