[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1001178: marked as done (ITP: liblib-relative-perl -- In Perl scripts, Add paths relative to the current file to @INC)



Your message dated Sat, 11 Dec 2021 19:00:15 +0000
with message-id <E1mw7bT-0007bL-F5@fasolo.debian.org>
and subject line Bug#1001178: fixed in liblib-relative-perl 1.000-1
has caused the Debian Bug report #1001178,
regarding ITP: liblib-relative-perl -- In Perl scripts, Add paths relative to the current file to @INC
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1001178: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001178
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: wnpp
Severity: wishlist
X-Debbugs-CC: debian-perl@lists.debian.org

* Package name    : liblib-relative-perl
  Version         : 1.000
  Upstream Author : Dan Book <dbook@cpan.org>
* URL             : https://metacpan.org/pod/lib::relative
* License         : Artistic-2.0
  Programming Lang: Perl
  Description     : In Perl scripts, Add paths relative to the current
file to @INC

Adding a path to @INC to load modules from a local directory may seem
simple, but has a few common pitfalls to be aware of:

Directly adding a relative path to @INC means that any later code that
changes the current working directory will change where modules are
loaded from. This applies to the . path that used to be in @INC by
default until perl 5.26.0, or a relative path added in code like use
lib 'path/to/lib', and may be a vulnerability if such a location is
not supposed to be writable. Additionally, the commonly used FindBin
module relies on interpreter state and the path to the original script
invoked by the perl interpreter, sometimes requiring workarounds in
uncommon cases like generated or embedded code.

This module proposes a more straightforward method: take a path
relative to the current file, absolutize it, and add it to @INC.

The more straightforward name librelative-perl was already taken. [1]
Perhaps the name proposed here is better for consistency, even though
it looks awkward.

Lintian presently uses a series of tedious work-arounds to get the
same functionality.
[2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17]
Thanks!

Kind regards,
Felix Lechner

[1] https://tracker.debian.org/pkg/librelative-perl
[2] https://salsa.debian.org/lintian/lintian/-/blob/master/bin/lintian#L30-38
[3] https://salsa.debian.org/lintian/lintian/-/blob/master/bin/lintian-annotate-hints#L30-38
[4] https://salsa.debian.org/lintian/lintian/-/blob/master/bin/lintian-explain-tags#L30-38
[5] https://salsa.debian.org/lintian/lintian/-/blob/master/bin/spellintian#L28-37
[6] https://salsa.debian.org/lintian/lintian/-/blob/master/private/generate-tag-summary#L9-18
[7] https://salsa.debian.org/lintian/lintian/-/blob/master/private/hintadjust#L31-40
[8] https://salsa.debian.org/lintian/lintian/-/blob/master/private/hintdiff#L31-40
[9] https://salsa.debian.org/lintian/lintian/-/blob/master/private/hintextract#L31-39
[10] https://salsa.debian.org/lintian/lintian/-/blob/master/private/hintsort#L31-40
[11] https://salsa.debian.org/lintian/lintian/-/blob/master/private/latest-policy-version#L31-40
[12] https://salsa.debian.org/lintian/lintian/-/blob/master/private/refresh-data#L27-35
[13] https://salsa.debian.org/lintian/lintian/-/blob/master/private/refresh-locale-codes#L26-35
[14] https://salsa.debian.org/lintian/lintian/-/blob/master/private/refresh-manual-refs#L32-41
[15] https://salsa.debian.org/lintian/lintian/-/blob/master/private/runtests#L36-44
[16] https://salsa.debian.org/lintian/lintian/-/blob/master/private/tag-stats#L17-26
[17] https://salsa.debian.org/lintian/lintian/-/blob/master/private/generate-profiles#L10-18

--- End Message ---
--- Begin Message ---
Source: liblib-relative-perl
Source-Version: 1.000-1
Done: gregor herrmann <gregoa@debian.org>

We believe that the bug you reported is fixed in the latest version of
liblib-relative-perl, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1001178@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
gregor herrmann <gregoa@debian.org> (supplier of updated liblib-relative-perl package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 05 Dec 2021 21:01:14 +0100
Source: liblib-relative-perl
Binary: liblib-relative-perl
Architecture: source all
Version: 1.000-1
Distribution: unstable
Urgency: low
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: gregor herrmann <gregoa@debian.org>
Description:
 liblib-relative-perl - module to add paths relative to the current file to @INC
Closes: 1001178
Changes:
 liblib-relative-perl (1.000-1) unstable; urgency=low
 .
   * Initial release (closes: #1001178).
Checksums-Sha1:
 dddf215c3b9066a3eb9e3b699b65a9b06633d97e 2295 liblib-relative-perl_1.000-1.dsc
 5cc93b8330c90d63ac2bb61ba1a00a116813d6dc 16156 liblib-relative-perl_1.000.orig.tar.gz
 00356ef645a7d1914dfd45fa01a297c0f6c26ae6 4760 liblib-relative-perl_1.000-1.debian.tar.xz
 13da87d60069456933bb1ecc343ea5a0bc9f5541 11436 liblib-relative-perl_1.000-1_all.deb
 6d71e418de20d74c194965e5ded6667c36fdb6af 5903 liblib-relative-perl_1.000-1_amd64.buildinfo
Checksums-Sha256:
 cc3a40a150ac60c6b05e4a7ceaa41eaf967c81d05b2819f9179216354516b5a5 2295 liblib-relative-perl_1.000-1.dsc
 dfe0c7005fd8bddd25a7e8c2504b0fade162c74ca71b4f7acb7e8e76106d6cd7 16156 liblib-relative-perl_1.000.orig.tar.gz
 c4ec38ac448957b80def4cb548eb2f50e0524898638b48ac3f08388186b9d4f7 4760 liblib-relative-perl_1.000-1.debian.tar.xz
 4c2dcbf8016142f39f69372510440e7861d3d81475e3219a36cb45652c680960 11436 liblib-relative-perl_1.000-1_all.deb
 b370d4a16842cc3639f0a4f57b3e5e4ad983db390bba8fdcd1ba167d93b9f4cf 5903 liblib-relative-perl_1.000-1_amd64.buildinfo
Files:
 fbd7048b40524626eaeadbd1d75f9d34 2295 perl optional liblib-relative-perl_1.000-1.dsc
 9515013d11bd617b518a70dd69cc05e9 16156 perl optional liblib-relative-perl_1.000.orig.tar.gz
 155992b6b307ed24f73da40a338923a6 4760 perl optional liblib-relative-perl_1.000-1.debian.tar.xz
 2f1424552514f1fa12f2d77d0b8400f3 11436 perl optional liblib-relative-perl_1.000-1_all.deb
 cc370d8de1fc1f05e3293df542f73889 5903 perl optional liblib-relative-perl_1.000-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmGtGs9fFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx
RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ
qgYwqBAAns6a/CELPaeJNopkcA5t6ccJ3qvau/scL57I1PN2xdfY1bjU1YDM4Vof
4BfcLvCF+SmMZLy30yei4sDtzYFwwlyEl1S7R+yx2QzWDwSymUbXC1sxOp4lwFU4
dTBF2UGpEXOa81HQzzAnF3eIGAhNqas61HN/ne03yZn3TIY02hiRO9bk/dW6Uf7F
l6Vi7mnp160o+miEcKItFI261agIJ6IgHoAK9ISpiajYZCau85iW91dmOJGp/b2T
2Sxvi0ms9axbOFDT9qmPhV2jTzOqIKCP9SJa04JJIrGniuX8x21cmhwNRN5wRNJB
rVhC2+A+W/+wxuuwkDmoe8HA6QP4yRNQsR9omSLQ06nhBF06T9xlo7tLb2DD2gO1
veYHmwpGS4EujmOxXuWWKh6zTBOQWJDJCI1InNhf3/r5B+eTidv+sRdgbJxhqkIt
QuxBWmP39NBa80dJUFCJQi1Ji4Z3rLH8RffMeFyw9lqXqOegiKXl1h6dXbxEYrQv
HMk3f/pe6EcZWQ6y/OZr14+fIHp7/sqeEjjQvZdRKxah++rBuYnT0jx+N0KI8LqF
uAluVDgyQoamp/vrAjJv5nXqPM+bwvoeXUdvmG6jSxNBvvgmsYbpmSrx8ffOTGW4
dBN3j5656JIrkqlrIAXSn4EhYdqPoijoXDzmqKcUH7dWEG8QmjQ=
=fzTD
-----END PGP SIGNATURE-----

--- End Message ---

Reply to: