[MIR] mecab
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
mecab (Ubuntu) |
Fix Released
|
High
|
Unassigned | ||
mecab-ipadic (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
Note: Both mecab and MySQL have a dependency on mecab-ipadic, so the request is for both mecab and mecab-ipadic
[Availability]
mecab and mecab-ipadic are in universe/misc (they are part of the same piece of software with upstream source https:/
[Rationale]
Mecab is used by MySQL for Japanese text parsing (https:/
The package is a simple language parsing tool that has very few changes (but packaging is kept up to date by the mantainers).
[Security]
- Only found CVE was http://
- No security relevant binaries
[Quality assurance]
- The packages are very simple, being just simple text parser util and csv files.
- Only outstanding bug is https:/
- Package itself hasn't changed since 2013, but packaging is kept up-to-date by maintainers
- Package is missing d/watch and|or d/README.source
[Dependencies]
mecab depends on mecab-ipadic. Other dependencies are in main
[Standards compliance]
No issues reported by lintian, and package is synced directly from Debian.
[Maintenance]
Both packages are maintained by Natural Language Processing (Japanese) <email address hidden>
Last few years have had little maintainer work except for keeping packaging up-to-date (new standards versions, vcs urls etc.).
[Background information]
- The mecab package provides Japanese text parsing (through library or stdin interface)
- mecab-ipadic is an international phonetic alphabet (ipa) dictionary for mecab
CVE References
description: | updated |
These packages appear to be missing a subscribing team, as is required for MIRs.
Have you discussed including these packages in main with the server team? I've subscribed them to this bug to have their opinion on whether they are okay with the added effort of looking after mecab, mecab-ipadic, considering it could reduce the work on mysql packages.