Activity log for bug #1781529

Date Who What changed Old value New value Message
2018-07-13 05:44:06 Lars Tangvald bug added bug
2018-07-13 05:44:39 Lars Tangvald bug task added mecab-ipadic (Ubuntu)
2018-07-13 05:45:02 Lars Tangvald bug added subscriber MIR approval team
2018-07-13 05:45:54 Lars Tangvald description Note: Both mecab and MySQL have a dependency on mecab-ipadic, so the request is for both mecab and mecab-ipadic [Availability] mecab and mecab-ipadic are in universe/misc (they are part of the same piece of software with upstream source https://github.com/taku910/mecab, but separate source packages) [Rationale] Mecab is used by MySQL for Japanese text parsing (https://dev.mysql.com/doc/refman/8.0/en/fulltext-search-mecab.html), and is a build-dependency for Upstream/Debian MySQL packages. Since it is currently in universe, we maintain a diff for Ubuntu that removes this dependency (also removing the plugin). Including mecab and mecab-ipadic in main would let us include the text parsing features and allow us to drop the diff between Debian and Ubuntu for MySQL. The package is a simple language parsing tool that has very few changes (but packaging is kept up to date by the mantainers). [Security] - Only found CVE was http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3231 (affecting versions older than 0.96). This was patched in 0.95 package before version update. - No security relevant binaries [Quality assurance] - Packages are very simple, being just simple text parser util and csv files. - Only outstanding bug is https://bugs.launchpad.net/ubuntu/+source/mecab/+bug/1469406 - Package itself hasn't changed since 2013, but packaging is kept up-to-date by maintainers - Package is missing d/watch and|or d/README.source [Dependencies] mecab depends on mecab-ipadic. Other dependencies are in main [Standards compliance] No issues reported by lintian, and package is synced directly from Debian. [Maintenance] Both packages are maintained by Natural Language Processing (Japanese) <team+pkg-nlp-ja@tracker.debian.org> Last few years have had little maintainer work except for keeping packaging up-to-date (new standards versions, vcs urls etc.). [Background information] - The mecab package provides Japanese text parsing (through library or stdin interface) - mecab-ipadic is an international phonetic alphabet (ipa) dictionary for mecab Note: Both mecab and MySQL have a dependency on mecab-ipadic, so the request is for both mecab and mecab-ipadic [Availability] mecab and mecab-ipadic are in universe/misc (they are part of the same piece of software with upstream source https://github.com/taku910/mecab, but separate source packages) [Rationale] Mecab is used by MySQL for Japanese text parsing (https://dev.mysql.com/doc/refman/8.0/en/fulltext-search-mecab.html), and is a build-dependency for Upstream/Debian MySQL packages. Since it is currently in universe, we maintain a diff for Ubuntu that removes this dependency (also removing the plugin). Including mecab and mecab-ipadic in main would let us include the text parsing features and allow us to drop the diff between Debian and Ubuntu for MySQL. The package is a simple language parsing tool that has very few changes (but packaging is kept up to date by the mantainers). [Security] - Only found CVE was http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3231 (affecting versions older than 0.96). This was patched in 0.95 package before version update. - No security relevant binaries [Quality assurance] - The packages are very simple, being just simple text parser util and csv files. - Only outstanding bug is https://bugs.launchpad.net/ubuntu/+source/mecab/+bug/1469406 - Package itself hasn't changed since 2013, but packaging is kept up-to-date by maintainers - Package is missing d/watch and|or d/README.source [Dependencies] mecab depends on mecab-ipadic. Other dependencies are in main [Standards compliance] No issues reported by lintian, and package is synced directly from Debian. [Maintenance] Both packages are maintained by Natural Language Processing (Japanese) <team+pkg-nlp-ja@tracker.debian.org> Last few years have had little maintainer work except for keeping packaging up-to-date (new standards versions, vcs urls etc.). [Background information] - The mecab package provides Japanese text parsing (through library or stdin interface) - mecab-ipadic is an international phonetic alphabet (ipa) dictionary for mecab
2018-07-15 23:02:32 Robie Basak bug added subscriber Robie Basak
2018-07-26 19:23:41 Mathieu Trudel-Lapierre bug added subscriber Canonical Server Team
2018-07-26 19:38:10 Mathieu Trudel-Lapierre mecab-ipadic (Ubuntu): status New Fix Committed
2018-07-26 19:46:18 Mathieu Trudel-Lapierre mecab (Ubuntu): assignee Ubuntu Security Team (ubuntu-security)
2018-09-11 05:41:01 Steve Langasek mecab (Ubuntu): importance Undecided High
2018-10-12 03:54:01 Seth Arnold cve linked 2007-3231
2018-10-12 03:54:08 Seth Arnold bug added subscriber Seth Arnold
2018-10-12 03:54:12 Seth Arnold mecab (Ubuntu): assignee Ubuntu Security Team (ubuntu-security)
2018-10-12 06:04:05 Christian Ehrhardt  mecab (Ubuntu): status New In Progress
2018-11-16 17:39:39 Steve Langasek mecab (Ubuntu): status In Progress Fix Released
2019-02-01 07:03:11 Steve Langasek mecab-ipadic (Ubuntu): status Fix Committed Fix Released