Bug#899110: perl: Provides entries in old versions of perl-modules-5.xx and libperl5.xx erroneously satisfy dependencies

Niko Tyni ntyni at debian.org
Sat May 19 16:09:08 BST 2018


On Sat, May 19, 2018 at 12:43:11PM +0300, Niko Tyni wrote:
> Package: perl
> Version: 5.26.2-4
> Severity: important
> User: debian-perl at lists.debian.org
> Usertags: hh2018

> The fix is probably to move the Provides (and probably Replaces and
> Breaks too?) to the perl binary package, which pulls in libperl5.xx
> and perl-modules-5.xx. I'm slightly worried about upgrades from stretch,
> but assuming there are no other dual life module changes than B::Debug
> for buster, the effect is probably minor.

On the other hand, it's possible to get the system in a state where
libperl5.26 and perl-modules-5.26 are installed but perl is not.
If we move the Breaks into perl, it becomes possible to have an older
version of a separate module package override a newer one in the standard
library (libperl5.26 or perl-modules-5.26), which is undesirable.

I'm therefore inclined to move just the Provides.
-- 
Niko Tyni   ntyni at debian.org




More information about the Perl-maintainers mailing list