Source: transmission
Version: 4.0.6+dfsg-1

transmission-gtk is included in Ubuntu Desktop's default install
(specifically the expanded install option). This means that
transmission-gtk is in Ubuntu main and all its dependencies must be in
Ubuntu main instead of in Ubuntu universe.

libb64 is in Ubuntu universe. After an initial review, I determined
that libb64 does not seem like a good candidate for Ubuntu's Main
Inclusion process [1]. Therefore, I will need to re-vendor libb64
inside the transmission package. If Debian does the same, then it
would be possible for Debian and Ubuntu to share the same packaging,
allowing package improvements to more quickly reach Ubuntu during the
part of Ubuntu's development cycle when automatic sync is enabled.

Specifically:
- libb64 has been unmaintained since 2013
https://sourceforge.net/p/libb64/git/commit_browser
- libb64 has several open bugs, some of which have security implications
https://sourceforge.net/p/libb64/bugs/
- libb64 is missing a pkgconfig file which is a relatively simple
standard way for other software to use libb64
https://launchpad.net/bugs/1534293
- The Debian packaging is not using simple dh rules. The packaging
seems to otherwise be fairly modern but it's more complicated than
typical Debian packages.
https://salsa.debian.org/alteholz/libb64/-/blob/master/debian/rules

Reference
--------------
[1] https://github.com/canonical/ubuntu-mir

Thank you,
Jeremy Bícha

Reply via email to