block 1073005 by 1073203
thanks

Hi,

Thanks for raising this to our attention.

[...]

> - libb64 has been unmaintained since 2013
> https://sourceforge.net/p/libb64/git/commit_browser
> - libb64 has several open bugs, some of which have security implications
> https://sourceforge.net/p/libb64/bugs/
> - libb64 is missing a pkgconfig file which is a relatively simple
> standard way for other software to use libb64
> https://launchpad.net/bugs/1534293
> - The Debian packaging is not using simple dh rules. The packaging
> seems to otherwise be fairly modern but it's more complicated than
> typical Debian packages.
> https://salsa.debian.org/alteholz/libb64/-/blob/master/debian/rules

Regarding those valid points, because there is not reason to have the same
source in multiple packages, there are only 2 paths compliant with the Debian
policy:

    1) Fix those points in src:libb64 for transmission and all rdepends
    2) Remove src:libb64 from Debian and then vendor in transmission source

I'll try to move towards 1) and see how it goes. So for now, this is a
wontfix because against DFSG.

Thanks,

Alex

Reply via email to