Bug#1054260: cvsweb is unmaintained upstream

[Denis 'GNUtoo' Carikli]

Package: cvsweb
Version: 3:3.0.6-8.1

Hi,

Debian has a cvsweb package.

Unfortunately in 2014 FreeBSD stopped maintaining cvsweb[1] and warned
that "There may be unpatched security issues with [cvsweb]".

Debian probably still assume that it's maintained by FreeBSD as the
package points to the cvsweb page on the FreeBSD website[2][3], but that
page was also removed from the FreeBSD website few years ago[4][5].

References:
---
[1]https://cgit.freebsd.org/doc/commit/?id=65402a3cc2b34ee34ddb598266b5cc30ef03d41b
[2]https://packages.debian.org//cvsweb
[3]http://www.freebsd.org/projects/cvsweb.html
[4]https://reviews.freebsd.org/D22957
[5]https://reviews.freebsd.org/file/data/2aucwpp5owujyob55met/PHID-FILE-pl362nfyqoek4ostdpdp/D22957.diff

Denis.


pgpxY9UwoNLcY.pgp
Description: OpenPGP digital signature

Bug#1030960: debootstrap: Add Trisquel to debootstrap

[Denis 'GNUtoo' Carikli]

Package: debootstrap
Version: 1.0.118ubuntu1.8+10.0trisquel6
Severity: wishlist
Tags: patch

Dear Maintainer,

Trisquel is a GNU/Linux distribution certified by the FSF that is
based on Ubuntu.

Adding Trisquel to debootstrap would enable to generate Trisquel
images (with mkosi, debuerreotype, or even debootstrap) from
other distributions.

This could also benefit Replicant (an Android distribution
certified by the FSF) as it depends on various Trisquel versions
for building the images.

This merge request adds Trisquel to debootstrap:
https://salsa.debian.org/installer-team/debootstrap/-/merge_requests/89

Thanks a lot in advance for the review.

Denis.

-- System Information:
Debian Release: bullseye/sid
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.6-gnu-2-vanilla (SMP w/4 CPU cores; PREEMPT)
Kernel taint flags: TAINT_WARN
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages debootstrap depends on:
ii  wget  1.20.3-1ubuntu2

Versions of packages debootstrap recommends:
ii  gnupg   2.2.19-3ubuntu2.2
pn  ubuntu-keyring  

Versions of packages debootstrap suggests:
pn  arch-test   
pn  squid-deb-proxy-client  

-- no debconf information