- Status Unconfirmed
- Percent Complete
- Task Type Security Issue
- Category Any
- Assigned To No-one
- Operating System All
- Severity Medium
- Priority Very Low
- Reported Version Milky Way v0.3
- Due in Version Undecided
-
Due Date
Undecided
-
Votes
1
- Tobias Dausend (06/12/2019)
- Private
FS#1491 - Download debian-fixes instead of relying on external sources
It happened already with minetest and again with prosody: When trying to build own packages with makepkg there are patches downloaded from the Debian-project. But the given HTTP(S)-sources are no longer available, concrete example within prosody to be found: https://deb.debian.org/debian/pool/main/p/prosody/prosody_0.10.2-1~bpo9+1.debian.tar.xz (not available)
Please don’t rely on those external sources when creating PKGBUILD-files or just give users the possibility for a secure and granted download. Therefore I cannot build prosody on my own now!