[Debian-med-packaging] Bug#1088416: Getting rid of twitter-bootstrap3 as trade off for privacy breach

Andreas Tille andreas at an3as.eu
Thu Dec 12 13:43:18 GMT 2024


Hi Santiago,

thank you for working on LTS!  Intake is replacing a link to some online
version of bootstrap3 to avoid privacy breaches of the user[1].  I admit
we have no capacity to port the code to any later bootstrap version and
my plan would be to simply drop the patch and rather use the online
version.  For me it looks sensibly safe since an sha sum is provided to
ensure that the user is working with the correct file.

What do you think?

Kind regards
    Andreas.


[1] https://salsa.debian.org/med-team/intake/-/blob/master/debian/patches/fix_privacy_breach.patch?ref_type=heads

-- 
https://fam-tille.de



More information about the Debian-med-packaging mailing list