Dear Sandro,

I am interested in salvaging your package amule, in accordance with the
Package Salvaging procedure outlined in the Developers Reference [1].
Your package meets the criteria for this process, and I would love to
assist in preserving and maintaining it. As the Salvage process
suggests, here is a list of the criteria that apply, in my opinion:

- Bugs filed against the package without answers from the
  maintainer
- Three RC bugs open, the oldest since 2025-10-15
- Package removed from testing for four months
- Two pull requests open in salsa.d.o without answers from the
  maintainer
- No visible activity on the package by the maintainer for three years

I believe amule should stay available in Debian's upcoming stable
release, and I took the liberty to start working on a fork in my
personal repo [2], in particular branch debian/experimental.

If you choose not to accept the ITS, I would be more than happy to help
as an uploader/co-maintainer.

If you agree to this ITS, please do not hesitate to state your consent
right away so that I can upload an updated package near-term.

Looking forward to your reply.

Best,
Sven

[1] https://www.debian.org/doc/manuals/developers-reference/pkgs.en.html#package-salvaging
[2] https://salsa.debian.org/sge/amule

You could do this by submitting patches, as i've seen you do in #1039123.

I don't think this process is warranted. I think the first step should
have been for you to engage with the current maintainer, instead of
engaging with a bureaucratic process to take over Amule.

In particular it is worth noting how Amule's popularity has been in
costant decrease for a decade now (due to bittorrent raise in user
appeal) and thus work on amule (upstream and downstream) has slowed
down.

From your response I understand you intend to continue maintaining
aMule. That's great!

In regards to patches, my initial intend was actually to provide
patches to fix the boost issues. At this point I had a look at latest
upstream which contains a fix. However, I failed backporting the fix as
it would have required adapting also some autotools files, presumably
at least m4/boost.m4, which was not part of the upstream fix. Noticing
that upstream meanwhile switched to CMake, plus given that debian/rules
follows older concepts, lead me to trying to renovate the packaging as
a whole based on the latest upstream.

Now, the changes are substantial and, being based on a new upstream
snapshot, go far beyond of what can form a patch. So, I'd like to ask
you to allow me in as uploader/co-maintainer.

As far as I can see, there is still a stable community of eMule/aMule
users in the world, for sure small in comparison to the bittorrent one,
and upstream continues commiting fixes to the repo. That makes me
believe aMule should be updated in Debian.

Any more thoughts from you how to continue?

Best,
Sven

Be as it may, we still have people interested in having amule in Debian.
Unfortunately, amule is not longer working on unstable and has been removed
from testing.

Sandro, according to amule's control file, you're the only maintainer of this
package. What are your plans regarding its maintenance ?

All the best

We believe that the bug you reported is fixed in the latest version of
amule, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1130916@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sandro Tosi <morph@debian.org> (supplier of updated amule package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 17 Sep 2026 01:54:05 -0400
Source: amule
Architecture: source
Version: 1:3.0.1-1
Distribution: unstable
Urgency: medium
Maintainer: Sandro Tosi <morph@debian.org>
Changed-By: Sandro Tosi <morph@debian.org>
Closes: 864739 1105290 1127163 1130916 1139661 1140307 1142276
Changes:
 amule (1:3.0.1-1) unstable; urgency=medium
 .
   * New upstream release; Closes: #1139661, #1140307, #1130916
     - fixes CVE-2026-51105, buffer overflow in the OP_SERVERMESSAGE handler;
       Closes: #1142276
     - fixes crash of `amuled --ec-config` on a fresh installation;
       Closes: #864739
   * debian/watch
     - upgrade to version 5, and point it to the new upstream repo location
   * debian/upstream/metadata
     - point to the new upstream repo location
   * debian/rules
     - convert to dh short-form with --buildsystem=cmake, upstream dropped
       autotools; configure flags mirror the previous --enable-* set, plus
       -DENABLE_BFD=OFF (no binutils-dev), -DENABLE_CCACHE=OFF and
       -DDEFAULT_VERSION_CHECK=OFF (replaces version_check.diff); this also
       fixes the FTBFS with make --shuffle=reverse; Closes: #1105290
     - build the muleunit tests and run them via dh_auto_test
     - install upstream changelog from docs/CHANGELOG.md
   * debian/control
     - update Homepage field to new upstream location
     - b-d on cmake, gettext, pkgconf, po4a (translated manpages are rendered
       at build time) and python3:any (icon data generation); drop autoconf,
       automake, autopoint, autotools-dev
     - replace libgeoip-dev with libmaxminddb-dev, upstream moved IP2Country
       to libmaxminddb
     - b-d on libayatana-appindicator3-dev, for a system tray icon that works
       on GNOME and Wayland compositors
     - no longer b-d on libboost-system-dev; Closes: #1127163
     - drop amule-gnome-support (and debian/schemas/): its GConf schema does
       nothing on any current desktop, ed2k:// links are handled via the
       x-scheme-handler/ed2k MimeType of the upstream desktop file
     - amule-daemon: drop obsolete lsb-base dependency, add
       Pre-Depends: ${misc:Pre-Depends}
     - add Rules-Requires-Root: no
     - bump Standards-Version to 4.7.4 (no changes needed)
   * debian/copyright
     - rewrite in DEP-5 format, update copyright holders and download location,
       document the licenses of third-party files
   * debian/*.install
     - follow the org.amule.aMule.* rename of desktop file, icons and pixmap
     - install the AppStream metainfo file
     - install manpages from debian/tmp (now generated by cmake from
       *.1.in templates), and drop debian/*.manpages
   * debian/amule.docs
     - update to the new .md files, add IP2Country.md
   * debian/amule.NEWS, debian/amule-utils-gui.NEWS
     - document the desktop entry renames (amule.desktop ->
       org.amule.aMule.desktop, amulegui.desktop ->
       org.amule.aMule.gui.desktop) and that pinned launchers need re-pinning
   * debian/not-installed
     - ignore the docs cmake installs in usr/share/doc/amule, shipped via
       amule.docs and dh_installchangelogs instead
   * debian/amule.preinst, debian/amule-utils.preinst
     - drop, they only cleaned up ed2k diversions from the 2008 xmule
       transition
   * debian/plasma-widget-amule.{install,sharedmimeinfo}
     - drop leftovers of the long gone plasma-widget-amule package
   * debian/patches/cas_configfile.c_good_default_paths.diff
     - point to the current fonts-dejavu-core path (truetype/dejavu), add
       DEP-3 header
   * debian/patches/use_xdg-open_as_preview_default.diff
     - drop, upstream now defaults to xdg-open
   * debian/patches/version_check.diff
     - drop, replaced by the DEFAULT_VERSION_CHECK cmake option
   * debian/patches/libupnp1.8.patch, wx3.2.patch,
     fix_assert_failure_inside_doseek.patch
     - drop, merged upstream
   * debian/patches/fix_boost_system_header_only.patch
     - drop, no longer needed (upstream uses io_context and treats
       Boost.System as header-only)
Checksums-Sha1:
 0c46dfd8c91aeda3a9e184f0f0360a5f7ac2a852 2243 amule_3.0.1-1.dsc
 f0b4299a3a1fe8cdfa39031b25ba2d43b9ab058a 3557940 amule_3.0.1.orig.tar.xz
 27e498d3c9776b89c3faf847ea234f360c06b959 24104 amule_3.0.1-1.debian.tar.xz
 de8e251206fd7dd9659902009e7fa8975b20e6b5 15644 amule_3.0.1-1_source.buildinfo
Checksums-Sha256:
 85e969daeb46601929b0a94cd6930cd6ecaef2fdee5a120acccea818bbe9f84f 2243 amule_3.0.1-1.dsc
 0cdc3c8772e5903b975fb085a933187b47fb83af5b77e043d1938464e490f53f 3557940 amule_3.0.1.orig.tar.xz
 8f85de7cb65d41ade0c9c65d226febd581fb638d0e1c69637cea744f19e5dd6c 24104 amule_3.0.1-1.debian.tar.xz
 b6ba4711898b5fb5c441341f3c18b883fd5c565da0baa98d0a7020ecb3f71fc8 15644 amule_3.0.1-1_source.buildinfo
Files:
 66c800ea3f65b479423161c3fa140bde 2243 net optional amule_3.0.1-1.dsc
 f6d2fc7556030d5555265969092a995c 3557940 net optional amule_3.0.1.orig.tar.xz
 fff7edb07aa0f24b3685d02fd34a2fdf 24104 net optional amule_3.0.1-1.debian.tar.xz
 049b2eec72ccd50af45c0ae12e742a5a 15644 net optional amule_3.0.1-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=2xdu
-----END PGP SIGNATURE-----