- Package:
- cdimage.debian.org
- Source:
- cdimage.debian.org
- Submitter:
- Daniel Baumann
- Date:
- 2025-08-17 17:47:20 UTC
- Severity:
- serious
- Tags:
Hi, debian-cd does embededd a copy of the syslinux binary (see #497270). because the embedded copy wasn't synced with the archive at the time when sarge was released, sarge images are shipping a binary without having a source (in the dedicated source images). sarge is using syslinux 2.04, a version which is not even available anymore on ftp.debian.org. syslinux is licensed under GPL-2+, which means you either need to ship both binaries and sources at the same time, or with the note on how to get the source etc. pp. please uploade the debian sources of syslinux 2.04-1 (e.g. from morgue on merkel). Regards, Daniel
Hi, any progress on this? Regards, Daniel
Hello release managers. Please take a look on bug #497471. This bug is related to sarge images on cdimage.debian.org, and I believe it is not blocker for Lenny.
Eugene V. Lyubimkin wrote: first of all, there's no point for a lenny-ignore tag as the bug only affects sarge images. lenny-ignore tags are only used for bugs that are present in lenny. second, serious bugs against cdimage.d.o do *per se* not block a release anyway.
Daniel Baumann wrote: At least, our official page [1] thinks different. [1] http://bugs.debian.org/release-critical/other/testing.html
Eugene V. Lyubimkin wrote: because it doesn't distinguish between package related bugs and infrastructure related bugs, that's left up to the attentive reader.
Hi, Is this bug still alive?
Closing since Sarge has been out of support for a long time.
Looking further into this, the missing source package appears to be syslinux 2.04-1 Unfortunately this doesn't appear in: http://snapshot.debian.org/package/syslinux/ Daniel, do you have any ideas where else we might find the missing source package? Colin
reopen 497471 thanks first, please do cc bug submitters if you care for an answer, the bts does not notify submitters when you write to a bug. second, reopening the bug: it doesn't matter if debian supports sarge or not; the images with missing sources are still distributed from cdimage.debian.org. and finally, i'm afraid i do not have any copy of 2.04 of syslinux.
Releases older than squeeze are no longer on cdimage.debian.org. Best wishes, Mike
reopen 497471 thanks http://cdimage.debian.org/cdimage/archive/3.1_r0/i386/iso-cd/debian-31r0-i386-netinst.iso [...]
For what it's worth, syslinux-2.04 source is available here: https://www.kernel.org/pub/linux/utils/boot/syslinux/2.xx/ This is a list files shown for version 2.04: syslinux-2.04.lsm 20-Oct-2011 19:13 3.0K syslinux-2.04.lsm.sign 20-Oct-2011 19:13 836 syslinux-2.04.tar.bz2 20-Oct-2011 19:08 309K syslinux-2.04.tar.gz 20-Oct-2011 19:08 379K syslinux-2.04.tar.sign 20-Oct-2011 19:08 836 syslinux-2.04.tar.xz 20-Oct-2011 19:08 257K syslinux-2.04.zip 20-Oct-2011 19:13 462K syslinux-2.04.zip.sign 20-Oct-2011 19:13 836 Hopefully there's a way of verifying that this is the correct source for what was shipped with the Sarge images. GPL license compliance requires that users be able to get the source for the binary upon request -- so I believe what's required to handle this bug is verification and documentation. I'd like to think that can be done with some kind of errata file placed /next to/ the Sarge images in the archive rather than having to rebuild the Sarge images themselves.
ACK, thanks for the suggestion. I could also check the files that were in use and compare to the stuff on snapshot.d.o for the dates in question. It would be very hard to rebuild the sarge images now after such a long time, and I've not got much confidence we could make them work...
Dear Customer, Your parcel has arrived at October 03. Courier was unable to deliver the parcel to you. Please, open email attachment to print shipment label. Yours trully, Fernando Davenport, FedEx Operation Manager.
Dear Customer, We could not deliver your parcel. You can review complete details of your order in the find attached. Warm regards, Scott Rose, Sr. Operation Manager.
Dear Customer, We could not deliver your item. You can review complete details of your order in the find attached. Warm regards, Willard Graves, Support Manager.
Dear Customer, Your parcel has arrived at November 08. Courier was unable to deliver the parcel to you. Delivery Label is attached to this email. Thank you for choosing FedEx, Erik Knapp, Sr. Station Manager.
This bug is reported against a very old version of Debian, please close it.
close 497471 The bug was filed against an old version of Debian and should not be re-opened since the affected version is no longer in active or extended support.
reopen 497471 thanks it doesn't matter if debian supports sarge or not; the images with missing sources are still distributed from cdimage.debian.org: http://cdimage.debian.org/cdimage/archive/3.1_r0/i386/iso-cd/debian-31r0-i386-netinst.iso Regards, Daniel