Bug#1138896: gcc-16: Homepage URL should use https for security instead of http

Vincent Lefevre <[email protected]> Fri, 5 Jun 2026 16:57:44 +0200

Newsgroups	gmane.linux.debian.devel.gcc
Message-ID	<20260605145744.GA1749917__15915.5973045685$1780671569$gmane$org@cventin.lip.ens-lyon.fr>

Source: gcc-16
Version: 16.1.0-1
Severity: normal
Tags: security
X-Debbugs-Cc: Debian Security Team <[email protected]>

The homepage URL is still using "http":

  http://gcc.gnu.org/

For security, it should now be

  https://gcc.gnu.org/

Note: same issue for the previous gcc-* packages and gcc-snapshot.

-- System Information:
Debian Release: forky/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable-debug'), (500, 'proposed-updates-debug'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.19.14+deb14-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

-- no debconf information