Good communication with upstream is good idea

[Florian Weimer]

* Stephan Hermann:

>> What's the correct way to get it out of Unbuntu (universe)?  I don't
>> want to relicense it, but if asking politely does not work, it seems
>> to be my only choice.

> What needs to be done to make it work on Ubuntu, too?

debsecan needs to be patched to download CVE meta-data from Launchpad,
and someone needs to maintain the data in Launchpad.