+CC: co-maintainer, last uploader
* Demi Marie Obenour <[email protected]> [250421 09:09]:
Upstream H2O no longer makes releases (https://github.com/h2o/h2o/3230)
and the tagged releases are therefore EOL and do not get security patches
anymore. This means that there might be upstream vulnerabilities that
affect Debian's H2O package.
I recommend either dropping H2O from Debian altogether [..]
This might be an option. dak tells us, only netdata build-depends on
it, however netdata is not part of testing currently:
$ dak rm -R -n h2o
Will remove the following packages from unstable:
h2o | 2.2.5+dfsg2-11 | source, amd64, arm64, armel, armhf, i386,
mips64el, ppc64el, riscv64, s390x
h2o-doc | 2.2.5+dfsg2-11 | all
libh2o-dev | 2.2.5+dfsg2-11 | amd64, arm64, armel, armhf, i386, mips64el,
ppc64el, riscv64, s390x
libh2o-dev-common | 2.2.5+dfsg2-11 | all
libh2o-evloop-dev | 2.2.5+dfsg2-11 | amd64, arm64, armel, armhf, i386,
mips64el, ppc64el, riscv64, s390x
libh2o-evloop0.13t64 | 2.2.5+dfsg2-11 | amd64, arm64, armel, armhf, i386,
mips64el, ppc64el, riscv64, s390x
libh2o0.13t64 | 2.2.5+dfsg2-11 | amd64, arm64, armel, armhf, i386, mips64el,
ppc64el, riscv64, s390x
Maintainer: Apollon Oikonomopoulos <[email protected]>
------------------- Reason -------------------
----------------------------------------------
Checking reverse dependencies...
# Broken Build-Depends:
netdata: libh2o-dev-common
Dependency problem found.
