[Debian-ha-maintainers] Bug#810977: heartbeat: Unused Build-Depends on libcurlN-openssl-dev

Guillem Jover gjover at sipwise.com
Thu Jan 14 12:32:46 UTC 2016


Source: heartbeat
Source-Version: 1:3.0.5+hg12629-1.2
Severity: normal

Hi!

This packages has «libcurl4-openssl-dev | libcurl3-openssl-dev» in the
Build-Depends, which is not used any longer by the build system (it
was previously used by the Stonith drac3 plugin, no longer shippped.

Transitively combining OpenSSL (via cURL) with heartbeat which is GPL-2+
*without* an OpenSSL exception is probably not a wise idea, so having
this dependency lingering around can rise some alarms. Please just
remove it.

Thanks,
Guillem



More information about the Debian-ha-maintainers mailing list