On Thu, Oct 24, 2019 at 11:34:58AM +0000, Holger Levsen wrote:
> Hi Moritz,
>
> thanks for your bugreport.
>
> On Wed, Oct 23, 2019 at 11:43:30PM +0200, Moritz Muehlenhoff wrote:
> > These packages are introduced in jessie and stretch as build dependencies
> > for Firefox/Thunderbird 68, but they are not meant to be used standalone
> > and are not covered by security support, debian-security-support should
> > flag them as such if installed.
>
> do you have an idea what to use as last supported version (0?), last day
> of support (jessie/stretch release day?) and what URL with more
> information to point to?
These are variants of src:nodejs and src:nasm added in addition to avoid
regressions to the main packages, so there's no version which was or will
ever be supported.
As for the URL, there's no such thing, maybe simply add "Only provided
as build dependency for Firefox/Thunderbird >= 68"
Cheers,
Moritz
