Hello, as one of the libhtp uploaders I'd like to request removal of
libhtp from unstable and testing because it's deprecated upstream since
July 7, 2026 [1]. It's Github repo is archived since Aug 14, 2026.

There are no reverse dependencies left IMHO and there is no further use
of this package in any next Debian release.

The deprecation was furthermore announced by the latest Suricata release
8.0.7 [2]. Libhtp was almost exclusively used as a Suricata dependency for
parsing http payloads, which is integrated directly in Suricata since
8.0.x as a rust crate. [3] It's Debian package dependency was removed
in 8.0.1-1 [4].

I got the OK for this from its maintainer @satta, but feel free to ask
him officially in this bug report.

Thanks and best regards,
Andreas

[1] https://github.com/OISF/libhtp/blob/0.5.x/README.md

[2] https://suricata.io/2026/09/15/suricata-8-0-7-released/

[3] https://forum.suricata.io/t/suricata-8-0-0-released/5854#p-17571-upgrade-notes-12

[4] https://salsa.debian.org/pkg-suricata-team/pkg-suricata/-/commit/529b8d058f65fa56574c290bea843a07295b9ab4

We believe that the bug you reported is now fixed; the following
package(s) have been removed from unstable:

    libhtp | 1:0.5.53-1 | source
libhtp-dev | 1:0.5.53-1 | amd64, arm64, armhf, i386, loong64, ppc64el, riscv64, s390x
   libhtp2 | 1:0.5.53-1 | amd64, arm64, armhf, i386, loong64, ppc64el, riscv64, s390x

------------------- Reason -------------------
ROM; Deprecated upstream and superseded by rust/htp bundled in Suricata >= 8
----------------------------------------------

Note that the package(s) have simply been removed from the tag
database and may (or may not) still be in the pool; this is not a bug.
The package(s) will be physically removed automatically when no suite
references them (and in the case of source, when no binary references
it).  Please also remember that the changes have been done on the
master archive and will not propagate to any mirrors until the next
dinstall run at the earliest.

Packages are usually not removed from testing by hand. Testing tracks
unstable and will automatically remove packages which were removed
from unstable when removing them from testing causes no dependency
problems. The release team can force a removal from testing if it is
really needed, please contact them if this should be the case.

We try to close bugs which have been reported against this package
automatically. But please check all old bugs, if they were closed
correctly or should have been re-assigned to another package.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1148184@bugs.debian.org.

The full log for this bug can be viewed at https://bugs.debian.org/1148184

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Thorsten Alteholz (the ftpmaster behind the curtain)