hi, On Fri, May 08, 2020 at 10:16:19AM +0100, Chris Lamb wrote: > In fact, I noticed that OpenStack "lost support from upstream just a > few weeks after the [Jessie] release" [0], so I've gone ahead and > proposed that the main OpenStack packages are marked as unsupported, > mirroring a similar decision made when Wheezy was LTS.
thanks, I merged the commit and uploaded debian-security-support 2020.05.08 (with just this change) to sid, which previously had 2020.04.16. which brings us to a rather curious situation: debian-security-support | 2015.04.04~bpo70+1 | wheezy-backports | source, all debian-security-support | 2015.04.04~deb7u1 | wheezy | source, all debian-security-support | 2018.01.29~deb7u1 | wheezy-security | source, all debian-security-support | 2018.01.29~deb8u1 | jessie | source, all debian-security-support | 2019.12.12~deb8u2 | jessie-security | source, all debian-security-support | 2019.12.12~deb9u2 | stretch-security | source, all debian-security-support | 2019.12.12~deb9u2 | stretch | source, all debian-security-support | 2019.12.12~deb10u1 | buster | source, all debian-security-support | 2020.04.16~deb10u2 | buster-p-u | source, all debian-security-support | 2020.04.16 | bullseye | source, all debian-security-support | 2020.05.08 | sid | source, all IOW: - buster will get 2020.04.16~ this weekend, after which I had planned to update d-s-s in stretch and jessie. - since today we actually want 2020.05.08 in jessie... (OTOH it's not really urgent as this change only documents things which have been like this since shortly after the jessie release.) - of course this is an endless game we should fix somehow (better than we play this game now). (There's not even a tracking bug for this yet.) I guess I will ask the security team whether it's ok to add d-s-s 2020.04.16~ to stretch with a DSA and then add d-s-s 2020.04.16~ to jessie with a DLA. And I will ignore wheezy. -- cheers, Holger ------------------------------------------------------------------------------- holger@(debian|reproducible-builds|layer-acht).org PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C There are no jobs on a dead planet. (Also many other things but people mostly seem to care about jobs.)
signature.asc
Description: PGP signature