Hi Santiago,
On Thu, May 12, 2016 at 03:16:15PM +0200, Santiago Ruano Rincón wrote:
> Hi,
>
> Given the recent bug triaging, security-support-ended.deb7 needs more
> updating. I'm taking Mortiz's mail as reference, and I hope I are not
> missing other info:
>
> El 11/11/15 a las 21:59, Sebastian Ramacher escribió:
> > Hi
> >
> > On 2015-11-04 17:44:36, Raphael Hertzog wrote:
> > > [ Many people are on copy, please trim the list as appropriate when you
> > > reply ]
> > >
> > > On Wed, 19 Aug 2015, Moritz Muehlenhoff wrote:
> > > > These need to be discussed, since they will be a significant
> > > > time drain (e.g. are they in the sponsors's interests?). They
> > > > are supportable, but it will take a lot of work and sometimes
> > > > special domain knowledge:
> > > >
> > > > icedove
> > > > iceweasel
>
> Any decision yet?
> I could take a look to iceweasel/firefox next week, although I'm not
> familiar enough with it.
I have maintained icedove a while ago and know the codebase a bit. I'm
also sure we might get support from the current maintainers as long as
we're able to build the ESR releases for wheezy - which is Debian's
standard way to deal with Firefox/Thundergbird security updates. I can
look into building icedove 31.8 for wheezy. I could also check if we can
build 45.x which would keep us covered for at least another year:
https://www.mozilla.org/en-US/firefox/organizations/faq/
So should we try to support ice{dove,weasel} at least for th3 45.x series?
> > > > qemu
> > > > qemu-kvm
> > > > xen
> xen will be supported.
> > > > libvirt
>
> qemu and qemu-kvm were triaged as unsupported for CVE-2016-3712, but I
> think Guido is studying how to support virtualisation related packages,
> and maybe we should wait for his evaluation.
I had zero feedback on supporting qemu so I'd propose to drop it. We can
keep libvirt in the current version if we don't update qemu and it seems
to be in use in Wheezy quiet a bit (and dropping it would kill of quiet
some programs due to the dependency chain) so I'd propose to keep it.
Cheers,
-- Guido
