Hi Roberto, Sylvain, all I have the same view as you, almost. The LTS packages-to-support list has some meaning since it indicates how important packages is to update so it gives some priority information.
The thing here is that in this case the package I asked for is non-free, and that means that it is not generally supported. But since we have a very similar package in the packages-to-support list I was wondering whether we should support this one too. Specifically for nvidia-graphics-drivers-legacy-340xx I wonder if we should support it even if it is in the non-free section because we say we should support nvidia-graphics-drivers. I guess I will not get an answer today so I'll leave this to the next front-desk person (Sylvain) tomorrow. Cheers // Ola On Fri, 20 May 2022 at 23:51, Roberto C. Sánchez <robe...@debian.org> wrote: > > On Fri, May 20, 2022 at 11:09:47PM +0200, Ola Lundqvist wrote: > > Hi LTS team > > > > I looked at nvidia-graphics-drivers-legacy-340xx who have two CVEs. I > > can see that this package is not in "packages-to-support" for LTS. But > > I can see that nvidia-graphics-drivers is. > > I'm not sure how to interpret this. Do the entry in > > packages-to-support mean that all nvidia-graphics-drivers packages > > should be supported or just the specific one listed. > > > > Anyone know this? > > > Hi Ola, > > I encountered this some time back when I was doing FD work. My > recollection of Raphael's guidance is that packages-to-support really > only applies for ELTS (where sponsors decide which specific packages > they will pay to support). For LTS, we support all packages except > those which the Security Team had previously decided to drop and those > which the LTS Team has decided to drop. The LTS triage script retrieves > the current list from debian-security-support package, so it should > point out which packages are EOL or have limited security support. All > other packages are supported as usual. > > Regards, > > -Roberto > > -- > Roberto C. Sánchez > -- --- Inguza Technology AB --- MSc in Information Technology ---- | o...@inguza.com o...@debian.org | | http://inguza.com/ Mobile: +46 (0)70-332 1551 | ---------------------------------------------------------------