On Mon, Oct 21, 2019 at 04:36:23PM +0200, Jean Baptiste Favre wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian....@packages.debian.org
> Usertags: rm
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Dear release managers,
> Please remove trafficserver from Stretch next point release.
> This version hass been EOL upstream for 2 years now, and security patches
> backport
> became to much invasive to be efficient.
> I prefer this version to be removed from old-stable releases.
JFTR, we already added a note to DSA-4520-1 which advises to upgrade to Buster
if HTTP/2 is used, so +1 from me.
Cheers,
Moritz
