Bug#943365: Mark nasm-mozilla and nodejs-mozilla as unsupported

2019-10-24 Thread Moritz Muehlenhoff
On Thu, Oct 24, 2019 at 11:34:58AM +, Holger Levsen wrote:
> Hi Moritz,
> 
> thanks for your bugreport.
> 
> On Wed, Oct 23, 2019 at 11:43:30PM +0200, Moritz Muehlenhoff wrote:
> > These packages are introduced in jessie and stretch as build dependencies
> > for Firefox/Thunderbird 68, but they are not meant to be used standalone
> > and are not covered by security support, debian-security-support should
> > flag them as such if installed.
> 
> do you have an idea what to use as last supported version (0?), last day
> of support (jessie/stretch release day?) and what URL with more
> information to point to?

These are variants of src:nodejs and src:nasm added in addition to avoid
regressions to the main packages, so there's no version which was or will
ever be supported.

As for the URL, there's no such thing, maybe simply add "Only provided 
as build dependency for Firefox/Thunderbird >= 68"

Cheers,
Moritz



Bug#943365: Mark nasm-mozilla and nodejs-mozilla as unsupported

2019-10-24 Thread Holger Levsen
Hi Moritz,

thanks for your bugreport.

On Wed, Oct 23, 2019 at 11:43:30PM +0200, Moritz Muehlenhoff wrote:
> These packages are introduced in jessie and stretch as build dependencies
> for Firefox/Thunderbird 68, but they are not meant to be used standalone
> and are not covered by security support, debian-security-support should
> flag them as such if installed.

do you have an idea what to use as last supported version (0?), last day
of support (jessie/stretch release day?) and what URL with more
information to point to?


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C



signature.asc
Description: PGP signature


Bug#943365: Mark nasm-mozilla and nodejs-mozilla as unsupported

2019-10-23 Thread Moritz Muehlenhoff
Package: debian-security-support
Severity: wishlist

These packages are introduced in jessie and stretch as build dependencies
for Firefox/Thunderbird 68, but they are not meant to be used standalone
and are not covered by security support, debian-security-support should
flag them as such if installed.

Cheers,
Moritz