Re: Support timeframe

2010-06-25 Thread Yves-Alexis Perez
On 25/06/2010 10:52, Bernd Zeimetz wrote:
> As usual in Debian - which is a community effort mostly - you can get a 
> release
> quicker or longer security support for a release, if you pay somebody to do 
> so.
> There are several companies and consultants who employ/are Debian developers 
> and
> would be willing to do such a job.
> 

And if in the end that means there are more people working on security
updates for (old)stable release, that means it benefits every user.
Sure, the support might be on very specific packages, not all the
distribution, meaning the security team can't extend the supported time,
but it's still better than nothing :)

Cheers,
-- 
Yves-Alexis


-- 
To UNSUBSCRIBE, email to debian-project-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4c2473d8.1050...@debian.org



Re: Support timeframe

2010-06-25 Thread Bernd Zeimetz
On 06/23/2010 07:22 PM, Steve Smith wrote:
> The reason why I ask is because we have a hardware appliance that is based on 
> Debian and we are working on upgrading to version 5.  Because the previous 
> version is not longer supported, we need to provide a patch policy for our 
> appliance.

If you're still working on that, it might make sense to skip Lenny and upgrade
to Squeeze directly. Its a good time to test things now and come out with the
finished product when Squeeze is released, or probably a bit after that. The
freeze time is more or less fixed now.

As usual in Debian - which is a community effort mostly - you can get a release
quicker or longer security support for a release, if you pay somebody to do so.
There are several companies and consultants who employ/are Debian developers and
would be willing to do such a job.


-- 
 Bernd ZeimetzDebian GNU/Linux Developer
 http://bzed.dehttp://www.debian.org
 GPG Fingerprints: 06C8 C9A2 EAAD E37E 5B2C BE93 067A AD04 C93B FF79
   ECA1 E3F2 8E11 2432 D485 DD95 EB36 171A 6FF9 435F


-- 
To UNSUBSCRIBE, email to debian-project-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4c246e6a.9060...@bzed.de



Re: Support timeframe

2010-06-23 Thread Don Armstrong
On Wed, 23 Jun 2010, Steve Smith wrote:
> In general, how long is a version for Debian supported? 

Generally speaking, 12-18 months after the release of a new stable
version is when security support is stopped. Generally, that means
between three and four years of support for a version.

> Ie, I believe that it is Microsoft's policy to stop providing
> support (patches, fixes, etc) after 6 years from a release. Is there
> any such policy for Debian and if so- what is it? What would it be
> for version 5? Ie, is it safe to say that version 5 will not be
> supported after 2014?

Pretty safe, yes. Support will most likely be stopped some time in
2012.

> The reason why I ask is because we have a hardware appliance that is
> based on Debian and we are working on upgrading to version 5.
> Because the previous version is not longer supported, we need to
> provide a patch policy for our appliance.

If it's something that you need security support for longer, you can
certainly hire someone to continue security support (and any other
backported fixes) to lenny, and possibly band together with others who
need the same.


Don Armstrong

-- 
If everything seems to be going well, you have obviously overlooked
something.
 -- Steven Wright

http://www.donarmstrong.com  http://rzlab.ucr.edu


-- 
To UNSUBSCRIBE, email to debian-project-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20100623181231.gd27...@teltox.donarmstrong.com



Re: Support timeframe

2010-06-23 Thread Michael Gilbert
On Wed, 23 Jun 2010 12:22:36 -0500, Steve Smith wrote:
> Hello,
> 
> In general, how long is a version for Debian supported?  Ie, I believe that 
> it is Microsoft's policy to stop providing support (patches, fixes, etc) 
> after 6 years from a release.  Is there any such policy for Debian and if so- 
> what is it?  What would it be for version 5?  Ie, is it safe to say that 
> version 5 will not be supported after 2014?
> 
> The reason why I ask is because we have a hardware appliance that is based on 
> Debian and we are working on upgrading to version 5.  Because the previous 
> version is not longer supported, we need to provide a patch policy for our 
> appliance.

Stable releases are supported for one year following the release date of
the subsequent stable release.  Hence, support for Debian Lenny (5.0)
well end sometime toward the end of 2011 (assuming Squeeze is released
toward the end of 2010).

Best wishes,
Mike


-- 
To UNSUBSCRIBE, email to debian-project-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20100623140040.d14d3dce.michael.s.gilb...@gmail.com



Support timeframe

2010-06-23 Thread Steve Smith
Hello,

In general, how long is a version for Debian supported?  Ie, I believe that it 
is Microsoft's policy to stop providing support (patches, fixes, etc) after 6 
years from a release.  Is there any such policy for Debian and if so- what is 
it?  What would it be for version 5?  Ie, is it safe to say that version 5 will 
not be supported after 2014?

The reason why I ask is because we have a hardware appliance that is based on 
Debian and we are working on upgrading to version 5.  Because the previous 
version is not longer supported, we need to provide a patch policy for our 
appliance.

--

Regards,
Steve

Steve R. Smith, CISSP, CISM  |   Product Manager
Alert Logic, Inc.
Direct: 713-351-1761   |   Mobile: 713-689-9742   |   Fax: 713-660-7988
ssm...@alertlogic.com |   www.alertlogic.com