Your message dated Wed, 8 Mar 2023 14:20:25 +0100
with message-id <zailmqdah6auw...@bongo.bofh.it>
and subject line Re: Bug#1030669: Only include in Bookworm with commitment to
stable updates
has caused the Debian Bug report #1030669,
regarding Only include in Bookworm with commitment to stable updates
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1030669: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1030669
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: varnish
Version: 7.1.1-1.1
Severity: serious
Varnish should only be included in Bookworm with a reliable commitment
by the maintainers to backport/test security fixes across the typical
three year life cycle (two years of stable-security and one year of
oldstable-security).
Especially since testing currently has 7.1, which reaches it's end of
life on March 15 2023 and does not contain the LTS release.
(It's not unlikely that most people who operate a CDN based on Varnish
only use custom/patched/recent packages backported from stable
anyway, which is perfectly fine, but then let's make that explicit
by keeping it out of testing).
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
On Feb 14, Moritz Muehlenhoff <j...@inutil.org> wrote:
> > > Varnish should only be included in Bookworm with a reliable commitment
> > > by the maintainers to backport/test security fixes across the typical
> > > three year life cycle (two years of stable-security and one year of
> > > oldstable-security).
> > I do not think that this will be helpful for Varnish users.
> Then someone needs to step up, it's as easy as that.
Fine: "I hereby commit to backport/test security fixes for varnish
across the lifetime of bookworm".
I manage about 150 instances of Varnish, so let's just assume that
I have the experience needed and some motivation.
--
ciao,
Marco
signature.asc
Description: PGP signature
--- End Message ---
