Path: csiph.com!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!feeder1.feed.usenet.farm!feed.usenet.farm!aioe.org!bofh.it!news.nic.it!robomod
From: "Bailey, Josh" <josh@vandervecken.com>
Newsgroups: linux.debian.maint.python
Subject: python3.5 + oldstable dilemma
Date: Mon, 01 Mar 2021 04:20:02 +0100
Message-ID: <BNHge-1AW-5@gated-at.bofh.it>
Old-Return-Path: <josh@felllight.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="000000000000da16bb05bc71085e"
Approved: robomod@news.nic.it
Lines: 38
Organization: linux.* mail to news gateway
Sender: robomod@news.nic.it
Xref: csiph.com linux.debian.maint.python:13239

--000000000000da16bb05bc71085e
Content-Type: text/plain; charset="UTF-8"

Hi all,

I'm a maintainer for a python based SDN network controller, FAUCET. One of
the platforms we've been supporting to-date is python3.5/oldstable.

Of course, now, python3.5 is EOL. To some degree we can keep building our
package under python3.5, but now not all of our dependencies (like pyyaml)
build or are even released for 3.5 anymore. That's an issue as there are
security vulnerabilities that are now difficult to address.

Given that oldstable will be around until 2022, does that mean python3 as
python3.5 will live on in oldstable until then? I can understand the case
for not adding a newer python3 version, but also OTOH addressing security
vulnerabilities over the LTS window will probably only get harder.

Any advice appreciated,

--000000000000da16bb05bc71085e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi all,<div><br></div><div>I&#39;m a maintainer for a pyth=
on based SDN network controller, FAUCET. One of the platforms we&#39;ve bee=
n supporting to-date is python3.5/oldstable.</div><div><br></div><div>Of co=
urse, now, python3.5 is EOL. To some degree we can keep building our packag=
e under python3.5, but now not all of our dependencies (like pyyaml) build =
or are even released for 3.5 anymore. That&#39;s an issue as there are secu=
rity vulnerabilities=C2=A0that are now difficult to address.</div><div><br>=
</div><div>Given that oldstable will be around until 2022, does that mean p=
ython3 as python3.5 will live on in oldstable until then? I can understand =
the case for not adding a newer python3 version, but also OTOH addressing s=
ecurity vulnerabilities over the LTS window will probably only get harder.<=
/div><div><br></div><div>Any advice appreciated,</div><div><br></div></div>

--000000000000da16bb05bc71085e--