Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.maint.python > #13241

Re: python3.5 + oldstable dilemma

Path csiph.com!newsfeed.xs4all.nl!newsfeed8.news.xs4all.nl!news.dns-netz.com!news.freedyn.net!aioe.org!bofh.it!news.nic.it!robomod
From Jeremy Stanley <fungi@yuggoth.org>
Newsgroups linux.debian.maint.python
Subject Re: python3.5 + oldstable dilemma
Date Mon, 01 Mar 2021 14:20:02 +0100
Message-ID <BNQCS-7i8-9@gated-at.bofh.it> (permalink)
References <BNHge-1AW-5@gated-at.bofh.it>
X-Mailbox-Line From debian-python-request@lists.debian.org Mon Mar 1 13:15:35 2021
Old-Return-Path <fungi@yuggoth.org>
X-Amavis-Spam-Status No, score=-11.9 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, FOURLA=0.1, LDO_WHITELIST=-5, PGPSIGNATURE=-5] autolearn=ham autolearn_force=no
X-Policyd-Weight NOT_IN_SBL_XBL_SPAMHAUS=-1.5 CL_IP_EQ_FROM_MX=-3.1; rate: -4.6
MIME-Version 1.0
Content-Type multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="xn3kyiikjvbo2ery"
Content-Disposition inline
User-Agent NeoMutt/20170113 (1.7.2)
X-Sa-Exim-Connect-IP 2001:4802:7801:102:be76:4eff:fe20:63e0
X-Sa-Exim-Rcpt-To debian-python@lists.debian.org
X-Sa-Exim-Mail-From fungi@yuggoth.org
X-Sa-Exim-Scanned No (on azathoth.yuggoth.org); SAEximRunCond expanded to false
X-Mailing-List <debian-python@lists.debian.org> archive/latest/19025
List-ID <debian-python.lists.debian.org>
List-URL <https://lists.debian.org/debian-python/>
List-Archive https://lists.debian.org/msgid-search/20210301131514.onxvsd4loyy2upkj@yuggoth.org
Approved robomod@news.nic.it
Lines 50
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Date Mon, 1 Mar 2021 13:15:15 +0000
X-Original-Message-ID <20210301131514.onxvsd4loyy2upkj@yuggoth.org>
X-Original-References <CAAFBucA6-0Lu3C-h92u+X6Ggr1aRHKRFV0w4qts-XHbX99qFRA@mail.gmail.com>
Xref csiph.com linux.debian.maint.python:13241

Show key headers only | View raw


[Multipart message — attachments visible in raw view] - view raw

On 2021-03-01 16:15:38 +1300 (+1300), Bailey, Josh wrote:
> I'm a maintainer for a python based SDN network controller, FAUCET. One of
> the platforms we've been supporting to-date is python3.5/oldstable.
> 
> Of course, now, python3.5 is EOL. To some degree we can keep building our
> package under python3.5, but now not all of our dependencies (like pyyaml)
> build or are even released for 3.5 anymore. That's an issue as there are
> security vulnerabilities that are now difficult to address.
> 
> Given that oldstable will be around until 2022, does that mean python3 as
> python3.5 will live on in oldstable until then? I can understand the case
> for not adding a newer python3 version, but also OTOH addressing security
> vulnerabilities over the LTS window will probably only get harder.
> 
> Any advice appreciated,

If you're going to use the python3 packaged in oldstable, then can't
you use the libraries (e.g. python3-yaml) packaged in oldstable as
well and take advantage of whatever security fixes are backported by
the package maintainers/security team?
-- 
Jeremy Stanley

Back to linux.debian.maint.python | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

python3.5 + oldstable dilemma "Bailey, Josh" <josh@vandervecken.com> - 2021-03-01 04:20 +0100
  Re: python3.5 + oldstable dilemma Jeremy Stanley <fungi@yuggoth.org> - 2021-03-01 14:20 +0100
  Re: python3.5 + oldstable dilemma Giacomo Catenazzi <cate@debian.org> - 2021-03-01 15:30 +0100

csiph-web