Bug#1031046: Backport to bookworm

[José Miguel Gonçalves]

Hi Jonas,

Thank you for your quick response.
Please do not consider my questions as I was demanding anything.
I just wanted a confirmation that Asterisk was still going to be 
packaged in Debian in the near future (at least, during the life of 
Asterisk 20).
I only have appreciations for the Debian project, in the maintenance of 
very stable systems that I use in my work and private life.
Going to a more specific question, are you considering packaging 
Asterisk 20 for bookworm-backports?

Best regards,
José Miguel Gonçalves


On 06/09/24 14:10, Jonas Smedegaard wrote:
> Hi José,
>
> Quoting José Miguel Gonçalves (2024-09-06 13:14:26)
>> I was wondering, what is the current maintenance status of Asterisk on
>> Debian?
> Nothing has changed since my older responses in this bugreport, so
> please read my other posts here and ask more specifically if there is
> something you don't find covered there already.
>
>> I see that there are packages published on unstable, but the current
>> version has a reported security vulnerability (CVE-2024-42365
>> <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1078574>) since
>> August 12, that was still not addressed.
> Yes, there are bugs filed against Asterisk.  Please go examine which of
> those bugs you consider affecting your use of Asterisk.
>
>
>> Is the goal to still maintain Asterisk packages in Debian or there is
>> lack of man-power for that?
> As also reflected by my older resonses in this bugreport, the goal is to
> maintain Asterisk packages in Debian, but having that goal is not
> adequate exactly due to lack of man power: I have enough time to keep
> Asterisk afloat for unstable, but lack the time to care for stable
> releases of Debian.
>
>
>> I'm using these packages since 2015 and I need to upgrade some servers
>> that I support form Asterisk 16 to 20 and I was wondering if could
>> continue to use Debian packages (even if I need to backport them from
>> unstable to bookworm) or if I need to go in other direction (find some
>> alternative Debian packaging, or compile/package it myself).
> Whether you find the current level of care for Asterisk in Debian
> superior or inferior to whatever support you can achieve elsewhere is
> something I cannot really answer.  You do not *need* to go elsewhere, if
> that is really what you are asking here.
>
> Kind regards, and thanks for your interest in Debian and Asterisk,
>
>   - Jonas