[Python-modules-team] Bug#953950: python-twisted: twisted version 14.0.2-3+deb8u1 in jessie (security) is broken

[Emilio Pozuelo Monfort]

Hi,

On 19/03/2020 13:01, Simon McVittie wrote:
> On Thu, 19 Mar 2020 at 12:33:09 +0100, Etienne Allovon wrote:
>> Subject: python-twisted: twisted version 14.0.2-3+deb8u1 in jessie
>> (security) is broken
> 
> Debian 8 'jessie' is no longer supported by the mainstream Debian
> security team

Etienne probably meant that the update comes from jessie-security, which is correct.

> or by the maintainers of individual packages. Instead, it

That's not necessarily correct. While many maintainers don't care about LTS,
some others do and they help provide security updates in coordination with the
LTS team.

> is maintained by the Debian LTS subproject. Please contact the debian-lts
> mailing list <debian-lts at lists.debian.org> if you encounter regressions
> in jessie or jessie-security packages.
> 
> (LTS people: please see the bug for details, and please make sure the
> message is getting out to LTS users that they should be contacting the
> LTS team and not the bug tracking system.)

Actually the bug tracker is a good place to report regressions in LTS, just like
it's fine for stable. reportbug has a feature to Cc the security team or the LTS
list if it detects that the package comes from such a suite. That probably
didn't work here because it was a follow-up to an already opened bug, but in
general I wouldn't see an issue with reporting a bug against the package.

In any case, thanks Etienne for reporting this regression, and thank you Simon
for letting us know.

Cheers,
Emilio