We (upstream) already elaborated many years ago, copied here:
http://luke.dashjr.org/tmp/code/20130723-linux-distribution-packaging-and-bitcoin.md.asc
At a minimum, to be safe, Debian would need to:
1) Either:
1a) Build with the bundled LevelDB statically linked.
1b) Guarantee LevelDB package remains consensus-compatible, including NOT
fixing any bugs without a proper consensus-compatibility audit.
2) Backport (at least) security fixes for Debian's security support period.
Upstream, we generally only maintain releases for a year or so at most.
Luke
On Thursday 07 January 2021 13:51:50 Jonas Smedegaard wrote:
> Quoting Debian Bug Tracking System (2020-12-27 19:33:02)
>
> > Processing commands for cont...@bugs.debian.org:
> > > reopen 718272
> >
> > Bug #718272 {Done: Jonas Smedegaard <jo...@jones.dk>} [src:bitcoin]
> > upstream does not support stable releases (block migration to testing)
> > Bug reopened
> > Ignoring request to alter fixed versions of bug #718272 to the same
> > values previously set
> >
> > > thanks
> >
> > Stopping processing here.
> >
> > Please contact me if you need assistance.
>
> I consider Bitcoin suitable for release with stable Debian.
>
> If seciurity team or others disagree with that, then please elaborate on
> your concerns.
>
>
> - Jonas
