Bug#971515: Request for security team input on kubernetes TC bug

2020-11-17 Thread Florian Weimer
* Moritz Mühlenhoff: > On Sun, Nov 08, 2020 at 10:49:31PM +0100, Florian Weimer wrote: >> * Moritz Mühlenhoff: >> >> > * Follow a scheme similar to Firefox ESR where in case of a security >> > the update either happens to the latest minor release of >> > the current branch or if that has

Bug#971515: Request for security team input on kubernetes TC bug

2020-11-17 Thread Moritz Mühlenhoff
On Sun, Nov 08, 2020 at 10:49:31PM +0100, Florian Weimer wrote: > * Moritz Mühlenhoff: > > > * Follow a scheme similar to Firefox ESR where in case of a security > > the update either happens to the latest minor release of > > the current branch or if that has stopped, happens to the next > >

Bug#971515: Request for security team input on kubernetes TC bug

2020-11-17 Thread Moritz Mühlenhoff
Catching up on this... > > This leaves Debian with two options: > > * Keep it out of a stable release and accept that it's good enough > > if people just install whatever deb they currently find in testing/sid > > (works out well enough for most given that blob nature of Go!) > > IMHO this

Bug#971515: Request for security team input on kubernetes TC bug

2020-11-08 Thread Florian Weimer
* Moritz Mühlenhoff: > * Follow a scheme similar to Firefox ESR where in case of a security > the update either happens to the latest minor release of > the current branch or if that has stopped, happens to the next > major release. To map this to specific k8s releases: Let's assume

Bug#971515: Request for security team input on kubernetes TC bug

2020-10-27 Thread Dmitry Smirnov
On Wednesday, 28 October 2020 6:13:41 AM AEDT Moritz Mühlenhoff wrote: > The bigger issue here (independent of the whole vendoring aspect) is > how kubernetes can be supported in a stable release to begin with. > This was raised by Shengjing Zhu in #959685 before. If Kubernetes can be supported

Bug#971515: Request for security team input on kubernetes TC bug

2020-10-27 Thread Moritz Mühlenhoff
On Wed, Oct 21, 2020 at 08:22:11AM -0700, Sean Whitton wrote: > Hello security team, > > The TC are being asked about src:kubernetes, and it would be good to > hear from you about whether and how security support is a relevant > consideration in determining whether the level of vendoring in that

Bug#971515: Request for security team input on kubernetes TC bug

2020-10-22 Thread Dmitry Smirnov
On Thursday, 22 October 2020 2:22:11 AM AEDT Sean Whitton wrote: > The TC are being asked about src:kubernetes, and it would be good to > hear from you about whether and how security support is a relevant > consideration in determining whether the level of vendoring in that > package is

Bug#971515: Request for security team input on kubernetes TC bug

2020-10-21 Thread Sean Whitton
Hello security team, The TC are being asked about src:kubernetes, and it would be good to hear from you about whether and how security support is a relevant consideration in determining whether the level of vendoring in that package is acceptable. Could you take a look at #971515 and perhaps