On 1/4/22 00:29, Axel Braun wrote:
Hello Simon,
Am Montag, 3. Januar 2022, 14:47:34 CET schrieb Simon Lees:
The real discussion is about what Python version the system packages have to use.
Yes.
In my case e.g. aehostd is system software. Now try to explain to an auditor that this security relevant system software runs on a unmaintained Python version. Yeah, have fun.
This is simple, the python 3.6 is still maintained just by a different group of people, if significant python 3.6 security issues are found they will be fixed by someone within SUSE, this is a guarantee we give to our customers
Its not just the python 3.6 base packages, as well other packages have to be kept on a version that still runs with 3.6. This is a growing number of packages, as many are dropping support for python 3.6. Who is taking care about them?
For SLE packages SUSE Employees will keep them working, for some openSUSE packages someone in the community will care and do the work and for some others probably no one will care enough to do the work and they will just stay at there existing versions. -- Simon Lees (Simotek) http://simotek.net Emergency Update Team keybase.io/simotek SUSE Linux Adelaide Australia, UTC+10:30 GPG Fingerprint: 5B87 DB9D 88DC F606 E489 CEC5 0922 C246 02F0 014B