On Monday, January 12, 2026 4:43:37 PM Mountain Standard Time Peter Blackman wrote: > On 12/01/2026 15:25, Michael Biebl wrote: > > Where do you expect that security fixes come from if there is no more active > > upstream? > Hi Michael, > > Where do you expect the security bugs to come from if there is no more active > upstream? Do you mean where do you expect the security bugs to come from (they are already in the code) or where do you expect the person looking for the security bugs to come from? The second question is what needs to be resolved before GTK2 can be allowed to remain in Debian without upstream security support. -- Soren Stoutner soren@debian.org
Attachment:
signature.asc
Description: This is a digitally signed message part.