Re: How to interpret packages-to-support

[Sylvain Beucler <beuc@beuc.net>]

Hi,

In LTS triage, 'packages-to-support' is only relevant for non-free packages.

Some sponsors requested updates for nvidia-graphics-drivers, so even if 
it is in (unsupported) non-free, LTS supports it.

However no sponsors requested updates for (separate) 
nvidia-graphics-drivers-legacy-340xx, so we <ignore> those.

(also AFAIU we probably can't support 340xx which is EOL'd upstream, and 
I think the same issue is currently happening with 390xx.)

Cheers!
Sylvain

On 22/05/2022 23:20, Ola Lundqvist wrote:
> Hi Roberto, Sylvain, all
>
> I have the same view as you, almost. The LTS packages-to-support list
> has some meaning since it indicates how important packages is to
> update so it gives some priority information.
>
> The thing here is that in this case the package I asked for is
> non-free, and that means that it is not generally supported. But since
> we have a very similar package in the packages-to-support list I was
> wondering whether we should support this one too.
>
> Specifically for nvidia-graphics-drivers-legacy-340xx I wonder if we
> should support it even if it is in the non-free section because we say
> we should support nvidia-graphics-drivers.
>
> I guess I will not get an answer today so I'll leave this to the next
> front-desk person (Sylvain) tomorrow.
>
> Cheers
>
> // Ola
>
> On Fri, 20 May 2022 at 23:51, Roberto C. Sánchez <roberto@debian.org> wrote:
> > On Fri, May 20, 2022 at 11:09:47PM +0200, Ola Lundqvist wrote:
> > > Hi LTS team
> > >
> > > I looked at nvidia-graphics-drivers-legacy-340xx who have two CVEs. I
> > > can see that this package is not in "packages-to-support" for LTS. But
> > > I can see that nvidia-graphics-drivers is.
> > > I'm not sure how to interpret this. Do the entry in
> > > packages-to-support mean that all nvidia-graphics-drivers packages
> > > should be supported or just the specific one listed.
> > >
> > > Anyone know this?
> > Hi Ola,
> >
> > I encountered this some time back when I was doing FD work.  My
> > recollection of Raphael's guidance is that packages-to-support really
> > only applies for ELTS (where sponsors decide which specific packages
> > they will pay to support).  For LTS, we support all packages except
> > those which the Security Team had previously decided to drop and those
> > which the LTS Team has decided to drop.  The LTS triage script retrieves
> > the current list from debian-security-support package, so it should
> > point out which packages are EOL or have limited security support.  All
> > other packages are supported as usual.