Security support for pypy and jython
Hello Security Team,
python2.7 was marked unsupported in bullseye.
We recently noted that pypy[v2] (included up to bullseye) and jython
(all dists) include the python2 stdlib. Unlike pypy3, neither package
currently track the associated CVEs.
Do we want to mark pypy and jython as EOL, or limited-support, in
debian-security-support?
Incidentally are there other packages that mass-embed python2 stdlib
that we should also consider (I checked data/embedded-code-copies)?
Cheers!
Sylvain Beucler
Debian LTS Team
Reply to: