Web lists-archives.com

Re: end of security support for wheezy LTS




On Tue 13 Feb 2018 at 14:28:51 (-0500), Gene Heskett wrote:
> On Tuesday 13 February 2018 09:28:06 David Wright wrote:
> 
> > On Tue 13 Feb 2018 at 11:03:29 (+0000), Adam Weremczuk wrote:
> > > Hi all,
> >
> > Hello again,
> >
> > > Our PCI compliance scanner (probably falsely) claims it's
> > > 2018-05-01.
> > >
> > > The Wikipedia page:
> > > https://en.wikipedia.org/wiki/Debian_version_history just says "May
> > > 2018".
> > >
> > > Debian website:
> > >
> > > https://www.debian.org/releases/wheezy/
> > > https://wiki.debian.org/LTS
> > >
> > > clearly states "end of May 2018".
> > >
> > > I'm treating the latter as the more reliable source.
> > >
> > > My related question:
> > >
> > > Is it likely for this date to still be moved forward or back?
> > > Can it happen on a short notice (say less than a month)?
> >
> > No idea, but the people here may by closer to the action:
> > https://wiki.debian.org/LTS/Contact
> > They're all open lists.
> 
> I noted one thing on the frexian pages, the prices for funding are in 
> euro's.  And since I run on dollars, would need an exchange rate.

  USD US Dollars       0.7235642449 1.3820472847
  EUR Euros            0.8866900420 1.1277898168
  GBP British Pounds   1.0000000000 1.0000000000

> Those prices would appear to be aimed at a corporate setting, as opposed 
> to something that a retiree on SS might be able to afford, nor is the 
> plea taken as being aimed at me. IMO this is a mistake.

I think that the LTS is aimed at people who might have invested
heavily in the OS and need a longer timescale to migrate their
systems. We hear about banks still running programs from the 1960s.

> I am well aware 
> of the TANSTAAFL principle, and if the paperwork didn't drown them, 
> would be able to make an annual donation of perhaps $100 toward the 
> expenses of the LTS. Tain't much, but how many other old farts like me 
> would be willing to do likewise?

To what end? If you're still running your lathes on wheezy, why not
just isolate them from the Internet to avoid any security dangers.

> On a secondary note, I see armel and armhf? listed there, but what about 
> arm64 since there are now, shipping versions of arm64 out in the wild 
> for at least a year.

If that's how new they are to the world, why would people install
wheezy on them?

Cheers,
David.