From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id 0GB7K23OAWCUUgAA0tVLHw (envelope-from ) for ; Fri, 15 Jan 2021 17:18:37 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id cK5fJ23OAWBGMQAAbx9fmQ (envelope-from ) for ; Fri, 15 Jan 2021 17:18:37 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 11A919403EB for ; Fri, 15 Jan 2021 17:18:37 +0000 (UTC) Received: from localhost ([::1]:51362 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1l0Sk7-0000qC-Nj for larch@yhetil.org; Fri, 15 Jan 2021 12:18:35 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:39448) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1l0Sjv-0000pS-8F for help-guix@gnu.org; Fri, 15 Jan 2021 12:18:23 -0500 Received: from knopi.disroot.org ([178.21.23.139]:41392) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1l0Sjr-0000LQ-CD for help-guix@gnu.org; Fri, 15 Jan 2021 12:18:23 -0500 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 4758A5339C; Fri, 15 Jan 2021 18:18:17 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with UTF8SMTP id kgcrzR48oix5; Fri, 15 Jan 2021 18:18:15 +0100 (CET) From: Jorge P. de Morais Neto DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1610731095; bh=XPQHRpegXSyiHgac/6CWXR2irI5K4Nmddw8CaIarQng=; h=From:To:Subject:In-Reply-To:References:Date; b=ctd31KOLjAV6UqOOqOF5QfHQ27h3CbDjszfBbFr4KxKc9SRPTxAbZiLeAz9bxwmqs yuPf1sA9SEaZ+iZqki+UBdaiJcEZkhS6YvsiWgDydBX3mD7nbZFv8qD2yecFWMP0oW bBUWu+3nFhvaFURBYbi+n4fYSWGxs7WdrbCU8m25YgrFZN3HdGwAsSrW0GgOWDB/27 iJb6oPC6p7qXDdcfiebWduwG6HBxoH8dsdZnSttJl3pYJo44FI5gUbotFA01073FRk 3HwEJ+cahiQXklrbsDjN6e1cFyUYdgv4wg6eAu/UgZjscsI5CYKtDgPubkgIxhkKr4 vduRW0DWne5tA== To: zimoun , help-guix Subject: Re: Does Guix provide security support for Python2? For how long? In-Reply-To: References: <87ft325gws.fsf@disroot.org> Mail-Followup-To: zimoun , help-guix Date: Fri, 15 Jan 2021 14:18:09 -0300 Message-ID: <87czy65dbi.fsf@disroot.org> Mime-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=178.21.23.139; envelope-from=jorge+list@disroot.org; helo=knopi.disroot.org X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: -1.56 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=disroot.org header.s=mail header.b=ctd31KOL; dmarc=pass (policy=quarantine) header.from=disroot.org; spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Migadu-Queue-Id: 11A919403EB X-Spam-Score: -1.56 X-Migadu-Scanner: scn1.migadu.com X-TUID: TgYJuQiQLczX Hi. Em [2021-01-15 sex 18:07:40+0100], zimoun escreveu: > As far as I know, Guix provides the security support that upstream > releases. I too suppose so in general. But I would like a more authoritative answer for the specific case of Python2. And, in fact, this should be publicly documented---in the manual or in the website, as well as the description of the python2 package and maybe also in the description of all python2-.* packages. > Using the Guix time-machine, the code that works now should work > exactly the same in the future, even if Python 2 is removed in the > future Guix releases. Does it make sense? The problem is that OfflineIMAP is Internet software, and therefore, I believe, it is important to have security support for it (including its dependencies). Regards -- - - If an email of mine arrives at your spam box, please notify me. - Please adopt free/libre formats like PDF, ODF, Org, LaTeX, Opus, WebM and 7z. - Free/libre software for Replicant, LineageOS and Android: https://f-droid.org - [[https://www.gnu.org/philosophy/free-sw.html][What is free software?]]