Re: [RFC][PATCH 1/2] nss: Move to meta-oe

[Adrian Bunk <bunk@stusta.de>]

On Wed, Mar 04, 2020 at 10:36:52AM +0100, Alexander Kanavin wrote:
> You are misinterpreting the announcement. The security updates are provided
> by users as patches to the mailing list, maintainers merely collect and
> integrate them. There is no promise from the project to do anything else,
> and LTS doesn’t change that, it only extends the maintainer duty from one
> year to two. Moving a recipe in or out of core does not fundamentally
> change how much attention it gets w.r.t. security fixes.

The part in question does not even talk about LTS, it describes the 
status quo for the current stable releases with one year support.

>...
> > <--  snip  -->
> >
> > Yocto Project releases are usually maintained for one year.
> > Beyond this period, releases move to community support, which means
> > they only receive occasional patches for critical defects and updates,
> > and no regular defect fixes and security updates.
> >
> > <--  snip  -->
>...

This announcement states pretty clearly that security updates are
provided for stable branches, but not for community supported branches.

I am sure there will be an update to the announcement if this doesn't
reflect current reality.

cu
Adrian