dbus 1.10.x: end-of-life plans

[Simon McVittie]

dbus is the reference implementation of D-Bus, a message bus for
communication between applications and system services.

I am currently maintaining dbus 1.10.x security releases for the benefit
of Debian 9. After the end of mainstream security support for Debian 9
(date to be determined, but probably about a month from now[1]), I am
no longer intending to make these releases.

If you are a dbus downstream maintainer in a long-lived OS distribution
and you want to use the upstream dbus-1.10 git branch as a place to share
backported security fixes with other distributions, please contact the
dbus maintainers via the dbus-security at lists.freedesktop.org list.

As a reminder, odd-numbered development branches of dbus (1.1.x, 1.3.x,
etc.) do not have any security support. Security fixes applicable to
the current development branch (at the time of writing this is 1.13.x)
are released as part of normal development releases, which typically
also include feature work that might be destabilizing. Older development
branches are considered to have been superseded by the stable-branch
that followed them (for example 1.12.x replaces 1.11.x) and will not
receive any more releases at all. OS distributors should not use a
development branch unless they can promise that they will upgrade to the
stable-branch that follows it, for example moving from 1.13.x to 1.14.x
when 1.14.0 becomes available.

    smcv

[1] The Debian security team aims to support each release "for about
    one year after the next stable distribution has been released",
    and Debian 10 was released on 2019-07-06, which would put the EOL
    date for Debian 9 around 2020-07-06.

-- 
Simon McVittie, Collabora Ltd.
on behalf of the dbus maintainers