Thumbor is on Stretch, there's a task to update to Buster.
phab:T216815 is a request of updating phab:tag/thumbor/ to Debian Buster, however it is not clear to me which version thumbor is currently using.
Is it correct that phab:tag/thumbor/ still uses the old Debian Jessie? (Regular security support updates till June 2018ref; End of long-term-support: June 2020ref)
@AKlapper (WMF) @AntiCompositeNumber Is there somewhere a public information, which software Wikimedia components/thumbor is using?
This does not sound like a question about Phabricator itself, but about Thumbor?
No, Thumbor is on Debian Stretch (currently oldstable). I don't know of an authoritative public list of what uses what version, though I can say that there shouldn't be anything running Jessie anywhere. https://apt-browser.toolforge.org/ is broken down by OS target, which can give an indication for services using a Debian package like Thumbor.
