Ahoy,
I installed debian-security-support on my mostly-fresh Trixie system and was surprised to see this assertion:

I was curious so I checked that bug #975058, which is for debian-security-support in regards to "Python 2 support state for Bullseye." And the rationale there is explicit:


In fact the debian-security-support changelog says Cython was added several months *after* it dropped its Python 2 support, so doesn't this mean including Cython at all was always a mistake?

I don't know much about the Python ecosystem but it does look like Cython shouldn't have been added at all, and it's likely a false alarm on Trixie now.