Re: Mutt for oldstable
On Wed, 19 Mar 2014, Henrik Ahlgren wrote:
> On Wed, Mar 19, 2014 at 03:29:24PM +0100, Matteo F. Vescovi wrote:
> > http://packages.qa.debian.org/m/mutt/news/20140316T193245Z.html
>
> Sure, the oldstable version (1.5.20-9+squeeze3) has been patched, but
> users of the backported-from-wheezy version (1.5.21-5~bpo60+1) would
> need to downgrade to a really old version in order to have the
> vulnerability patched, instead upgrading to version backported from
> 1.5.21-6.2+deb7u2.
>
> I understand that backports do not have any security support other
> than best effort, so it is not unreasonable to expect people to have
> to downgrade sometimes, or build their own packages.
Technically spoken the package has already been upload, it is just waiting
for someone processing the policy queue. Which is what I am doing now.
Alex
Reply to: