Re: Security support incomplete? (was: Re: [SECURITY] [DSA 3455-1] curl security update)
On Tuesday, 2016-02-02 at 17:14:42 +0100, Yves-Alexis Perez wrote:
> On mar., 2016-02-02 at 17:37 +0200, Wolfgang Jeltsch wrote:
> > Can anyone please clarify? In particular, I would like to know what the
> > exact policies regarding coverage of security support are, and what
> > issues have not been fixed intentionally in oldstable (and maybe even
> > stable).
> Everything is in the tracker.
This is three-fold: the DSA does not mention oldstable at all, the DSA
does not link to the tracker, and the text in the tracker page does not
really justify the decision to leave oldstable unfixed "Too intrusive
to backport". What?!? The link with that text points to a page that does
nothing to explain the decision.
Lupe Christoph
--
| As everyone knows, it was predicted that the world would end last |
| Wednesday at 10:00 PST. Since there appears to be a world in existence |
| now, the entire universe must therefore have been recreated, complete |
| with an apparent "history", last *Thursday*. QED. |
| Seanna Watson, <1992Nov2.165142.11847@bcrka451.bnr.ca> |
Reply to: