On 12/29/2019 8:44 PM, Andreas wrote:
I was supposing that Mark's answer implied that (against general policies of debian and for reasons unknown to me) in this case security changes of upstream would be passed on to debian, even if binutils is "not covered by security support". If this is (probably?) not the case, the fact that binutils is supported by upstream of course is of no help.
My answer was the naive one, that assumes that the upstream even cares. Of course Debian adds its own patches and "spin", and upstream doesn't care about that. Everyone may recall the random number debacle...
Mark