Bug#1004689: Bug #1004689: xterm: CVE-2022-24130
On 2022-02-07 14:44 -0500, Chris Frey wrote:
> Just curious why this bug is marked high priority for stretch but
> low priority for buster and bullseye?
>
> https://tracker.debian.org/pkg/xterm
>
> Is there something different in their builds?
No, not really. The security team has decided not to issue a DSA for
the problem, so it will need to be fixed in a point release; I am
preparing uploads to bullseye and buster,
Debian stretch is maintained by the LTS team, and there are no point
releases anymore, so all uploads go through the security archive. The
same already happened for #982439 aka CVE-2021-27135.
Hope this explains the discrepancy.
Cheers,
Sven
Reply to: