Firmware-nonfree update for buster?

Path	csiph.com!aioe.org!bofh.it!news.nic.it!robomod
From	Ola Lundqvist <ola@inguza.com>
Newsgroups	linux.debian.kernel
Subject	Firmware-nonfree update for buster?
Date	Mon, 17 May 2021 12:20:01 +0200
Message-ID	<CfIvT-5D1-1@gated-at.bofh.it> (permalink)
X-Mailbox-Line	From debian-kernel-request@lists.debian.org Mon May 17 10:12:09 2021
Old-Return-Path	<ola.lundqvist@gmail.com>
X-Amavis-Spam-Status	No, score=-4.498 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, FREEMAIL_FORGED_FROMDOMAIN=0.249, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_MESSAGE=2, LDO_WHITELIST=-5, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001] autolearn=no autolearn_force=no
X-Policyd-Weight	using cached result; rate: -5.5
X-Gm-Message-State	AOAM531R7J4OZeo0UIj6G6M3b24kK5XT90eYGhE8r8U14XxzGryBiCpu 1D5g0eoLySx6ESePWlOREOxq49/hJDwmxnGegXdKaJRZlgxTQA==
X-Google-SMTP-Source	ABdhPJzS9XUL8WDy87OaSTRpYghYTxH+JunM4quj8r32/R4yPoc+s4QaoSel+tRKWF+dbjyHceDR0UhCSGvvFI6ypQQ=
X-Received	by 2002:a65:60d8:: with SMTP id r24mr60548822pgv.226.1621245256334; Mon, 17 May 2021 02:54:16 -0700 (PDT)
MIME-Version	1.0
Content-Type	multipart/alternative; boundary="00000000000098fe4c05c2839375"
X-Mailing-List	<debian-kernel@lists.debian.org> archive/latest/129660
List-ID	<debian-kernel.lists.debian.org>
List-URL	<https://lists.debian.org/debian-kernel/>
List-Archive	https://lists.debian.org/msgid-search/CABY6=0=Y3Z7g39x5LCSNnzec05JsvEQOeruuQsbmo6Thb+iAxQ@mail.gmail.com
Approved	robomod@news.nic.it
Lines	78
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Cc	Debian LTS <debian-lts@lists.debian.org>
X-Original-Date	Mon, 17 May 2021 11:54:05 +0200
X-Original-Message-ID	<CABY6=0=Y3Z7g39x5LCSNnzec05JsvEQOeruuQsbmo6Thb+iAxQ@mail.gmail.com>
Xref	csiph.com linux.debian.kernel:71674

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

Hi firmware-nonfree maintainers

I have a question from an LTS perspective about the possible security
updates we have for the firmware-nonfree package.

You can find them here:
https://security-tracker.debian.org/tracker/source-package/firmware-nonfree

I can see that all the related CVEs are marked as no-dsa for buster, simply
because there is no security support for the non-free section. This rule
also applies to LTS but with the exception of the firmware-nonfree package.

My questions to you are the following:
1) Do you think any of the listed CVEs are important enough to warrant an
upload to buster and/or stretch?
2) Do you plan to do this for buster?
3) Would you mind if some LTS developer does such an upload for buster?

Having a later version in oldstable (compared to stable) is not a
good practice so if any of them are important we should update both
oldstable and stable.

Thank you in advance,

// Ola


-- 
 --- Inguza Technology AB --- MSc in Information Technology ----
|  ola@inguza.com                    opal@debian.org            |
|  http://inguza.com/                Mobile: +46 (0)70-332 1551 |
 ---------------------------------------------------------------

Back to linux.debian.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Firmware-nonfree update for buster? Ola Lundqvist <ola@inguza.com> - 2021-05-17 12:20 +0200
  Re: Firmware-nonfree update for buster? Moritz Muehlenhoff <jmm@inutil.org> - 2021-05-17 12:50 +0200
    Re: Firmware-nonfree update for buster? Ola Lundqvist <ola@inguza.com> - 2021-05-19 09:40 +0200
      Re: Firmware-nonfree update for buster? Moritz Muehlenhoff <jmm@inutil.org> - 2021-05-19 09:40 +0200

csiph-web