Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.security > #4400

Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life

From Vincent Bernat <bernat@debian.org>
Newsgroups linux.debian.security
Subject Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life
Date 2015-11-04 00:00 +0100
Message-ID <qqSIy-vE-3@gated-at.bofh.it> (permalink)
References <qq9s6-5Gg-3@gated-at.bofh.it> <qq9V7-65A-11@gated-at.bofh.it> <qqsEp-Gy-1@gated-at.bofh.it>
Organization Debian

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

 ❦  2 novembre 2015 20:00 +0100, Moritz Mühlenhoff <jmm@inutil.org> :

>> There are many tradeoffs recently with projects that do not want to
>> provide a sensible security track for stable releases:
>>
>>  - always package the latest release (Chromium)
>
> For chromium and iceweasel the vast amount of security issues doesn't leave
> much other options.
>
> elasticsearch isn't that category, they simply have chosen to be secretive
> from now on and I don't see why we should cater to uncooperative upstreams
> with special handling.

So, it's a bit like MySQL and VirtualBox, isn't it? Except they don't
provide any stable branch.

Note that I understand the decision (and I support it). I was just
curious about the direction for the project.
-- 
The secret source of humor is not joy but sorrow; there is no humor in Heaven.
		-- Mark Twain

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Vincent Bernat <bernat@debian.org> - 2015-11-02 00:10 +0100
  Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Rhonda D'Vine <rhonda@deb.at> - 2015-11-02 10:00 +0100
  Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Moritz Mühlenhoff <jmm@inutil.org> - 2015-11-02 20:10 +0100
    Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Ansgar Burchardt <ansgar@debian.org> - 2015-11-03 09:40 +0100
      Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Moritz Mühlenhoff <jmm@inutil.org> - 2015-11-04 18:40 +0100
    Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Vincent Bernat <bernat@debian.org> - 2015-11-04 00:00 +0100
      Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Moritz Mühlenhoff <jmm@inutil.org> - 2015-11-04 18:40 +0100

csiph-web