Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #4392
| From | Moritz Mühlenhoff <jmm@inutil.org> |
|---|---|
| Newsgroups | linux.debian.security |
| Subject | Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life |
| Date | 2015-11-02 20:10 +0100 |
| Message-ID | <qqsEp-Gy-1@gated-at.bofh.it> (permalink) |
| References | <qq9s6-5Gg-3@gated-at.bofh.it> <qq9V7-65A-11@gated-at.bofh.it> |
| Organization | Cocytus |
Vincent Bernat <bernat@debian.org> wrote:
> There are many tradeoffs recently with projects that do not want to
> provide a sensible security track for stable releases:
>
> - always package the latest release (Chromium)
For chromium and iceweasel the vast amount of security issues doesn't leave
much other options.
elasticsearch isn't that category, they simply have chosen to be secretive
from now on and I don't see why we should cater to uncooperative upstreams
with special handling.
Hopefully we'll have PPAs/bikesheds soon, that seems like a proper candidate
for cases like that.
Cheers,
Moritz
Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Vincent Bernat <bernat@debian.org> - 2015-11-02 00:10 +0100
Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Rhonda D'Vine <rhonda@deb.at> - 2015-11-02 10:00 +0100
Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Moritz Mühlenhoff <jmm@inutil.org> - 2015-11-02 20:10 +0100
Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Ansgar Burchardt <ansgar@debian.org> - 2015-11-03 09:40 +0100
Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Moritz Mühlenhoff <jmm@inutil.org> - 2015-11-04 18:40 +0100
Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Vincent Bernat <bernat@debian.org> - 2015-11-04 00:00 +0100
Re: [SECURITY] [DSA 3389-1] elasticsearch end-of-life Moritz Mühlenhoff <jmm@inutil.org> - 2015-11-04 18:40 +0100
csiph-web