Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1008398

Bug#959723: RM: matrix-synapse/0.99.2-6 -- ROM; security issues; obsolete version

Cross-posted to 2 groups.

Show all headers | View raw

On Mon, May 04, 2020 at 11:04:21PM +0200, Andrej Shadura wrote:
> On Mon, May 04, 2020 at 06:33:26PM +0200, Julien Cristau wrote:
> > > I think in this case it’s okay because of this NEWS entry:
> > > 
> > > https://sources.debian.org/src/matrix-synapse/0.99.2-6/debian/NEWS/
> 
> > I'm not sure how that makes it any better?  NEWS is shown on upgrade at
> > best, so anyone installing this on buster won't see it.
> 
> True; I haven’t thought about people who never had synapse installed
> before. In any case, I think anyone installing this on buster does
> follow the news about Matrix and probably tried to figure out how to
> upgrade.

Notifying users about an EOL package is handled by debian-security-support,
simply file a bug against it and the next time it lands in stable, people
will be notified who have it installed.

I'm all in favour of removing it by 10.4 or 10.5, depending on whether
the timing still allows for 10.4.

Cheers,
        Moritz

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Bug#959723: RM: matrix-synapse/0.99.2-6 -- ROM; security issues; obsolete version Andrej Shadura <andrewsh@debian.org> - 2020-05-04 15:40 +0200
  Bug#959723: RM: matrix-synapse/0.99.2-6 -- ROM; security issues; obsolete version Julien Cristau <jcristau@debian.org> - 2020-05-04 18:40 +0200
    Bug#959723: RM: matrix-synapse/0.99.2-6 -- ROM; security issues; obsolete version Andrej Shadura <andrew@shadura.me> - 2020-05-04 23:10 +0200
      Bug#959723: RM: matrix-synapse/0.99.2-6 -- ROM; security issues; obsolete version Moritz Mühlenhoff <jmm@inutil.org> - 2020-05-06 23:30 +0200

csiph-web