Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1017450

Bug#959723: RM: matrix-synapse/0.99.2-6 -- ROM; security issues; obsolete version

Cross-posted to 2 groups.

Show all headers | View raw

On Wed, May 06, 2020 at 11:22:42PM +0200, Moritz Mühlenhoff wrote:
> On Mon, May 04, 2020 at 11:04:21PM +0200, Andrej Shadura wrote:
> > On Mon, May 04, 2020 at 06:33:26PM +0200, Julien Cristau wrote:
> > > > I think in this case it’s okay because of this NEWS entry:
> > > > 
> > > > https://sources.debian.org/src/matrix-synapse/0.99.2-6/debian/NEWS/
> > 
> > > I'm not sure how that makes it any better?  NEWS is shown on upgrade at
> > > best, so anyone installing this on buster won't see it.
> > 
> > True; I haven’t thought about people who never had synapse installed
> > before. In any case, I think anyone installing this on buster does
> > follow the news about Matrix and probably tried to figure out how to
> > upgrade.
> 
> Notifying users about an EOL package is handled by debian-security-support,
> simply file a bug against it and the next time it lands in stable, people
> will be notified who have it installed.
> 
> I'm all in favour of removing it by 10.4 or 10.5, depending on whether
> the timing still allows for 10.4.

Let's remove it for the upcoming 10.5 update, then?

Cheers,
        Moritz

Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#959723: RM: matrix-synapse/0.99.2-6 -- ROM; security issues; obsolete version Moritz Mühlenhoff <jmm@inutil.org> - 2020-07-10 19:20 +0200
  Bug#959723: RM: matrix-synapse/0.99.2-6 -- ROM; security issues; obsolete version "Andrej Shadura" <andrew@shadura.me> - 2020-07-11 10:10 +0200

csiph-web